Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
File: 3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa (raw, json)
Hash identifier: cdZasTprwOiUnQ3Kt4SzWv3w0vffz5PI1Qb7PEDhc6A=
Subject key identifier: A9:CE:1A:03:8C:3A:C2:60:65:1E:8E:EF:53:B9:F7:A3:1B:84:C7:ED
Certificate issuer: /CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
Certificate serial: 314E3AB90C52BF0D7A3FD0820704CBBAC8E54E75
Authority key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
Signing time: Fri 21 Mar 2025 05:02:51 +0000
ROA not before: Fri 21 Mar 2025 04:57:51 +0000
ROA not after: Fri 20 Mar 2026 05:02:51 +0000
asID: 142328
IP address blocks: 103.169.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4e:3a:b9:0c:52:bf:0d:7a:3f:d0:82:07:04:cb:ba:c8:e5:4e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
Validity
Not Before: Mar 21 04:57:51 2025 GMT
Not After : Mar 20 05:02:51 2026 GMT
Subject: CN=A9CE1A038C3AC260651E8EEF53B9F7A31B84C7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:ed:39:5f:03:6e:cb:e7:a5:9b:63:d5:6c:
25:94:89:2e:cd:5f:42:a0:ba:4f:8f:08:1a:57:6b:
67:24:3e:66:57:85:33:f0:15:fd:7a:fa:5d:94:9e:
7b:0f:7e:b9:8b:0b:00:80:aa:f6:b8:ee:2f:7b:7d:
da:c1:c5:c8:35:c0:79:7a:0c:bd:f1:44:de:4d:3c:
cf:ff:98:09:34:78:29:bd:bc:1b:d3:ee:4a:2f:77:
c7:59:0c:5b:9b:f6:9d:2e:5d:a3:52:c1:a8:e9:2b:
eb:e1:8e:99:24:ff:2e:82:b9:b9:78:b7:07:ce:11:
51:ae:b2:bb:90:1a:5f:67:e5:57:ad:46:85:de:ef:
ee:14:55:e7:e5:7b:e8:5b:6c:78:30:88:7c:3f:a1:
cf:0f:ca:1a:da:a5:b6:65:b5:17:b6:a5:d9:4e:eb:
7d:cd:b4:d5:b1:dc:64:8c:03:06:86:20:f3:28:2e:
83:6e:d5:81:c3:59:6a:9a:fd:53:ed:5b:b7:b8:e4:
1b:2a:2d:5f:89:e4:3c:fc:8b:60:38:24:ac:8b:e1:
bc:15:2f:d4:6f:36:0f:ef:06:57:7d:54:42:7e:89:
7d:13:0b:4a:88:34:f6:a7:1c:42:c9:0c:ea:c7:64:
24:f1:05:f6:9d:81:3f:08:2a:e3:62:31:0e:23:e4:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:1A:03:8C:3A:C2:60:65:1E:8E:EF:53:B9:F7:A3:1B:84:C7:ED
X509v3 Authority Key Identifier:
keyid:50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.13.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d8:ba:55:fe:d4:0f:f2:23:ef:b1:a3:b1:7b:f7:1d:f5:a1:
2d:8b:a3:18:93:cc:66:2c:fd:c4:4a:c9:8d:d3:db:15:d1:a7:
b8:1b:8f:99:e5:14:e1:ed:29:62:bd:09:52:e1:a1:d6:f2:35:
0b:9f:36:a7:13:1f:ee:3a:38:4b:7e:d7:d8:08:65:96:b8:3d:
49:7c:fd:84:db:29:51:20:30:bc:66:39:2b:3c:49:3b:09:18:
aa:a6:2b:0e:00:5b:07:41:33:cb:74:a4:34:a6:04:86:29:73:
3d:b9:b2:2e:5a:59:2a:49:61:74:f3:e9:f7:25:1b:0a:e8:fd:
39:8f:79:62:f7:e7:dc:e6:6a:25:69:85:a2:4a:e6:23:e5:c2:
03:e6:dc:84:10:ad:e7:95:a9:7a:a1:b2:33:6c:75:72:83:a9:
2a:3b:c5:07:d6:44:c7:f2:61:ee:85:09:62:e3:57:9b:ec:b7:
54:63:b3:6a:69:9b:3e:a6:de:65:7b:ac:8f:b3:e1:29:95:3b:
ac:e4:6c:61:24:76:3a:90:72:66:f2:87:be:8e:63:51:8d:7c:
43:e4:0d:31:6d:c2:92:53:18:84:73:2b:24:7d:37:55:e9:d6:
f5:3a:b3:87:f1:59:18:80:3e:d2:09:c5:bb:78:90:c9:02:37:
8e:af:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:40 2025 by rpki-client