Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32382e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: VuSkHJT5GEm/gao4HnFeGIY2ZlzJGJkVDLp36nHGoO0=
Subject key identifier: A1:D2:38:60:F9:33:DE:D5:26:DF:22:3F:3E:2F:62:8C:D1:E1:7D:4F
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 4F59F5796EBA6B4C1FFD22A97835AF5D3D45C1B6
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32382e302f32342d3234203d3e203234353238.roa
Signing time: Sun 19 Apr 2026 07:00:00 +0000
ROA not before: Sun 19 Apr 2026 06:55:00 +0000
ROA not after: Sun 18 Apr 2027 07:00:00 +0000
asID: 24528
IP address blocks: 202.91.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:59:f5:79:6e:ba:6b:4c:1f:fd:22:a9:78:35:af:5d:3d:45:c1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Apr 19 06:55:00 2026 GMT
Not After : Apr 18 07:00:00 2027 GMT
Subject: CN=A1D23860F933DED526DF223F3E2F628CD1E17D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:c4:03:e3:3a:8e:9d:da:da:04:5b:62:c5:
94:b8:88:8f:c2:2a:11:80:26:fe:fe:45:07:5e:87:
c7:f9:30:53:8e:94:50:26:24:f7:2d:02:8e:b2:04:
56:d4:9f:39:05:8f:11:23:0a:08:bc:f6:a3:03:00:
9a:97:72:f5:cd:b7:c8:d1:41:4e:26:7a:be:fd:85:
d6:26:e5:c9:75:1c:9c:99:99:65:f5:da:d8:d5:30:
d5:56:e0:86:55:10:ed:c8:2e:33:9c:40:8a:a6:7d:
63:8b:51:63:67:f5:f2:57:20:e8:7c:76:dd:8a:d8:
03:93:b0:51:9f:ee:7b:85:3a:b5:a8:ac:35:b7:34:
be:0d:3d:4c:c2:12:86:0b:4b:34:54:41:4d:23:ad:
58:37:d6:f7:7c:f8:72:d6:b9:51:4d:40:6b:37:90:
41:e2:8a:8e:91:74:71:c6:69:e3:eb:e4:58:a1:03:
3d:5c:ec:af:e5:62:3e:9e:97:13:74:96:3c:1a:e0:
cd:23:a8:58:cb:d1:e9:09:da:ba:fa:01:fa:5e:8a:
cc:0b:3f:f6:e6:2b:48:d0:57:ab:0f:ff:5c:1d:f7:
22:28:07:02:6c:0d:89:0d:d7:29:f8:e2:47:65:65:
96:ec:1a:02:87:55:63:fd:d3:08:c2:eb:1d:c9:a5:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:38:60:F9:33:DE:D5:26:DF:22:3F:3E:2F:62:8C:D1:E1:7D:4F
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32382e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:17:26:da:5d:69:11:7c:40:e5:36:8e:4a:79:6f:9f:f0:1e:
00:73:91:db:c2:3a:f3:10:85:09:e3:20:ed:1e:bf:d7:01:34:
a1:ba:f2:14:ce:7c:7e:f0:d8:bc:03:8f:51:5c:c0:b0:59:56:
5e:53:76:c9:10:ef:e1:2d:0a:bb:e2:be:f7:2c:24:6f:df:bd:
3b:a7:50:81:4d:e7:e2:a4:55:29:b2:17:1d:4a:cd:cb:fe:ba:
0a:ab:d4:c3:8f:8e:61:07:65:a3:b9:fe:7a:72:1f:2f:ca:08:
a6:2c:6d:bd:82:51:3f:45:f3:88:65:88:9d:01:b4:f2:fe:40:
b9:2c:1d:57:7d:60:51:66:ed:39:81:c2:24:02:76:bb:9f:2c:
74:3a:a8:ce:f5:72:ca:1f:26:29:98:61:30:a0:3f:54:7d:98:
a1:a6:bd:79:dc:b2:20:b4:18:3d:0e:17:bb:f3:c1:88:2a:5b:
21:84:00:98:ca:9d:90:67:db:19:15:60:54:37:ad:7a:93:d6:
90:1f:37:a9:ae:0c:c1:89:47:ce:7a:4a:c0:f4:37:e7:bb:c9:
50:7f:b3:90:21:47:e0:54:bb:ef:5e:31:ac:fd:14:97:a6:62:
91:29:ed:cb:a3:16:00:18:56:47:01:f6:ec:25:ad:5b:4e:77:
27:32:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:16:03 2026 by rpki-client