Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: UN5HCkO1Bu7+B2emPZS5fChyGKmkaJ6Izp3ORu0UJ/E=
Subject key identifier: F2:E8:CB:90:90:E9:D3:3F:DF:10:C6:11:DB:14:60:4A:29:BF:AB:8D
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 715E518EFE4ECE6CEF7FB9ACD340B56B26F41BF8
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
Signing time: Sun 19 Apr 2026 06:00:00 +0000
ROA not before: Sun 19 Apr 2026 05:55:00 +0000
ROA not after: Sun 18 Apr 2027 06:00:00 +0000
asID: 45306
IP address blocks: 119.15.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5e:51:8e:fe:4e:ce:6c:ef:7f:b9:ac:d3:40:b5:6b:26:f4:1b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 05:55:00 2026 GMT
Not After : Apr 18 06:00:00 2027 GMT
Subject: CN=F2E8CB9090E9D33FDF10C611DB14604A29BFAB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:6f:80:ff:e5:8c:b8:eb:14:6f:e1:2e:1f:
61:4d:5b:a9:d7:5a:fb:27:a7:95:28:24:54:35:d4:
17:93:f4:22:46:7b:8e:9c:77:ee:20:3e:22:1f:86:
34:bb:5c:6a:15:70:a5:3d:8f:01:54:d3:4b:ed:9d:
15:52:3e:3a:01:88:b8:20:26:37:54:a0:8b:0d:da:
d4:a4:a4:d2:78:12:2a:1a:f0:48:0f:f0:a2:c6:d3:
3d:44:76:b2:56:02:f3:f6:87:76:f9:ed:d4:db:ab:
c9:df:6d:1f:12:1a:d2:0d:3a:d7:be:48:24:a3:ae:
3b:22:a2:77:e6:b2:2c:57:3b:2c:f2:e9:91:6b:4c:
f6:ad:96:4d:7e:4f:fd:85:f0:d2:4a:9b:72:bb:85:
e2:fa:67:37:45:0a:e3:91:c7:09:3d:11:02:63:86:
0f:78:52:a9:9d:98:9d:49:5b:fc:6d:7c:5e:e7:4c:
c5:fc:15:e7:89:3b:29:2f:52:bf:fc:14:25:fc:78:
97:c3:0b:87:74:78:9c:d1:28:31:31:94:3f:b5:09:
2f:e0:05:4f:87:b4:87:b8:61:df:c7:27:ad:1e:10:
08:6f:7d:22:2d:95:bb:fc:7c:3b:ee:61:05:3d:1a:
4c:24:f8:05:4d:9c:07:62:bd:73:88:0e:6d:76:b8:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E8:CB:90:90:E9:D3:3F:DF:10:C6:11:DB:14:60:4A:29:BF:AB:8D
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.135.0/24
Signature Algorithm: sha256WithRSAEncryption
02:30:aa:f6:ef:dd:8f:e6:30:2d:06:ef:99:ed:f8:5f:6e:12:
6c:d3:56:60:7f:a4:d8:f5:b2:34:c3:d1:06:1f:30:f0:72:e7:
07:a1:70:f3:bb:7a:d6:04:1b:25:38:e3:28:51:d1:dd:d8:77:
3c:23:16:e4:09:5f:1d:81:17:ff:f1:7c:9e:a1:82:04:f4:5f:
81:d9:05:5e:fe:f0:4c:64:0e:bf:1a:fa:46:4a:ae:c9:53:20:
f1:7a:52:9c:ca:9b:e9:70:64:09:77:b5:b9:7b:12:b9:58:1c:
58:66:a2:82:83:b4:7a:5d:c6:68:e3:54:2c:71:3f:af:ae:7c:
e0:37:64:50:df:a5:cf:9e:6e:8f:e5:f0:82:0e:67:f1:24:97:
0b:96:9e:d5:c7:40:6c:fa:8d:a1:d7:bd:95:a9:5b:8e:b7:e1:
93:be:1f:6b:4f:fc:8c:aa:e3:58:c6:78:0f:3b:74:8e:61:58:
46:90:97:e9:64:48:bf:18:de:5e:9d:45:5e:58:7e:a3:2d:42:
fb:dc:7c:91:ba:a6:bb:ef:5d:79:67:0d:12:cf:08:54:cb:d0:
f9:99:07:f5:3e:8b:99:5b:87:85:62:5f:fb:13:92:8e:6a:fa:
76:5c:c1:32:38:3c:66:e8:71:7d:f3:dd:02:9e:03:6b:cd:05:
00:2e:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:56:43 2026 by rpki-client