Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32342e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: PXvBmFLt0R0uBbS0aDKUt5W6dR9nSgNpysRvdjlb5Xk=
Subject key identifier: 28:CE:FA:3D:90:FC:C8:C6:74:57:4F:3C:2F:C3:8E:49:74:84:09:AB
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 2596C24A71B2F6714F30BDD14A3904351944E37F
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32342e302f32342d3234203d3e203234353238.roa
Signing time: Sun 19 Apr 2026 05:00:00 +0000
ROA not before: Sun 19 Apr 2026 04:55:00 +0000
ROA not after: Sun 18 Apr 2027 05:00:00 +0000
asID: 24528
IP address blocks: 202.91.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:96:c2:4a:71:b2:f6:71:4f:30:bd:d1:4a:39:04:35:19:44:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 04:55:00 2026 GMT
Not After : Apr 18 05:00:00 2027 GMT
Subject: CN=28CEFA3D90FCC8C674574F3C2FC38E49748409AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:be:ed:da:bb:12:6c:f0:b1:a7:5b:36:90:
70:06:ee:98:ec:35:87:39:76:f8:c8:e2:f2:05:cb:
a4:31:8e:e2:0d:ee:b8:fc:79:c5:1e:58:36:ee:81:
49:a0:2d:a9:55:5c:aa:c5:e0:b7:20:d2:cb:ac:16:
c4:51:80:40:31:6a:1d:28:58:40:31:02:25:1c:ce:
64:bc:49:7c:c9:50:04:a8:c6:6d:67:90:da:cd:3a:
b2:2f:a0:82:a2:72:24:75:9b:18:da:40:6b:c9:26:
be:8b:b0:4e:eb:ce:82:b8:c0:d7:fa:6a:16:8c:76:
2f:70:fc:b3:71:35:1c:c2:08:a8:7b:b4:88:fd:6a:
44:58:e5:20:9a:d0:ce:ac:6b:30:a7:4d:4b:6f:09:
d8:a0:56:6a:0f:eb:ca:81:85:20:fc:80:e2:71:58:
00:19:fe:cf:57:26:9f:1b:57:d1:cc:30:26:1b:81:
22:3d:e4:ce:5f:8f:52:80:51:a1:e9:46:38:cd:c3:
ec:f5:15:69:41:79:b0:43:56:92:c1:95:93:8f:61:
6a:76:22:2f:04:18:d7:52:ba:ec:6d:12:76:d1:59:
4b:91:0c:39:73:d8:64:7e:cb:d5:49:b4:2f:3d:6d:
4d:39:96:08:4d:3c:a7:b6:1f:0b:4c:44:d3:9b:bd:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:FA:3D:90:FC:C8:C6:74:57:4F:3C:2F:C3:8E:49:74:84:09:AB
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32342e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.24.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:e0:f0:e9:6a:6f:33:57:24:55:e3:80:64:37:d5:69:ba:dc:
06:b4:39:cd:b0:91:d5:9c:d3:16:6e:e5:13:b3:c8:5a:57:65:
87:c6:cb:92:4d:a1:77:1b:63:33:ea:69:fb:f7:fb:4a:b7:68:
79:3e:b5:d2:4b:40:bf:8f:e8:c1:cf:ca:40:00:b4:d9:64:ab:
46:03:b0:18:11:53:15:3c:6e:ff:18:08:9a:43:5b:84:9f:f9:
57:9d:eb:45:2a:bc:cc:66:18:af:4e:6a:89:96:3c:a1:85:ce:
19:5d:29:95:47:46:8d:66:e2:e6:87:ee:76:43:3d:04:f0:a7:
8d:84:dd:13:96:55:c3:48:98:58:39:57:19:c5:7c:3c:b8:ee:
94:84:3e:ee:31:37:d7:f6:1a:28:d6:7e:3c:b7:b5:24:20:ec:
8c:22:df:fb:45:5f:b7:92:e0:03:e6:22:8a:2f:aa:f4:74:7c:
c3:22:02:ac:88:3b:bb:d3:59:74:13:54:52:79:f9:3f:28:8f:
d4:36:1b:21:c4:49:9f:91:76:ab:65:c8:cb:0e:2e:ce:8a:0c:
37:ed:27:ad:92:f0:ee:2e:92:10:b2:cf:a9:14:b0:d4:79:e6:
d8:86:78:85:27:0c:35:46:69:6c:75:0e:a9:4f:16:28:c7:67:
98:dd:66:1c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJZbCSnGy9nFPML3RSjkENRlE438wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE
RDNDNjcxQTAeFw0yNjA0MTkwNDU1MDBaFw0yNzA0MTgwNTAwMDBaMDMxMTAvBgNV
BAMTKDI4Q0VGQTNEOTBGQ0M4QzY3NDU3NEYzQzJGQzM4RTQ5NzQ4NDA5QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVL77t2rsSbPCxp1s2kHAG7pjs
NYc5dvjI4vIFy6QxjuIN7rj8ecUeWDbugUmgLalVXKrF4Lcg0susFsRRgEAxah0o
WEAxAiUczmS8SXzJUASoxm1nkNrNOrIvoIKiciR1mxjaQGvJJr6LsE7rzoK4wNf6
ahaMdi9w/LNxNRzCCKh7tIj9akRY5SCa0M6sazCnTUtvCdigVmoP68qBhSD8gOJx
WAAZ/s9XJp8bV9HMMCYbgSI95M5fj1KAUaHpRjjNw+z1FWlBebBDVpLBlZOPYWp2
Ii8EGNdSuuxtEnbRWUuRDDlz2GR+y9VJtC89bU05lghNPKe2HwtMRNObvZalAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUKM76PZD8yMZ0V088L8OOSXSECaswHwYDVR0j
BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD
MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND
NjcxQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i
MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMyMzAzMjJlMzkzMTJlMzIzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzQzNTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWxgwDQYJKoZIhvcN
AQELBQADggEBAObg8OlqbzNXJFXjgGQ31Wm63Aa0Oc2wkdWc0xZu5ROzyFpXZYfG
y5JNoXcbYzPqafv3+0q3aHk+tdJLQL+P6MHPykAAtNlkq0YDsBgRUxU8bv8YCJpD
W4Sf+Ved60UqvMxmGK9OaomWPKGFzhldKZVHRo1m4uaH7nZDPQTwp42E3ROWVcNI
mFg5VxnFfDy47pSEPu4xN9f2GijWfjy3tSQg7Iwi3/tFX7eS4APmIoovqvR0fMMi
AqyIO7vTWXQTVFJ5+T8oj9Q2GyHESZ+RdqtlyMsOLs6KDDftJ62S8O4ukhCyz6kU
sNR55tiGeIUnDDVGaWx1DqlPFijHZ5jdZhw=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:46 2026 by rpki-client