Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132382e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: 8IT78w4HCIYYrpooyuLPyTIGN4xneNGsQP39UC4c0A8=
Subject key identifier: 8D:74:A1:9B:DF:FD:BE:F4:F4:39:79:16:F3:9B:14:9D:A4:E9:90:93
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 51E28D8505784BCA51CE755220EF3A10216A0073
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132382e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 06:00:00 +0000
ROA not before: Sun 19 Apr 2026 05:55:00 +0000
ROA not after: Sun 18 Apr 2027 06:00:00 +0000
asID: 45306
IP address blocks: 119.15.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e2:8d:85:05:78:4b:ca:51:ce:75:52:20:ef:3a:10:21:6a:00:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 05:55:00 2026 GMT
Not After : Apr 18 06:00:00 2027 GMT
Subject: CN=8D74A19BDFFDBEF4F4397916F39B149DA4E99093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:db:c3:e5:e3:90:b9:5a:10:a9:c6:b4:e1:84:
a8:ef:71:1b:72:ef:58:3c:a5:c8:8b:85:e2:a1:27:
bf:0c:21:4e:42:f1:2d:4d:43:35:17:9d:57:dd:7f:
7a:2a:0e:2f:16:89:0f:da:59:94:b4:a9:d3:00:f7:
e1:47:a4:da:5d:00:f7:3e:7c:73:dd:08:b3:cc:ac:
6c:04:d7:e9:18:a1:91:c5:12:3b:d1:85:78:97:58:
f6:46:12:56:fe:69:51:af:40:bb:19:2d:e8:2c:d5:
5c:ba:58:e9:62:1c:19:d7:0d:a9:c8:bb:af:a1:fe:
e3:28:ec:2a:82:d1:c1:a6:82:4a:ab:49:ce:1c:60:
2a:50:04:66:17:5f:0f:13:1e:ff:d9:81:a9:e2:44:
9e:b8:5f:36:b4:5d:bb:4e:39:2d:6b:3b:d6:a5:c9:
a3:c4:03:57:7f:aa:61:8c:35:f3:af:58:1a:2e:4b:
d3:a7:6c:4c:81:3d:39:31:67:82:e8:56:66:8c:c5:
97:7a:bb:77:92:ca:bb:26:b9:8f:f6:6f:f6:df:15:
4e:46:d3:d8:f9:24:7c:eb:06:12:5a:4b:73:0e:0c:
76:f8:af:1e:01:2c:b2:ec:f0:78:47:2d:44:af:0b:
0f:a6:56:31:62:ad:75:98:72:7c:82:fc:17:4e:7d:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:A1:9B:DF:FD:BE:F4:F4:39:79:16:F3:9B:14:9D:A4:E9:90:93
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132382e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c1:57:0e:ec:b5:16:4b:27:89:c7:9d:b4:21:ef:68:89:63:
ce:a1:a1:80:90:bb:3d:40:4e:5d:06:61:8f:49:a7:5d:6c:48:
90:db:91:7f:65:c4:e6:5c:2d:ba:ea:69:cc:6f:19:27:39:83:
d7:cf:95:11:69:07:2f:23:e7:48:34:7e:78:90:82:62:3d:2f:
11:fe:4d:2d:c0:5e:83:fb:8b:4d:16:56:7c:29:44:c4:fb:bb:
89:c5:af:79:ac:d9:e4:91:a0:63:51:5a:8b:1b:73:3a:e6:ab:
72:4e:b4:e2:04:c7:28:01:01:58:63:cb:f8:39:54:a5:50:60:
00:c0:9b:52:7e:fa:c2:e7:82:7b:35:fe:c5:27:80:8b:96:47:
5c:b0:92:81:fd:b5:dd:12:ad:50:4e:18:39:c6:f9:53:a1:05:
7e:f9:f9:02:77:67:58:2b:ce:55:00:13:ab:3d:7b:3d:38:bd:
d4:bf:62:0d:8a:9d:29:f3:3e:2e:66:66:3b:22:2f:29:17:68:
a9:b6:17:2a:67:64:e7:ed:fd:ce:a1:2f:a0:9e:09:56:31:55:
3d:c6:a1:ac:40:09:2d:e3:82:2f:c9:5c:2c:74:d4:6a:f5:fe:
d3:09:d1:5f:d0:66:4e:77:83:10:e7:22:4d:2a:18:3f:4c:f0:
1b:22:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:08 2026 by rpki-client