Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: AjxGTWChACskLkOp6ZS4TeFOQsDuctcrvelzISib3fM=
Subject key identifier: 83:3E:29:9C:C5:10:18:32:19:C1:D4:62:38:91:98:A8:66:FC:A6:2D
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 3D981BC640D284F985EEF59233A6A12A0A1AA35C
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 07:00:00 +0000
ROA not before: Sun 19 Apr 2026 06:55:00 +0000
ROA not after: Sun 18 Apr 2027 07:00:00 +0000
asID: 45306
IP address blocks: 119.15.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:98:1b:c6:40:d2:84:f9:85:ee:f5:92:33:a6:a1:2a:0a:1a:a3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 06:55:00 2026 GMT
Not After : Apr 18 07:00:00 2027 GMT
Subject: CN=833E299CC510183219C1D462389198A866FCA62D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:d6:1a:b4:2d:7c:a9:b8:d8:96:ea:e4:79:
0d:02:35:fc:92:8a:97:1c:86:a9:32:45:2a:8d:4d:
45:cd:15:63:3f:f1:b9:e2:a9:a5:14:97:b9:a4:19:
e3:77:f5:cf:a5:7e:9d:d9:64:99:0c:d0:27:08:99:
ca:83:32:6a:b0:23:f8:13:8c:ed:b0:aa:af:1f:2b:
e8:0c:ae:f7:29:3a:2b:6d:51:bb:b6:48:f1:80:83:
f7:e4:a3:6f:b9:a5:70:81:29:c5:bf:13:52:2f:75:
f8:04:db:51:80:5a:b9:b1:a7:a1:f0:d9:a5:84:6c:
fe:04:92:6a:62:b4:94:0f:cb:3d:cf:9d:89:d3:78:
af:9b:ec:f0:e2:18:2f:ba:14:65:40:9f:e0:9e:14:
82:4c:e6:1b:d5:38:0e:54:4e:5f:cf:36:ca:0d:30:
e2:8f:3f:24:0f:24:59:c9:f9:34:13:19:64:d9:6a:
b1:ae:d6:18:87:61:29:2f:e6:d8:c5:e4:45:e8:3a:
ce:ca:24:4a:76:e5:33:1b:39:d0:42:14:1d:b4:be:
40:d5:48:00:bb:7c:a4:e8:3e:a4:4b:7b:e3:89:2c:
20:81:a9:3d:0a:a2:b0:14:74:a1:22:35:d5:5d:d7:
77:15:71:42:0f:57:28:02:60:d9:c0:91:1e:14:b0:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:29:9C:C5:10:18:32:19:C1:D4:62:38:91:98:A8:66:FC:A6:2D
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.133.0/24
Signature Algorithm: sha256WithRSAEncryption
83:16:aa:36:3a:07:6a:ab:9e:61:60:fe:b0:e5:8f:71:09:85:
6f:15:f8:6d:23:07:39:c4:4f:0c:8c:1a:c9:26:0f:28:f4:16:
ed:90:5c:d5:25:96:6e:86:69:42:4f:b9:3a:33:6f:21:de:99:
37:d7:65:0e:98:cc:53:c3:99:b1:bd:2b:d9:84:86:f4:1a:34:
2a:d6:c1:8d:b6:61:e9:0c:67:15:c5:7b:f4:2b:08:a5:37:3c:
ac:36:10:4f:72:d6:76:8d:b7:e7:99:ae:4b:cf:bd:f3:47:ca:
e8:69:0a:97:54:32:43:0a:9f:0a:8a:07:08:e8:11:cc:04:66:
b1:22:62:e5:47:f0:bc:c1:55:6b:32:44:da:ff:90:15:34:72:
44:6c:b4:32:d8:b2:65:c0:ac:1b:a2:09:e5:80:f2:33:f5:5a:
4e:c2:aa:87:4a:9f:aa:c9:72:a3:66:e9:ac:55:a1:04:f2:6c:
b6:17:21:a9:dd:8b:cc:50:37:23:b4:2e:fe:98:05:23:df:46:
a8:83:bb:2f:b4:fd:b2:1c:05:3e:c3:ef:33:cd:87:f3:90:16:
97:ef:09:fb:53:cf:90:eb:ca:ab:b2:d4:f1:75:55:f9:6b:75:
fc:3b:7d:7e:74:a3:14:54:85:ff:ea:60:ae:42:a9:25:f1:fb:
8c:c4:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:16:08 2026 by rpki-client