Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa
File: 3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa (raw, json)
Hash identifier: J9f5MdM7lY82JJpZ4OW3xMd83Gwvw9ya6YdaPskXqNA=
Subject key identifier: BF:51:9E:17:EA:E9:23:E8:DF:13:AC:28:1B:04:42:D4:44:B7:E4:8F
Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492
Certificate serial: 571E7CB11076F7D26A938D7342CF95371286C814
Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa
Signing time: Mon 21 Jul 2025 05:01:01 +0000
ROA not before: Mon 21 Jul 2025 04:56:01 +0000
ROA not after: Mon 20 Jul 2026 05:01:01 +0000
asID: 139391
IP address blocks: 103.143.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1e:7c:b1:10:76:f7:d2:6a:93:8d:73:42:cf:95:37:12:86:c8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492
Validity
Not Before: Jul 21 04:56:01 2025 GMT
Not After : Jul 20 05:01:01 2026 GMT
Subject: CN=BF519E17EAE923E8DF13AC281B0442D444B7E48F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:64:96:5b:9c:0d:45:a1:42:c3:10:e0:8f:
a1:3e:87:14:55:7c:5a:e3:33:f7:e0:b7:5b:66:d3:
cb:f5:de:9c:1e:59:7a:c0:aa:52:d3:d1:83:c7:4c:
22:82:1f:38:59:4e:00:08:84:b5:e2:d4:5d:9e:ed:
de:70:a1:20:31:84:35:28:7f:dc:53:32:a1:46:72:
9b:b4:71:8d:12:c6:f5:a6:e7:fc:6f:0c:9b:af:99:
69:76:5b:3e:26:b9:14:e2:b0:7c:83:23:6f:a9:b9:
e2:0a:50:04:ff:5a:cf:44:85:0a:ab:e9:11:0d:62:
6b:e7:bb:71:db:c8:bb:c0:34:75:4b:9f:86:ac:3b:
04:15:e0:08:96:01:25:80:e8:bd:43:eb:29:e5:ce:
f6:73:b3:9f:be:ee:e7:75:50:96:41:63:ff:b1:2e:
df:a1:ca:0d:03:e2:11:fe:f6:92:43:38:e8:a8:b6:
0d:12:65:bd:b6:e3:d1:b6:21:70:e1:43:48:f8:f9:
8d:a2:7b:46:e0:18:c0:be:58:36:88:b4:b7:3c:42:
a7:9b:85:d1:58:83:16:97:a4:fe:a4:ec:99:59:32:
ad:c0:6a:9e:64:af:6e:d3:90:be:9a:77:35:09:c7:
c2:7f:52:c0:af:41:79:94:0c:c3:92:c2:ea:1b:8d:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:51:9E:17:EA:E9:23:E8:DF:13:AC:28:1B:04:42:D4:44:B7:E4:8F
X509v3 Authority Key Identifier:
keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.69.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bc:26:4e:a8:3b:1e:71:9d:0a:a8:2e:1b:e1:f9:22:81:ee:
d9:41:3a:39:bf:6e:52:ed:91:4f:5c:92:d1:f0:4d:a1:13:35:
c5:2f:30:13:cf:c0:90:00:67:2f:f1:eb:d7:ab:4b:87:22:2f:
d6:26:57:9e:40:c3:3b:0f:b1:ae:d8:8e:87:e2:0a:a5:39:9a:
75:c3:42:81:17:8f:35:cc:34:23:7c:7a:a7:49:ae:85:41:eb:
bf:84:06:f6:b5:94:87:f7:32:c5:3b:a8:cc:29:be:b8:f3:4f:
13:ee:28:19:ec:02:3d:26:25:75:94:f5:aa:1e:a7:cd:85:e5:
cb:0f:9a:65:02:a1:35:b5:39:46:e9:a8:e2:83:2b:5a:40:f6:
b3:f4:f3:83:35:e0:14:d3:2f:dc:67:e5:53:74:4e:8d:74:5f:
7e:bb:22:0e:08:5d:1a:c5:ca:24:c1:9d:9f:d0:da:e4:80:34:
95:64:72:d7:3c:14:d5:54:97:b0:37:26:d0:bf:b2:da:29:f6:
86:06:ec:26:e4:51:42:c9:a6:23:02:2d:e1:a1:28:5d:f9:86:
cf:eb:fc:aa:47:c1:f2:1e:b8:71:15:58:34:06:c6:c9:9f:e1:
c1:83:06:14:ea:cf:19:c2:d2:9c:ea:f3:f3:40:8c:f3:d8:36:
63:ce:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:12 2025 by rpki-client