Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133342e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: Mvr/+amtRozHac6IAylWZFArbc8FAAqm2X19rhXDmyc=
Subject key identifier: 99:63:87:C5:2B:EC:A8:43:5A:03:91:78:35:AE:AD:5B:E4:31:BB:0A
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 57A763D689E83CBA3A180DA0365D8A7AD96AB517
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133342e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 06:00:00 +0000
ROA not before: Sun 19 Apr 2026 05:55:00 +0000
ROA not after: Sun 18 Apr 2027 06:00:00 +0000
asID: 45306
IP address blocks: 119.15.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a7:63:d6:89:e8:3c:ba:3a:18:0d:a0:36:5d:8a:7a:d9:6a:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 05:55:00 2026 GMT
Not After : Apr 18 06:00:00 2027 GMT
Subject: CN=996387C52BECA8435A03917835AEAD5BE431BB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:10:23:05:da:0c:94:4d:5a:10:8c:41:c2:
f4:ed:9e:1d:cb:3f:dd:99:1f:3c:41:41:e5:8c:73:
ee:c2:1b:73:ac:2b:a0:df:10:ae:b9:79:36:68:1e:
e4:94:93:78:52:7b:a0:0e:bd:39:b5:ea:b1:58:4d:
94:32:f9:36:a8:cb:27:d1:13:34:35:7c:65:a0:b5:
57:0f:22:7d:f1:31:d1:90:c8:19:ce:69:cb:0b:8c:
81:67:83:3a:02:bf:2b:19:1e:cd:af:90:ce:8c:e5:
ba:e5:39:4a:03:d4:b7:2c:7a:72:b1:9e:90:78:59:
f8:2c:30:05:9f:09:36:e6:28:20:1f:1b:a4:39:4d:
d7:bd:73:ca:b5:45:79:f0:8d:ed:8d:37:a4:f6:7a:
50:40:f8:7b:93:d9:0c:f2:9e:93:66:1c:54:a6:1b:
b0:39:62:a9:7f:26:52:01:31:b4:c7:cd:95:f5:5e:
c2:76:14:69:28:cb:22:fd:38:f3:37:1e:2b:de:51:
94:93:f2:8c:d4:dd:31:79:2e:b0:b1:10:c6:2e:d6:
b2:34:17:d6:f3:73:43:05:fa:f7:d2:e0:16:76:27:
15:5f:b8:fc:c7:04:48:42:22:f3:66:24:9b:ea:62:
f9:77:b4:d7:cf:a2:db:09:b5:57:66:0c:16:3f:34:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:87:C5:2B:EC:A8:43:5A:03:91:78:35:AE:AD:5B:E4:31:BB:0A
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133342e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:6e:d1:99:84:6d:19:7a:8e:23:79:7d:ce:40:70:a1:96:fe:
b9:02:37:72:45:14:20:28:89:fc:87:3d:7e:32:a3:97:33:52:
ea:f2:ee:ff:91:29:1b:e7:8e:ee:68:d9:15:df:ac:11:16:59:
70:84:f0:b3:0a:31:b3:f5:6a:88:d9:fd:81:6f:8b:53:87:7c:
90:63:84:a2:00:60:d0:62:76:67:76:c9:b5:9a:08:10:be:e7:
e1:ab:8a:66:2f:be:a2:e9:07:12:15:1f:f4:e5:45:a7:43:f8:
94:d9:48:1f:0f:1e:63:c1:3c:14:3e:ed:d2:45:16:0e:7c:a8:
a7:0f:00:63:31:42:f9:01:ca:85:83:84:bd:79:20:25:cb:50:
ea:22:95:20:5c:94:8f:97:0d:26:da:14:39:fa:71:29:b6:f2:
ac:54:df:dc:3d:9b:f0:d7:71:61:3f:1b:97:cb:79:35:5e:fd:
4a:35:d3:4d:cc:c9:f8:90:1f:a1:3b:b2:d0:ef:a2:8e:0d:b1:
1f:a6:10:3f:45:b9:46:14:a6:d9:2c:32:89:d9:04:15:9c:71:
d4:ec:7f:81:15:e2:c2:0b:61:f1:a0:f2:58:95:88:23:bb:f5:
c0:06:25:8b:a3:3c:9d:54:5b:d8:7e:22:99:81:f7:40:3b:93:
8c:f1:81:0a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV6dj1onoPLo6GA2gNl2KetlqtRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE
RDNDNjcxQTAeFw0yNjA0MTkwNTU1MDBaFw0yNzA0MTgwNjAwMDBaMDMxMTAvBgNV
BAMTKDk5NjM4N0M1MkJFQ0E4NDM1QTAzOTE3ODM1QUVBRDVCRTQzMUJCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXxAjBdoMlE1aEIxBwvTtnh3L
P92ZHzxBQeWMc+7CG3OsK6DfEK65eTZoHuSUk3hSe6AOvTm16rFYTZQy+TaoyyfR
EzQ1fGWgtVcPIn3xMdGQyBnOacsLjIFngzoCvysZHs2vkM6M5brlOUoD1LcsenKx
npB4WfgsMAWfCTbmKCAfG6Q5Tde9c8q1RXnwje2NN6T2elBA+HuT2QzynpNmHFSm
G7A5Yql/JlIBMbTHzZX1XsJ2FGkoyyL9OPM3HiveUZST8ozU3TF5LrCxEMYu1rI0
F9bzc0MF+vfS4BZ2JxVfuPzHBEhCIvNmJJvqYvl3tNfPotsJtVdmDBY/NF7dAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmWOHxSvsqENaA5F4Na6tW+QxuwowHwYDVR0j
BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD
MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND
NjcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i
MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPhjANBgkqhkiG
9w0BAQsFAAOCAQEAw27RmYRtGXqOI3l9zkBwoZb+uQI3ckUUICiJ/Ic9fjKjlzNS
6vLu/5EpG+eO7mjZFd+sERZZcITwswoxs/VqiNn9gW+LU4d8kGOEogBg0GJ2Z3bJ
tZoIEL7n4auKZi++oukHEhUf9OVFp0P4lNlIHw8eY8E8FD7t0kUWDnyopw8AYzFC
+QHKhYOEvXkgJctQ6iKVIFyUj5cNJtoUOfpxKbbyrFTf3D2b8NdxYT8bl8t5NV79
SjXTTczJ+JAfoTuy0O+ijg2xH6YQP0W5RhSm2SwyidkEFZxx1Ox/gRXiwgth8aDy
WJWII7v1wAYli6M8nVRb2H4imYH3QDuTjPGBCg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:30 2026 by rpki-client