Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133312e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: EEtbwWbv0lW6/jn7RY3nl0UEn/shYZShiYjg7vtnWiE=
Subject key identifier: ED:5B:9F:22:68:8C:28:D6:C1:61:CC:55:79:B3:06:3D:F6:70:F0:19
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 13F2B2B3DFB6F001CA215CD63D781FD3D1FAEFDE
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133312e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 07:00:01 +0000
ROA not before: Sun 19 Apr 2026 06:55:01 +0000
ROA not after: Sun 18 Apr 2027 07:00:01 +0000
asID: 45306
IP address blocks: 119.15.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f2:b2:b3:df:b6:f0:01:ca:21:5c:d6:3d:78:1f:d3:d1:fa:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 06:55:01 2026 GMT
Not After : Apr 18 07:00:01 2027 GMT
Subject: CN=ED5B9F22688C28D6C161CC5579B3063DF670F019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:f5:52:65:24:5d:00:bc:b5:44:e8:5b:b7:
ff:b2:f9:11:4a:24:55:91:e0:c8:d2:34:28:93:7e:
2d:24:fb:eb:63:a9:e7:cb:5a:53:1f:fd:40:ce:d5:
1e:db:f0:17:cd:32:af:00:7c:2f:ec:49:39:a2:28:
cf:0c:3d:75:a6:97:c7:37:ae:fa:7d:57:48:6f:92:
51:09:9c:6b:19:86:71:ed:59:62:78:90:bf:a6:7a:
76:35:5d:c8:8b:9b:de:b6:86:4e:86:30:c8:b9:2f:
15:15:dc:eb:5e:3c:d9:2e:46:f7:e2:29:2d:27:a7:
93:64:9d:aa:98:25:da:14:f0:c3:33:25:9a:d7:2a:
c3:e1:ee:7d:55:93:dc:b3:c7:9d:6f:22:10:ae:96:
93:1e:5e:ff:28:79:b9:ac:78:44:81:64:28:8e:b5:
d2:a6:4f:c0:54:aa:55:62:c2:2b:39:72:a8:b4:44:
40:b4:04:44:0f:f5:f7:db:85:07:5b:7d:8b:89:df:
d3:aa:38:ac:1c:e4:20:52:d9:a5:e1:aa:b9:19:a3:
68:11:31:1e:3c:1c:8f:b5:d9:6c:7d:7d:79:d0:74:
46:14:07:b6:f6:0a:72:b0:a6:00:a8:8a:fa:db:9e:
66:f0:74:65:60:5e:72:3c:3f:32:12:b7:f7:68:92:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:9F:22:68:8C:28:D6:C1:61:CC:55:79:B3:06:3D:F6:70:F0:19
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133312e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ce:5d:24:cc:c1:68:4e:8a:27:29:6d:c2:ac:53:6f:d2:0b:
3d:47:67:61:8b:77:cb:2b:bd:b9:e5:aa:42:99:67:11:f8:07:
54:1e:d9:b2:ce:6b:8e:ec:66:26:68:96:71:97:be:10:9b:fc:
29:51:0a:92:67:b6:39:16:89:9d:9f:a2:9e:70:d9:98:fa:ac:
7c:59:c0:eb:79:a3:0e:3d:f0:f7:d8:e4:44:01:14:0f:07:81:
61:e9:0f:de:2e:06:f6:ab:c8:2a:85:91:04:f6:3a:ce:d8:08:
b2:87:47:d8:ad:1f:50:51:30:28:3d:8d:79:a8:50:8e:1a:7e:
b3:06:99:62:47:46:1f:4d:a3:82:0b:ea:37:44:04:1f:28:b5:
9b:09:e9:70:56:a8:0f:2b:82:45:cd:5c:cc:60:a1:2b:13:99:
35:2c:cd:36:63:ac:ce:51:da:cb:9d:65:1f:58:11:09:ab:c3:
3a:6b:53:cb:c7:38:94:8a:bc:09:a7:8c:61:3a:12:69:8a:af:
15:30:54:b9:2b:ec:70:36:de:61:dc:8c:8d:be:e2:af:32:8d:
c8:1d:1a:5d:fb:ac:e2:90:3f:17:20:08:4c:55:18:8e:35:99:
24:86:5e:93:96:77:e9:9e:dd:3c:fd:0f:aa:3c:65:dd:5b:8f:
91:73:4a:3b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUE/Kys9+28AHKIVzWPXgf09H6794wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE
RDNDNjcxQTAeFw0yNjA0MTkwNjU1MDFaFw0yNzA0MTgwNzAwMDFaMDMxMTAvBgNV
BAMTKEVENUI5RjIyNjg4QzI4RDZDMTYxQ0M1NTc5QjMwNjNERjY3MEYwMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55PVSZSRdALy1ROhbt/+y+RFK
JFWR4MjSNCiTfi0k++tjqefLWlMf/UDO1R7b8BfNMq8AfC/sSTmiKM8MPXWml8c3
rvp9V0hvklEJnGsZhnHtWWJ4kL+menY1XciLm962hk6GMMi5LxUV3OtePNkuRvfi
KS0np5NknaqYJdoU8MMzJZrXKsPh7n1Vk9yzx51vIhCulpMeXv8oebmseESBZCiO
tdKmT8BUqlViwis5cqi0REC0BEQP9ffbhQdbfYuJ39OqOKwc5CBS2aXhqrkZo2gR
MR48HI+12Wx9fXnQdEYUB7b2CnKwpgCoivrbnmbwdGVgXnI8PzISt/doksKtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7VufImiMKNbBYcxVebMGPfZw8BkwHwYDVR0j
BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD
MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND
NjcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i
MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPgzANBgkqhkiG
9w0BAQsFAAOCAQEAtM5dJMzBaE6KJyltwqxTb9ILPUdnYYt3yyu9ueWqQplnEfgH
VB7Zss5rjuxmJmiWcZe+EJv8KVEKkme2ORaJnZ+innDZmPqsfFnA63mjDj3w99jk
RAEUDweBYekP3i4G9qvIKoWRBPY6ztgIsodH2K0fUFEwKD2NeahQjhp+swaZYkdG
H02jggvqN0QEHyi1mwnpcFaoDyuCRc1czGChKxOZNSzNNmOszlHay51lH1gRCavD
OmtTy8c4lIq8CaeMYToSaYqvFTBUuSvscDbeYdyMjb7irzKNyB0aXfus4pA/FyAI
TFUYjjWZJIZek5Z36Z7dPP0Pqjxl3VuPkXNKOw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:45:08 2026 by rpki-client