Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31372e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: tjiS10Tz50OkT1FKnOD2OgFO39YbQgVvaZBVlsE/b04=
Subject key identifier: 35:E7:08:79:CE:95:E5:86:36:8A:7E:2D:89:83:24:01:F2:42:4D:EA
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 1B76CC72AC22BB41D0260249AD93565B8F9C1EE4
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31372e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 06:00:51 +0000
ROA not before: Tue 21 Apr 2026 05:55:51 +0000
ROA not after: Tue 20 Apr 2027 06:00:51 +0000
asID: 46045
IP address blocks: 122.128.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:76:cc:72:ac:22:bb:41:d0:26:02:49:ad:93:56:5b:8f:9c:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 05:55:51 2026 GMT
Not After : Apr 20 06:00:51 2027 GMT
Subject: CN=35E70879CE95E586368A7E2D89832401F2424DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:45:df:fa:8a:15:5f:d6:d8:21:29:81:e2:
7e:bb:97:ff:85:f8:dd:fe:54:1a:00:42:1e:1d:22:
82:06:c8:00:25:1c:d4:ad:c6:aa:1c:77:cc:28:ce:
db:af:95:91:b3:af:d7:f6:0d:b7:a7:01:36:51:8d:
4b:c2:44:9d:18:da:3a:49:a5:2c:5b:b9:e4:2e:26:
1e:b4:35:c3:be:b9:f9:5f:af:39:e3:3d:6b:b7:6e:
04:a3:a8:c5:5a:27:98:c7:6e:c6:ea:e2:94:4e:a2:
13:3d:6c:85:25:f4:43:2b:c9:1a:d6:f5:57:c8:a0:
3f:1b:b7:7a:55:38:3e:99:b8:18:77:d3:d4:3e:a4:
1b:e6:58:e2:c0:eb:f0:c0:31:57:a7:b7:f7:e3:05:
8d:0f:dd:b7:9e:aa:39:c1:2a:7c:1d:7a:91:5f:61:
88:65:29:b8:43:cc:66:35:b2:85:99:bb:89:73:3d:
35:30:75:41:69:ab:c4:84:04:f4:49:80:02:6a:b4:
88:bd:ac:bb:52:9d:ae:4d:56:df:b8:81:64:52:f6:
4e:03:c9:fc:9f:18:3f:fb:e9:9c:df:24:dc:0a:7a:
6b:c5:af:23:7e:04:82:2e:d8:50:5f:90:30:ee:be:
37:36:6a:a9:a6:56:72:28:e2:e5:36:df:d2:06:0f:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E7:08:79:CE:95:E5:86:36:8A:7E:2D:89:83:24:01:F2:42:4D:EA
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31372e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.17.0/24
Signature Algorithm: sha256WithRSAEncryption
90:84:9e:a9:41:87:a1:34:76:98:67:57:f3:75:df:cb:e4:94:
45:96:1f:27:a4:b1:39:a0:0a:0c:ba:88:b5:0b:4b:aa:a3:8c:
a0:1b:d9:06:b2:fb:8d:f0:00:9a:86:6a:66:4d:eb:3a:90:50:
68:8a:be:b3:07:db:e9:ff:e1:c1:7a:41:15:7b:ab:8c:80:c5:
e4:8c:20:12:fe:65:f8:61:e8:a4:66:93:14:a9:6d:d9:e6:26:
43:49:b7:e9:60:da:26:54:de:5d:20:bf:c7:8f:5d:55:68:99:
19:a7:e7:30:66:c9:f9:d9:9d:b5:9f:ce:2e:c9:2e:5c:12:e0:
b3:a1:06:0a:20:74:cc:8d:01:58:b4:31:08:47:e4:10:e3:59:
28:a7:24:f5:82:d6:3b:99:69:fc:35:6a:bb:e1:b9:a8:17:db:
d7:56:cc:55:15:58:13:47:22:57:5c:a8:ec:80:9c:ad:08:29:
b3:2e:90:80:73:2f:3a:42:fe:44:90:16:1e:af:02:ec:a6:7d:
e3:0d:bc:bb:af:80:f6:ea:3e:1a:35:36:7a:7a:f6:cf:68:0d:
d2:92:4f:e8:d3:8d:b8:04:d0:64:e7:34:22:37:b3:f9:38:de:
50:94:74:ae:86:4f:29:e6:3c:22:00:84:3f:1c:64:41:41:db:
0e:e1:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:27 2026 by rpki-client