Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: vRoxT2Rt0uiAADdojXPkas32orpe066n7JYSbdUCmJ0=
Subject key identifier: 7B:49:45:F6:8D:A6:3D:4D:27:24:DD:C7:7F:54:79:FC:8E:1D:79:28
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 52138BBDCB95AAFDE49DDD8310FCBDDBBE876041
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 07:00:00 +0000
ROA not before: Sun 19 Apr 2026 06:55:00 +0000
ROA not after: Sun 18 Apr 2027 07:00:00 +0000
asID: 45306
IP address blocks: 119.15.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:13:8b:bd:cb:95:aa:fd:e4:9d:dd:83:10:fc:bd:db:be:87:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 06:55:00 2026 GMT
Not After : Apr 18 07:00:00 2027 GMT
Subject: CN=7B4945F68DA63D4D2724DDC77F5479FC8E1D7928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:eb:d1:12:15:df:b5:e0:77:83:1d:fd:f8:
6c:78:a0:9c:2d:b9:aa:91:c0:5b:ac:4e:63:80:6c:
38:cc:50:df:57:b5:38:12:1c:68:7a:10:9f:7e:49:
a1:67:ea:da:cb:08:90:6b:00:51:3d:17:95:46:db:
78:64:ce:5d:0a:67:1b:dd:cc:68:7a:ad:4f:e5:50:
9c:07:b4:84:9e:21:e4:96:aa:75:ae:e4:2d:4c:a6:
fd:dd:eb:1f:0a:6a:48:c9:58:3a:d7:6f:e4:0e:c8:
84:d8:12:6a:9c:e4:2c:0a:cc:12:47:94:09:89:d7:
f2:4e:25:4e:5c:97:0a:67:2e:97:3a:a5:08:bd:96:
4e:56:32:90:c1:dd:a1:9d:90:f4:d7:5b:a9:39:af:
a8:b9:e3:0f:3a:2f:10:76:b8:39:67:ec:4f:ae:70:
79:b4:be:83:a9:58:4f:8b:a8:84:b0:3d:c3:05:2c:
05:a5:85:e7:3b:ba:94:f0:6d:87:f5:30:fc:40:be:
d8:64:9d:b1:d2:8c:9f:4b:d9:39:4c:af:8e:26:c1:
79:58:06:ab:c7:87:b8:98:0e:40:40:2e:25:18:9c:
3f:18:2f:52:96:4f:bd:68:a0:1f:66:11:74:eb:c6:
58:07:dd:d2:7c:17:46:ce:cb:c1:c3:1b:75:e2:46:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:49:45:F6:8D:A6:3D:4D:27:24:DD:C7:7F:54:79:FC:8E:1D:79:28
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:cf:b4:63:b9:48:ef:8e:48:4e:76:f8:3a:8d:b5:c6:8b:f7:
db:e4:28:30:0f:31:35:20:4e:8e:dd:ab:5e:fc:71:42:40:56:
ee:f9:42:59:17:cb:1b:00:90:a8:4d:2c:2f:5e:e8:98:e9:1f:
f3:48:a9:1a:ee:1f:39:56:d7:98:c8:10:05:0d:33:34:ba:3e:
fd:55:3d:6b:ff:64:44:aa:f8:d3:1d:e3:5c:31:7e:82:12:7b:
ec:bd:71:a0:89:d6:87:f7:ee:77:6d:68:3f:9b:57:fc:38:f7:
ee:5b:0a:f8:01:c4:23:52:a2:bb:9c:9f:df:1e:85:b7:45:4e:
95:e4:54:a5:e8:3c:d0:50:90:16:f6:96:f4:e6:33:33:20:ae:
94:7b:d1:09:09:8c:3d:94:ab:84:7b:55:a2:ec:20:55:e5:94:
ee:e6:7c:d5:97:f5:9b:dd:24:33:4a:48:0e:22:af:c9:35:c2:
b6:38:c5:0b:5e:e1:f1:d4:5d:f6:f4:1c:28:a8:d1:08:72:49:
85:88:f8:0b:6d:57:9e:3d:72:a0:68:6b:76:38:78:c3:47:f5:
46:fe:da:04:8c:32:29:55:4f:74:16:cf:76:3a:51:e2:d8:5b:
9d:83:18:1b:06:d3:e7:e5:41:58:c5:e7:12:3b:f8:06:d9:61:
66:cb:cb:84
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUhOLvcuVqv3knd2DEPy9276HYEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE
RDNDNjcxQTAeFw0yNjA0MTkwNjU1MDBaFw0yNzA0MTgwNzAwMDBaMDMxMTAvBgNV
BAMTKDdCNDk0NUY2OERBNjNENEQyNzI0RERDNzdGNTQ3OUZDOEUxRDc5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrevREhXfteB3gx39+Gx4oJwt
uaqRwFusTmOAbDjMUN9XtTgSHGh6EJ9+SaFn6trLCJBrAFE9F5VG23hkzl0KZxvd
zGh6rU/lUJwHtISeIeSWqnWu5C1Mpv3d6x8KakjJWDrXb+QOyITYEmqc5CwKzBJH
lAmJ1/JOJU5clwpnLpc6pQi9lk5WMpDB3aGdkPTXW6k5r6i54w86LxB2uDln7E+u
cHm0voOpWE+LqISwPcMFLAWlhec7upTwbYf1MPxAvthknbHSjJ9L2TlMr44mwXlY
BqvHh7iYDkBALiUYnD8YL1KWT71ooB9mEXTrxlgH3dJ8F0bOy8HDG3XiRj0dAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUe0lF9o2mPU0nJN3Hf1R5/I4deSgwHwYDVR0j
BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD
MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND
NjcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i
MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPgTANBgkqhkiG
9w0BAQsFAAOCAQEAFs+0Y7lI745ITnb4Oo21xov32+QoMA8xNSBOjt2rXvxxQkBW
7vlCWRfLGwCQqE0sL17omOkf80ipGu4fOVbXmMgQBQ0zNLo+/VU9a/9kRKr40x3j
XDF+ghJ77L1xoInWh/fud21oP5tX/Dj37lsK+AHEI1Kiu5yf3x6Ft0VOleRUpeg8
0FCQFvaW9OYzMyCulHvRCQmMPZSrhHtVouwgVeWU7uZ81Zf1m90kM0pIDiKvyTXC
tjjFC17h8dRd9vQcKKjRCHJJhYj4C21Xnj1yoGhrdjh4w0f1Rv7aBIwyKVVPdBbP
djpR4thbnYMYGwbT5+VBWMXnEjv4BtlhZsvLhA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:11 2026 by rpki-client