Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa
File: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (raw, json)
Hash identifier: PKj0WK8pf4QdFJ+CkI5GYHiybnyFECrITFlLo832xp0=
Subject key identifier: 39:1C:E6:EC:9C:F8:83:32:37:93:F8:8C:EA:1A:22:37:D0:8B:26:F8
Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Certificate serial: 457C46D340FC3D480FD42B7216BF8BEBE51FABE3
Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa
Signing time: Thu 23 Apr 2026 05:02:50 +0000
ROA not before: Thu 23 Apr 2026 04:57:50 +0000
ROA not after: Thu 22 Apr 2027 05:02:50 +0000
asID: 150242
IP address blocks: 2001:df2:7fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7c:46:d3:40:fc:3d:48:0f:d4:2b:72:16:bf:8b:eb:e5:1f:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Validity
Not Before: Apr 23 04:57:50 2026 GMT
Not After : Apr 22 05:02:50 2027 GMT
Subject: CN=391CE6EC9CF883323793F88CEA1A2237D08B26F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:63:b0:16:41:91:8e:b0:cc:24:3b:18:5f:
48:ae:2b:88:0a:eb:90:a7:90:39:3b:e3:81:d1:e5:
27:72:f3:f1:d4:05:28:16:2b:9c:b3:9d:26:9a:1a:
20:e8:2c:69:6d:b2:42:25:bb:ee:c9:8c:82:e7:ec:
11:92:1e:61:1a:9f:09:26:68:63:c0:e4:22:28:6f:
3c:ee:4e:d6:ee:19:57:b0:0c:d3:9a:ee:df:4d:0b:
56:2b:3e:5b:6b:d5:3d:66:3d:96:07:f9:aa:7e:e4:
e6:e8:e9:4e:e4:c8:46:75:d3:46:59:8d:27:49:b5:
b7:7a:cb:52:fa:c5:e5:b1:ed:e8:15:93:ee:d2:38:
b3:4a:dc:91:00:52:47:4c:73:9a:8f:7b:71:60:69:
b5:db:49:90:13:fd:95:fc:b6:8d:d3:47:af:e0:81:
d0:20:8c:c5:4f:dd:5f:a2:11:53:c5:5d:70:4d:89:
0e:6d:bf:ba:37:f3:23:d1:53:51:48:20:c1:3c:c2:
17:df:52:f2:75:27:37:e0:35:48:65:01:da:f8:f7:
2d:a8:c4:9d:8c:4f:3d:59:63:ed:13:a9:63:aa:13:
f6:14:9c:00:59:01:a8:36:f4:47:e1:cf:53:49:a4:
c3:fd:aa:cd:6d:8c:2a:ab:b9:4c:f8:d6:0f:3c:6e:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:E6:EC:9C:F8:83:32:37:93:F8:8C:EA:1A:22:37:D0:8B:26:F8
X509v3 Authority Key Identifier:
keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:7fc0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:df:18:54:82:00:5a:e8:af:57:d3:78:ef:02:97:44:07:f5:
23:62:8b:c9:f3:4a:4b:55:1c:94:51:6a:40:6b:50:04:eb:a4:
94:1a:b2:db:4a:5d:d6:76:0e:5e:dc:b9:1b:10:3f:5b:eb:0c:
22:a6:37:37:dc:18:cf:ad:18:a3:57:fc:48:a5:c8:80:a8:25:
fc:79:89:13:6c:dd:87:d5:f5:0b:ce:d7:51:05:9b:b3:b2:e5:
eb:12:98:a8:84:55:23:b3:38:f4:c8:1c:c5:2f:df:61:d6:df:
55:4b:45:2b:61:48:34:14:0e:04:89:d1:45:1d:a9:8f:0e:1d:
31:e7:1c:74:0e:98:ca:e2:32:ae:9c:46:73:43:01:e6:b4:12:
29:74:fb:55:05:d1:5c:20:73:c1:ce:28:f9:44:58:0a:06:2f:
97:ff:23:b2:a8:21:0f:04:59:3a:ff:8e:d3:74:57:5a:f7:e6:
5c:5e:3b:19:06:97:84:96:7d:cc:57:76:e9:1b:b2:35:86:e2:
20:10:06:50:a4:35:86:4e:5b:fe:df:c9:b6:73:57:74:7d:b4:
cb:dc:1f:8b:39:4a:2d:93:89:ff:22:47:98:87:94:bf:17:02:
a1:da:d4:d8:3a:37:29:ce:b0:18:b5:66:1d:8d:bf:fc:e1:de:
64:12:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:53 2026 by rpki-client