Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/3130332e39392e32322e302f32342d3234203d3e20313530343636.roa
File: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (raw, json)
Hash identifier: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=
Subject key identifier: B4:9E:9D:17:51:96:66:32:54:87:61:91:F8:8A:A5:40:74:FD:84:E2
Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27
Certificate serial: 01D5BC88100CEF6F14B8710656DDB3DC7F21423F
Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/3130332e39392e32322e302f32342d3234203d3e20313530343636.roa
Signing time: Sat 18 Jan 2025 02:02:20 +0000
ROA not before: Sat 18 Jan 2025 01:57:20 +0000
ROA not after: Sat 17 Jan 2026 02:02:20 +0000
asID: 150466
IP address blocks: 103.99.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d5:bc:88:10:0c:ef:6f:14:b8:71:06:56:dd:b3:dc:7f:21:42:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27
Validity
Not Before: Jan 18 01:57:20 2025 GMT
Not After : Jan 17 02:02:20 2026 GMT
Subject: CN=B49E9D175196663254876191F88AA54074FD84E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:c6:60:43:d7:8e:4c:6c:46:61:ad:e6:95:
6e:16:80:31:d2:11:4a:b9:59:a1:ba:32:d0:4e:20:
0f:06:8a:49:0b:ec:db:04:35:4d:3d:48:a0:c8:f1:
5c:29:71:de:6a:41:88:ca:2b:7d:8a:2e:c9:1b:1e:
c0:f8:99:bf:ff:d0:95:b9:97:23:d6:4e:ef:f4:4e:
86:15:a3:e1:7d:4f:b9:6f:d3:c6:6f:69:4d:c9:ea:
9e:d4:31:a8:24:c7:78:2c:60:32:5f:bb:ec:d2:95:
73:56:6c:5e:15:11:3b:28:dd:1c:a8:85:70:99:aa:
44:6c:77:7f:fd:56:00:f0:25:b3:ce:64:26:a7:f5:
1f:87:8c:78:98:44:c4:a9:5b:d3:27:e2:64:bc:05:
ed:29:fb:d3:e1:2a:47:02:2a:ad:ab:c8:90:35:dc:
8b:b8:21:3f:82:cb:c5:9c:9b:d2:0e:9b:b2:e7:77:
ec:dd:03:8a:d1:16:7b:8e:8b:68:ea:bc:8f:99:d8:
24:c2:6f:23:92:54:0c:28:79:3c:75:26:d2:e5:76:
56:ca:c3:ab:cb:ac:e7:25:32:38:aa:6f:77:0a:5c:
77:e5:2b:30:70:97:95:ac:5d:a9:00:c5:57:80:01:
15:29:0f:d4:ea:ec:54:0b:79:e3:a1:e4:c6:19:0b:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:9D:17:51:96:66:32:54:87:61:91:F8:8A:A5:40:74:FD:84:E2
X509v3 Authority Key Identifier:
keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/3130332e39392e32322e302f32342d3234203d3e20313530343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:86:c6:f3:ba:cd:07:6b:6c:74:9d:2b:4e:d6:a2:44:24:5a:
da:20:0f:75:a8:c5:9c:75:6a:54:48:ea:6e:a7:9c:a8:0a:6b:
d2:fb:00:f8:44:36:87:ca:e4:01:4f:fd:4d:65:15:46:23:b7:
3b:e4:c9:52:ca:40:82:0b:91:4c:03:7b:c0:42:17:da:7b:83:
5a:b4:cf:86:5e:fd:28:a9:46:fa:e2:7f:03:3a:87:41:45:d6:
f4:9f:a9:0b:b4:2e:ea:6a:27:f3:80:95:5d:96:bc:25:f6:59:
a4:a9:dd:cb:76:d5:b5:e9:41:b5:58:9f:fd:1b:83:9e:a8:c7:
3f:ee:ac:34:10:44:1a:5e:30:bc:e6:f5:83:8c:12:8d:4e:73:
95:a3:e2:15:73:33:36:90:c1:19:3c:a5:d4:28:4d:50:a3:a2:
3f:78:07:10:46:c8:05:80:21:22:4e:2d:c2:06:e9:0b:3e:79:
58:85:cf:f0:d9:ae:e3:ab:91:d7:7a:47:7c:3a:38:07:06:90:
71:81:b1:a5:ab:ac:bd:e6:70:d1:8d:8d:04:fa:57:1c:98:79:
03:f6:a6:dc:f6:89:d1:37:05:fc:bf:a4:b1:d3:b8:9c:88:fa:
5f:8a:4d:d3:5e:a9:06:d7:26:f5:d0:6c:12:d2:c8:5a:06:66:
91:66:ea:c2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAdW8iBAM728UuHEGVt2z3H8hQj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0
QzY1QUEyNzAeFw0yNTAxMTgwMTU3MjBaFw0yNjAxMTcwMjAyMjBaMDMxMTAvBgNV
BAMTKEI0OUU5RDE3NTE5NjY2MzI1NDg3NjE5MUY4OEFBNTQwNzRGRDg0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4x8ZgQ9eOTGxGYa3mlW4WgDHS
EUq5WaG6MtBOIA8GikkL7NsENU09SKDI8Vwpcd5qQYjKK32KLskbHsD4mb//0JW5
lyPWTu/0ToYVo+F9T7lv08ZvaU3J6p7UMagkx3gsYDJfu+zSlXNWbF4VETso3Ryo
hXCZqkRsd3/9VgDwJbPOZCan9R+HjHiYRMSpW9Mn4mS8Be0p+9PhKkcCKq2ryJA1
3Iu4IT+Cy8Wcm9IOm7Lnd+zdA4rRFnuOi2jqvI+Z2CTCbyOSVAwoeTx1JtLldlbK
w6vLrOclMjiqb3cKXHflKzBwl5WsXakAxVeAARUpD9Tq7FQLeeOh5MYZC5zPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUtJ6dF1GWZjJUh2GR+IqlQHT9hOIwHwYDVR0j
BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz
MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1
QUEyNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxZjI1NjM0LWY1ODMtNDZiYy05
ZThjLTMyZGI0Y2NhMzViNi8wLzMxMzAzMzJlMzkzOTJlMzIzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdjFjANBgkqhkiG
9w0BAQsFAAOCAQEA0IbG87rNB2tsdJ0rTtaiRCRa2iAPdajFnHVqVEjqbqecqApr
0vsA+EQ2h8rkAU/9TWUVRiO3O+TJUspAgguRTAN7wEIX2nuDWrTPhl79KKlG+uJ/
AzqHQUXW9J+pC7Qu6mon84CVXZa8JfZZpKndy3bVtelBtVif/RuDnqjHP+6sNBBE
Gl4wvOb1g4wSjU5zlaPiFXMzNpDBGTyl1ChNUKOiP3gHEEbIBYAhIk4twgbpCz55
WIXP8Nmu46uR13pHfDo4BwaQcYGxpausveZw0Y2NBPpXHJh5A/am3PaJ0TcF/L+k
sdO4nIj6X4pN016pBtcm9dBsEtLIWgZmkWbqwg==
-----END CERTIFICATE-----
Generated at Fri May 9 21:27:34 2025 by rpki-client