Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: aMiu9rTDgE0EKwnhfPFHRXBPHj1b++EjtqH0KpbFkWA=
Subject key identifier: D7:6D:2F:10:17:8D:90:52:EE:02:58:8D:DE:6C:DD:D7:AE:1F:D5:3C
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 60B86DC445CF62F580B9F81DBC068B9740B9BEF1
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
Signing time: Sun 19 Apr 2026 05:00:00 +0000
ROA not before: Sun 19 Apr 2026 04:55:00 +0000
ROA not after: Sun 18 Apr 2027 05:00:00 +0000
asID: 24528
IP address blocks: 202.91.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b8:6d:c4:45:cf:62:f5:80:b9:f8:1d:bc:06:8b:97:40:b9:be:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 04:55:00 2026 GMT
Not After : Apr 18 05:00:00 2027 GMT
Subject: CN=D76D2F10178D9052EE02588DDE6CDDD7AE1FD53C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:9b:f0:49:11:c6:02:0f:57:37:a4:a1:82:
bd:c1:fc:70:ba:9e:69:a8:af:7a:2b:a3:3b:7d:1c:
9f:44:fe:08:c8:3f:60:5e:cb:4f:de:84:a4:76:0c:
27:8d:a7:8a:c7:95:47:37:48:1e:7f:bd:4c:0e:b0:
9a:07:c0:dc:f4:f7:8b:aa:37:9b:a9:77:7d:aa:50:
36:79:a3:32:f6:9b:52:53:cd:bf:d8:b1:73:5c:b9:
2b:85:18:45:8c:bc:59:63:b8:a9:87:14:fc:6b:4a:
dc:92:3e:7d:52:8a:f2:83:bb:01:2f:bf:33:ad:08:
e4:5c:a5:6d:88:ca:66:5d:10:d8:87:83:cd:85:ba:
4c:9e:a8:76:3c:34:4a:b2:3f:78:66:1e:45:00:2d:
7a:65:00:e1:31:0f:63:c8:a7:1f:c7:e3:df:73:6c:
66:d5:30:74:ee:47:7a:92:39:fc:51:a3:ef:1a:8f:
2e:aa:f2:6b:f5:b5:7b:f6:de:a1:70:67:51:97:35:
4f:4b:a7:6e:aa:07:16:73:4f:42:73:05:53:31:b3:
c6:95:3d:a1:f1:c7:ec:59:fd:77:82:50:3c:ec:90:
b3:63:52:62:06:e5:ec:9e:a1:cd:49:4f:ec:6a:03:
8f:cd:05:93:f7:98:6a:dd:23:62:55:b5:40:21:62:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:2F:10:17:8D:90:52:EE:02:58:8D:DE:6C:DD:D7:AE:1F:D5:3C
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.26.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:55:90:ff:77:bc:a4:e5:e1:a5:48:fc:1b:61:50:af:1b:f9:
02:bf:b7:71:1e:00:06:f4:bd:55:0e:38:af:9b:c8:74:bc:ea:
d4:e0:47:8b:3f:08:27:df:a0:60:c6:79:0e:c4:a9:7c:02:12:
68:a1:9a:a8:8a:dc:81:7e:94:45:bd:c2:bb:92:e9:14:9f:e8:
f1:2b:67:d0:27:2a:00:18:c5:48:56:4e:36:86:9a:98:64:d6:
d3:d6:00:e0:dc:b0:e5:b4:6d:73:98:32:0f:24:70:0c:11:c4:
cb:bf:2b:82:88:54:d7:52:2f:40:a3:4f:94:74:6e:75:89:07:
6e:31:f2:71:79:32:fa:e2:1d:bc:ed:28:ae:54:a0:5e:34:ea:
c6:d4:be:96:3e:04:d9:35:22:de:da:46:94:03:ab:55:0b:68:
28:b7:dc:dc:d8:b7:21:41:78:04:e0:6f:da:77:39:f2:98:c7:
0e:bc:9e:30:df:62:6f:81:99:18:6f:41:91:b5:53:bb:ca:28:
e0:34:b0:9b:7a:f5:4f:17:ac:5f:b7:98:cc:73:e3:e1:c5:b3:
74:6c:e5:5f:04:05:4b:7f:d0:bc:6e:85:18:2f:1f:9b:63:32:
29:6f:a4:60:d4:d2:a4:1a:54:d2:28:37:7d:10:cb:11:2e:7e:
f0:e2:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:16:02 2026 by rpki-client