Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133322e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: 7jFufm2IkoSG/PGmWXsARKJynkSTA+WUyKD4eFKbLI4=
Subject key identifier: 95:45:F6:4E:7B:55:43:F1:D7:8E:BA:4E:41:88:3D:9E:B1:0D:D9:75
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 73257F593D5CE4201D8BA568E28F6EB68DC2B8
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133322e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 05:00:00 +0000
ROA not before: Sun 19 Apr 2026 04:55:00 +0000
ROA not after: Sun 18 Apr 2027 05:00:00 +0000
asID: 45306
IP address blocks: 119.15.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:25:7f:59:3d:5c:e4:20:1d:8b:a5:68:e2:8f:6e:b6:8d:c2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 04:55:00 2026 GMT
Not After : Apr 18 05:00:00 2027 GMT
Subject: CN=9545F64E7B5543F1D78EBA4E41883D9EB10DD975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:af:72:42:ff:7c:51:ab:b6:83:b0:c8:46:
fb:2e:27:70:c4:fb:a1:a3:79:23:e0:1d:ef:d2:72:
18:69:a7:a1:97:2d:e9:69:7e:01:06:2f:04:5d:da:
b3:97:15:fb:22:6c:78:23:4c:cf:75:94:84:ea:9b:
63:5e:e2:e6:e7:e8:34:1e:c3:f9:17:6e:59:ce:c4:
61:54:81:c3:eb:72:2b:e7:ac:c0:60:c7:6e:e7:49:
df:1b:c8:af:6e:63:17:b9:d4:fb:b7:83:6d:24:bc:
6b:0e:1c:ae:cb:1c:1b:c7:20:9c:6f:70:ad:cc:97:
99:e0:4e:a8:1f:bf:2d:93:e5:c2:f4:65:3d:37:77:
ba:63:ab:5e:88:d0:5c:58:4b:4f:b7:bb:c7:61:41:
de:b6:b5:67:74:3b:24:a9:c5:f7:a4:7d:46:be:14:
86:55:84:7c:c9:88:71:cd:be:6c:5d:55:94:e6:d8:
1f:2a:ec:93:42:48:e4:f7:35:19:0c:ff:ba:0d:c7:
d9:8c:a0:e9:4f:c2:63:10:c6:d6:59:4e:3d:de:26:
0b:85:d8:11:ce:74:92:b6:93:a2:b1:06:a3:2f:c1:
4f:21:ed:5b:ab:ed:c8:52:9f:84:f4:93:9f:9b:13:
b5:b9:52:1c:7f:81:6b:2d:cf:a6:4a:3a:0e:e2:70:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:45:F6:4E:7B:55:43:F1:D7:8E:BA:4E:41:88:3D:9E:B1:0D:D9:75
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133322e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.132.0/24
Signature Algorithm: sha256WithRSAEncryption
29:97:ed:b6:f6:3a:46:c4:c8:8d:47:ed:76:80:85:ca:5e:c4:
ff:46:2c:73:82:21:97:d9:0b:8f:60:5c:c2:bc:1b:9d:c5:e7:
79:56:63:30:97:ed:20:ad:8f:ce:b1:81:a5:51:8b:8f:e5:aa:
a7:94:28:50:b3:f2:29:36:f0:e9:02:aa:43:e5:21:7b:4b:de:
56:1c:df:3a:ee:a2:98:03:c9:a9:78:ee:ea:82:68:93:c1:83:
eb:9b:73:25:cb:d5:df:cc:99:a5:47:90:ce:cc:66:fb:49:2e:
57:80:48:69:9a:b3:3c:41:40:3d:32:15:89:e8:79:fd:b7:1a:
9d:13:ea:b4:f5:4e:bb:d7:f8:78:13:80:7a:5c:b5:3d:a6:02:
55:e6:2b:48:57:28:1b:c8:e9:ed:29:93:e7:f4:f9:2e:79:19:
53:8a:6e:69:ff:1c:1e:23:04:0a:26:b7:fd:64:19:48:1d:df:
89:1a:92:a1:09:1e:d6:19:ba:d2:12:7b:d7:c3:47:9d:f7:61:
11:56:f0:67:d5:7a:99:99:b4:2e:a2:b7:48:4b:e6:eb:34:2f:
58:57:8c:86:f6:60:a2:18:0e:44:68:02:3d:d6:a0:cd:be:e6:
f2:8f:6e:82:4f:54:b6:de:eb:55:9c:a6:cc:80:25:21:ce:c2:
d7:24:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:35 2026 by rpki-client