Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: MVPFFhZCSRyYUv1InP+OOsAvPcoRh44s1CKKXSLmgZg=
Subject key identifier: 7B:84:B8:A9:EF:C5:6C:EE:DB:19:B3:D6:F9:C2:A9:C4:1E:32:3F:6C
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 62813332217E8FC923070317A56B17040F9A3470
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
Signing time: Sun 19 Apr 2026 04:00:00 +0000
ROA not before: Sun 19 Apr 2026 03:55:00 +0000
ROA not after: Sun 18 Apr 2027 04:00:00 +0000
asID: 24528
IP address blocks: 202.91.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:81:33:32:21:7e:8f:c9:23:07:03:17:a5:6b:17:04:0f:9a:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 03:55:00 2026 GMT
Not After : Apr 18 04:00:00 2027 GMT
Subject: CN=7B84B8A9EFC56CEEDB19B3D6F9C2A9C41E323F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:31:fc:b5:cb:59:5c:44:f5:27:22:88:9e:
9e:8a:54:91:54:52:4b:b1:bc:cd:78:37:d1:c9:f8:
69:ab:6d:03:79:42:e3:cc:67:28:05:c5:c1:62:a8:
ca:43:a4:62:69:43:ac:f2:fa:36:f3:23:d1:2c:22:
33:0f:f1:fe:41:b9:aa:2c:ee:06:33:4f:5c:e8:dc:
f2:72:5e:d4:5f:a1:c1:86:32:61:a5:12:97:9f:af:
1a:a5:2c:a7:6e:9b:89:86:4c:23:f0:56:7f:21:a4:
54:c5:26:1e:0d:d1:e7:5f:74:ff:c9:30:de:72:6d:
25:ba:f0:5c:a4:9c:19:24:63:2e:aa:bb:45:c9:b4:
29:b5:e8:79:d7:85:91:ee:fc:ba:b7:ec:a0:06:e7:
b2:35:eb:2f:b5:fc:6e:4a:9b:b6:b9:ca:f4:45:1a:
5e:7a:41:b9:0f:1e:f3:e8:f4:a8:b8:39:e3:49:ae:
bf:c1:44:d0:21:36:73:ae:ee:37:43:11:20:94:86:
5c:e7:89:23:7d:4f:6d:d9:98:d0:c7:fc:1f:6b:c2:
85:25:37:7a:ce:a5:88:b8:96:4d:e7:09:75:c2:81:
97:7d:92:d9:ae:67:f3:af:be:61:d5:c9:03:2c:c0:
d8:ac:3e:8c:e2:5f:f3:6c:93:08:97:71:be:71:97:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:B8:A9:EF:C5:6C:EE:DB:19:B3:D6:F9:C2:A9:C4:1E:32:3F:6C
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e7:5e:1f:62:c0:d4:70:3a:0c:ac:ef:50:27:d4:ab:41:5d:
b2:11:d1:d7:bd:9e:7a:84:53:53:89:12:5f:e6:f9:e8:ea:72:
e1:a6:9b:28:ba:7e:45:b7:8f:1f:b0:2b:97:38:95:c2:b5:eb:
7d:d6:9d:9c:4b:4a:bf:92:1e:a2:cd:ab:9a:8f:93:39:79:bb:
df:32:4f:a8:82:ba:b7:c9:9e:8e:1b:47:dc:7a:d5:ec:a1:b2:
33:7f:fa:9b:a8:ea:9d:f9:30:18:94:c9:ee:1e:ba:9e:a4:22:
f4:29:42:96:5f:a2:37:7f:b7:5d:20:4a:4e:07:29:b1:f0:42:
09:6f:5c:a8:ae:a3:8b:40:6b:13:c4:8c:a2:1e:50:e9:c4:10:
a2:9f:2b:0a:75:14:99:48:27:16:fc:eb:30:69:58:89:fc:a1:
14:60:13:58:7c:ef:0a:89:62:29:89:c1:1c:92:bd:5d:33:47:
8f:5a:37:ef:96:4a:b5:7f:26:0d:ae:d8:35:d3:69:3e:16:07:
c0:b6:97:a2:07:fb:2c:44:1a:0e:03:23:f2:14:0f:5b:96:57:
74:8a:6e:53:54:a5:90:15:e5:d2:21:08:c4:78:6c:14:b1:d1:
85:5c:ff:da:af:8d:29:67:9c:5c:ed:c7:42:d5:03:cc:e7:28:
6e:8a:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:16:02 2026 by rpki-client