Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32352e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: HXICStXWO2tF8FVXRn83AmpikzFJ37pXqsWilr8dFx8=
Subject key identifier: B8:1B:22:7B:44:4F:9A:17:9E:95:52:8A:B1:D1:38:12:C8:C3:8F:75
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 2AAE5AA1136B0A66F5CDCA0AAA386FD1410970DA
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32352e302f32342d3234203d3e203234353238.roa
Signing time: Sun 19 Apr 2026 06:00:00 +0000
ROA not before: Sun 19 Apr 2026 05:55:00 +0000
ROA not after: Sun 18 Apr 2027 06:00:00 +0000
asID: 24528
IP address blocks: 202.91.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ae:5a:a1:13:6b:0a:66:f5:cd:ca:0a:aa:38:6f:d1:41:09:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 05:55:00 2026 GMT
Not After : Apr 18 06:00:00 2027 GMT
Subject: CN=B81B227B444F9A179E95528AB1D13812C8C38F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:2e:44:f9:ba:87:e1:78:d2:26:56:76:db:
14:e5:30:63:8e:39:31:37:26:5b:1d:4d:47:86:fd:
76:a0:69:6f:e3:e7:00:c9:e4:dc:77:b9:74:80:fa:
8f:c0:cd:97:fe:d7:25:96:d4:7e:a9:df:5d:4e:58:
69:7e:08:27:c8:13:6d:05:20:9a:2f:52:7a:f2:23:
e7:fa:c4:c2:4c:61:6a:46:a0:9f:f8:8c:c1:ec:46:
d8:93:c9:db:76:a4:dc:49:11:2a:26:ad:29:11:b7:
b9:1f:cf:00:18:26:78:68:90:3e:0c:68:48:40:92:
09:b7:ee:5e:0a:f0:9e:25:3c:06:5f:04:ff:b2:c7:
a9:eb:be:8e:4d:75:2b:a2:73:80:c3:c1:fd:1a:0a:
80:60:d6:94:47:98:10:c1:cc:a6:33:b2:5e:b8:8d:
24:cc:d9:21:fd:cf:d8:25:ec:2b:32:80:ad:11:14:
1a:0e:ab:16:b9:6a:a6:61:68:e6:26:db:26:da:e4:
69:ae:0d:ac:c6:63:c2:c5:2f:c6:46:83:bb:36:ab:
0b:42:fb:26:c0:76:e0:60:ff:b4:e7:d1:e6:25:be:
70:0b:ac:a8:18:7d:42:53:6d:74:f4:a3:8f:a5:62:
39:94:df:0e:ea:bb:9c:fb:2e:0a:82:7a:28:a4:85:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:22:7B:44:4F:9A:17:9E:95:52:8A:B1:D1:38:12:C8:C3:8F:75
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32352e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.25.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f9:0c:38:e6:e1:31:c7:f5:1f:23:b2:1d:82:58:d2:fc:72:
f3:55:3a:bb:d1:11:8c:91:99:13:6c:95:9b:e3:ec:1e:b4:a5:
0d:63:aa:f2:68:18:2a:cf:24:36:54:67:db:06:4b:7a:b2:e8:
df:f1:02:40:2f:3e:e1:43:48:49:70:fe:2e:94:c3:c7:a5:bc:
6b:b0:ae:4e:25:ed:e2:1a:cc:6d:3e:01:4b:30:c8:e7:83:c7:
7a:7e:2f:74:e0:70:44:31:3b:1e:f9:4b:c2:e7:77:96:8d:37:
cb:78:8e:dc:24:16:41:78:aa:09:95:14:f4:09:93:ad:b3:ee:
fa:14:3c:c6:e9:43:d0:b7:c4:ac:84:b4:a9:f4:3a:94:76:f9:
f9:24:86:cf:8c:35:c1:61:34:e7:92:5b:c4:f8:11:c1:b2:d7:
c4:ee:c8:36:25:a5:c8:68:13:cd:15:af:af:db:8f:2b:35:bd:
be:b9:db:10:dd:f3:9e:8a:ec:e5:14:a3:da:d2:35:4a:82:b0:
e2:e5:53:04:46:22:de:1f:c5:41:8f:28:a8:bf:11:24:07:12:
07:4c:c6:7e:5c:95:f1:9c:40:51:65:2c:60:d9:b6:32:e5:59:
61:13:c1:00:26:a9:e6:82:69:51:14:c7:55:3f:66:31:40:3f:
d7:3a:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:16:00 2026 by rpki-client