Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: Dsrk7UxMqLDP/FUddO0Y2IOs4IIYUQYe/A3a2qDj6/8=
Subject key identifier: 5C:F8:69:E6:9E:E7:06:A0:05:4A:16:8C:AF:4C:F4:29:9D:8C:66:91
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 735F7A2BF87FC0EEC04ADC1F0B5618A1F353F400
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 06:00:51 +0000
ROA not before: Tue 21 Apr 2026 05:55:51 +0000
ROA not after: Tue 20 Apr 2027 06:00:51 +0000
asID: 46045
IP address blocks: 122.128.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5f:7a:2b:f8:7f:c0:ee:c0:4a:dc:1f:0b:56:18:a1:f3:53:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 05:55:51 2026 GMT
Not After : Apr 20 06:00:51 2027 GMT
Subject: CN=5CF869E69EE706A0054A168CAF4CF4299D8C6691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:44:0a:97:f9:48:a8:8c:dc:02:d1:4b:3b:
40:8b:d9:f2:a9:c4:b5:11:5e:b5:9f:e7:88:a9:49:
31:43:8b:d0:7a:30:60:45:b3:27:4f:82:d6:b1:e4:
d5:34:52:c6:c6:d8:eb:ca:f1:ee:02:0d:2d:09:0f:
58:0f:6b:63:92:29:5f:c5:10:9f:41:06:94:94:41:
f2:ce:9f:12:6e:ff:5f:16:10:c3:b2:3c:08:36:01:
a3:05:88:a6:ab:c9:34:b3:44:d0:9c:65:ef:e4:8c:
35:42:6b:66:30:cf:87:7f:1a:78:10:66:06:bf:c9:
b4:63:9d:b7:9c:d9:e1:2c:ef:46:e9:d9:55:39:99:
2f:6b:dd:ca:3b:49:ce:c6:6e:ac:ba:2c:44:4f:0c:
43:8e:9b:4d:cf:f1:cc:79:99:f2:ed:2b:d4:db:06:
89:65:c0:7a:66:e6:89:ff:9e:40:3e:4f:08:65:86:
1f:e3:ac:cd:42:07:28:3e:e6:c5:9f:17:43:c1:bf:
f0:6a:2d:f2:d6:44:0b:92:29:a0:39:c0:cb:5e:75:
a9:88:ac:5d:b1:d9:c5:dc:2b:54:0a:67:a2:35:50:
56:47:fb:ed:71:a8:12:b2:b3:d8:ca:00:44:76:95:
e8:bb:fd:13:a5:f5:b9:db:38:4d:c0:7b:6d:4a:72:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:69:E6:9E:E7:06:A0:05:4A:16:8C:AF:4C:F4:29:9D:8C:66:91
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9b:ed:ec:90:a5:a1:fc:63:bf:06:1a:7c:d8:60:37:9f:f3:
11:3d:ca:11:eb:7b:42:5c:69:c6:be:10:76:c3:b7:7d:10:1a:
0e:e9:55:52:53:40:36:73:00:df:08:8b:a4:ef:6c:8c:43:45:
35:ac:61:f2:89:0c:38:74:35:67:51:0e:66:00:a2:54:b1:3b:
4a:cd:12:d5:0b:41:b1:4f:a1:19:6d:55:51:b4:46:ba:b9:b0:
39:8a:f6:fd:36:50:a5:7f:8c:2b:f1:fa:b5:d7:59:a6:d1:1c:
a9:75:9c:8f:e2:73:59:63:1c:df:65:09:d3:58:93:d6:c1:d0:
5c:2a:3f:39:e8:68:c1:5d:37:89:2b:60:1f:07:60:52:69:61:
8b:cf:5e:fc:89:11:68:70:0a:58:0e:73:04:a9:32:49:5c:c0:
d7:27:32:2d:22:ea:78:38:00:a2:99:11:fc:d7:c9:81:bf:73:
b3:1d:51:c5:9c:cb:fd:bc:3f:1d:ba:7b:a5:7c:ad:84:c7:67:
4a:73:42:b3:d9:60:52:85:99:fa:9f:e2:cb:c5:fc:ec:20:dd:
10:0a:db:47:c5:03:ed:16:35:af:cc:ec:09:14:10:68:46:e2:
38:50:59:75:a4:48:83:f9:e1:a7:a3:e3:fc:a0:6a:dd:e1:a3:
dc:e6:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:26 2026 by rpki-client