Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
File: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (raw, json)
Hash identifier: NMqrPZx3BfpeR/CCK9W1SFs/S/cjWPSO3ObO/mg0sIc=
Subject key identifier: 53:5D:BA:71:42:EF:2A:92:D2:4D:EE:07:B5:71:A4:4F:82:96:82:DC
Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6
Certificate serial: 0A853DE0B7421671DC2532788FEA581145055896
Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
Signing time: Tue 28 Apr 2026 15:01:22 +0000
ROA not before: Tue 28 Apr 2026 14:56:22 +0000
ROA not after: Tue 27 Apr 2027 15:01:22 +0000
asID: 152800
IP address blocks: 2001:df3:dfc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:85:3d:e0:b7:42:16:71:dc:25:32:78:8f:ea:58:11:45:05:58:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6
Validity
Not Before: Apr 28 14:56:22 2026 GMT
Not After : Apr 27 15:01:22 2027 GMT
Subject: CN=535DBA7142EF2A92D24DEE07B571A44F829682DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:ae:05:00:a7:ba:cb:67:47:2b:7b:45:cc:
34:f1:f4:d6:42:f5:ba:85:2f:9c:c0:69:93:d7:f1:
ae:1e:e9:1e:f1:35:a2:cf:69:f2:d2:1c:47:0b:11:
c2:b9:33:72:ef:5e:bd:40:74:fc:bf:af:85:99:ac:
18:74:6d:8f:bf:31:f5:20:09:2a:f8:fb:75:39:2a:
3f:9b:8a:2e:51:c8:ba:32:b3:c1:90:54:ea:36:8a:
a8:b0:32:87:df:dd:fe:c7:c7:35:16:cb:3a:77:46:
14:19:87:1b:c1:f4:3c:3b:f5:5f:e2:50:3f:6d:14:
e9:2e:5c:0a:d0:0c:1c:88:7e:08:88:34:3e:c0:e9:
b6:ea:02:00:ab:f0:b7:58:6e:7a:0e:fd:05:df:d8:
c6:f3:d0:41:97:33:69:f8:6a:9b:b2:72:40:98:bc:
e8:60:a1:ef:bc:46:07:b3:61:b3:94:c4:e5:ce:b6:
aa:7d:b0:8f:72:74:ef:56:a9:f9:63:fe:7e:c0:eb:
a9:9e:fd:85:0a:1c:35:e8:9a:1e:0d:70:d4:66:62:
a8:7c:be:d0:79:89:b2:81:ac:32:ef:fb:a7:19:5b:
ab:b5:7a:41:20:b5:58:da:db:b5:40:e4:2c:70:20:
96:d1:1f:22:62:5d:e3:1e:c5:5c:cd:ed:a7:99:2b:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:BA:71:42:EF:2A:92:D2:4D:EE:07:B5:71:A4:4F:82:96:82:DC
X509v3 Authority Key Identifier:
keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:dfc0::/48
Signature Algorithm: sha256WithRSAEncryption
87:09:71:01:b6:02:eb:81:5e:8b:00:c2:20:80:94:91:82:4b:
0d:e9:a1:00:cb:57:17:15:22:a8:58:02:57:ed:7d:61:3b:d0:
0a:87:e8:ac:e4:15:59:46:b8:40:f4:c9:17:5a:46:c0:eb:aa:
99:96:dd:54:ee:8f:68:47:8d:f8:bc:d2:46:65:3b:11:a7:fe:
96:ee:75:9e:22:09:21:9e:7b:71:8e:8b:2a:03:d5:cb:4b:d6:
80:5e:eb:02:6e:0b:04:3d:cd:5e:d0:14:65:53:20:bb:72:80:
fa:18:64:2e:80:01:1f:71:40:99:a8:db:ba:d7:87:b7:55:4a:
37:9c:94:eb:18:c6:58:5d:e8:f0:50:c3:0e:7f:6b:4a:53:4d:
90:17:fa:06:eb:14:20:3a:7e:25:79:2f:f5:83:d2:00:b0:72:
cf:a1:90:f5:0e:f1:97:e3:a9:74:c1:7d:14:ad:c1:e7:b3:68:
40:10:31:72:37:9a:7e:b8:6a:f6:2b:9d:bf:4b:5b:2f:6c:ba:
fc:b7:a3:e0:f7:9a:7b:24:d8:e0:6c:9d:d3:e0:8e:8c:28:72:
55:31:63:1f:92:1a:3a:9c:39:a2:1d:9d:d4:b1:d7:43:a0:13:
b0:46:79:b4:9c:9c:d0:8c:11:4f:a8:3a:95:86:38:ff:2a:79:
2f:ab:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:36:34 2026 by rpki-client