Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32312d3231203d3e203436303435.roa
File: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (raw, json)
Hash identifier: Civp2xmQICqr/mFx18VcoWgLi+2r+EFDIPjoh2VNc9c=
Subject key identifier: E7:82:9F:FB:22:E0:36:F6:48:C5:35:02:07:3F:A6:7C:8E:4B:82:06
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 21C882CF5F2AFC73C46A07C8B0D84B1234A3EA11
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32312d3231203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 06:58:00 +0000
ROA not after: Tue 20 Apr 2027 07:03:00 +0000
asID: 46045
IP address blocks: 122.128.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c8:82:cf:5f:2a:fc:73:c4:6a:07:c8:b0:d8:4b:12:34:a3:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 06:58:00 2026 GMT
Not After : Apr 20 07:03:00 2027 GMT
Subject: CN=E7829FFB22E036F648C53502073FA67C8E4B8206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:f5:ff:a9:f2:19:16:e5:1c:53:ac:33:ed:
e5:08:95:83:19:c9:b5:d8:c7:17:d5:ce:5d:ad:d5:
50:03:91:6a:44:a5:ef:09:83:70:cc:41:b4:6e:fa:
dc:7a:89:27:e8:8e:dd:df:ff:e6:de:63:8b:48:9b:
77:e5:74:67:ce:ab:85:19:e2:3c:71:f0:ab:7c:0d:
37:5f:5d:24:73:42:f6:3c:af:38:f7:29:c4:2b:da:
ad:5b:54:76:92:9f:df:8f:a3:39:0d:3c:78:e4:07:
16:36:84:19:fa:0e:c3:09:1e:4f:ca:72:86:0d:18:
9d:6f:f7:97:73:24:a1:cf:05:d1:99:ea:8a:f6:91:
2f:03:aa:5c:ad:a8:70:7d:40:1c:a3:fd:ca:85:94:
d7:b6:66:93:1a:7f:77:6e:ed:09:aa:a8:86:ce:64:
1b:74:25:c4:a0:5e:68:f7:14:2e:78:63:9d:95:ce:
76:07:c6:ba:b1:23:9f:62:45:a0:86:88:f5:a5:64:
ce:a4:23:cf:c6:c4:44:77:fe:98:af:92:27:bb:c3:
4d:e4:95:ad:c7:a7:15:33:eb:72:da:dc:e9:3e:e8:
8f:50:8f:87:d1:49:14:a1:f0:fc:89:d2:0e:b4:01:
d1:d4:4d:fe:2c:43:1a:4a:f7:b6:e3:54:e4:a6:ea:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:9F:FB:22:E0:36:F6:48:C5:35:02:07:3F:A6:7C:8E:4B:82:06
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32312d3231203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.16.0/21
Signature Algorithm: sha256WithRSAEncryption
02:d0:51:39:2a:b2:ef:0c:a5:c6:cb:9a:c9:8f:d7:36:24:94:
be:7a:f1:58:0e:d5:33:38:50:f8:ec:fe:6a:39:ff:80:6c:ca:
60:65:b1:52:fe:0c:00:5b:fb:d9:be:b2:a5:bc:6f:99:11:63:
5a:e0:9f:f6:65:20:58:f5:4a:7f:76:78:8e:fa:b8:43:dd:f0:
b6:4b:2f:11:36:75:ef:ee:59:b7:40:4c:6b:22:f1:5c:9a:41:
4e:9c:e3:bc:7e:88:11:57:a9:6d:5c:db:20:7a:3b:eb:59:12:
e0:eb:af:c0:8f:44:32:06:99:47:81:54:a1:ff:b1:d8:58:b4:
d4:b0:8e:98:c9:8f:2b:53:23:3a:ce:f4:77:9d:6f:c8:83:4e:
08:54:0c:2a:d8:75:a2:ee:0c:ca:c5:b6:07:a5:8c:6f:af:4c:
20:db:43:24:14:47:9f:cc:a7:77:8c:41:eb:58:22:c1:86:d6:
82:e1:24:22:f5:58:29:a1:69:1b:53:47:80:f6:b9:74:47:37:
5a:b4:62:f5:8a:eb:08:08:47:38:cc:65:b6:a2:37:59:66:45:
ff:c8:22:06:f9:46:a5:04:5c:03:b7:8e:00:2f:29:c1:88:30:
2f:73:30:e5:af:d4:ba:27:0b:d3:92:b2:5c:bd:3b:f1:0b:36:
2f:ed:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:09 2026 by rpki-client