Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31382e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: ObB6jTK4wEQmx6P8+cFVr2UNncxNmUkTlJwyNxhRlV8=
Subject key identifier: 62:57:A1:1F:18:9C:74:93:50:46:D0:E1:DE:7F:C0:49:8A:18:F5:D2
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 16FD8FBF62B5AD6A5682275E6519EE8762108B6B
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31382e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 06:00:51 +0000
ROA not before: Tue 21 Apr 2026 05:55:51 +0000
ROA not after: Tue 20 Apr 2027 06:00:51 +0000
asID: 46045
IP address blocks: 122.128.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fd:8f:bf:62:b5:ad:6a:56:82:27:5e:65:19:ee:87:62:10:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 05:55:51 2026 GMT
Not After : Apr 20 06:00:51 2027 GMT
Subject: CN=6257A11F189C74935046D0E1DE7FC0498A18F5D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:45:d9:79:ef:db:86:7c:f2:20:3c:37:0d:
6e:eb:5d:06:88:7d:b8:4e:51:63:72:2b:52:1c:34:
16:60:2e:f6:57:31:57:82:93:68:23:59:4b:ee:32:
82:ba:3a:ca:65:7c:ba:e5:f6:d2:fb:d0:15:d9:f7:
2c:90:05:ec:c4:a7:e3:64:8b:44:4a:92:9e:e7:5c:
3e:27:e1:8b:69:ca:9e:27:59:b1:4e:1e:e5:1c:c0:
cb:86:a7:6e:e2:05:20:60:f3:9f:90:69:12:db:bb:
6b:35:35:52:8c:a2:5f:14:a0:58:b6:91:8f:84:bd:
d8:59:e9:76:aa:69:ff:3f:1e:5a:70:a1:72:49:1a:
dd:cd:d1:e8:01:3f:04:c9:69:2c:10:c3:dd:56:e6:
ee:be:9b:11:81:3f:4d:13:25:40:f3:ac:19:66:12:
fa:fb:a0:c5:3d:94:6e:6e:28:03:55:d0:cf:43:15:
bf:f8:57:dc:9e:31:35:0d:77:a4:73:22:da:46:cf:
69:cd:26:78:63:3c:4b:9a:1c:6a:39:06:c3:7e:de:
79:2f:4c:9d:a6:fc:23:6b:fc:79:30:9d:ee:9d:f1:
f5:ae:8d:11:22:52:bb:26:6c:39:e4:54:6d:05:0e:
87:f0:6f:b3:5f:52:90:57:92:60:2e:8c:c1:d0:83:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:A1:1F:18:9C:74:93:50:46:D0:E1:DE:7F:C0:49:8A:18:F5:D2
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31382e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.18.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1e:c3:b0:d3:05:0a:c1:e1:52:49:93:a7:dc:b8:da:fb:b0:
a5:c1:87:1b:dd:1e:3b:9d:1f:2e:11:46:40:33:92:43:63:53:
35:e5:97:b3:cb:78:e7:d1:3f:76:57:97:27:61:c4:61:11:ad:
b2:d1:33:88:2d:14:f3:b6:ea:6b:6f:9a:3c:79:c7:2c:9e:b4:
42:e8:52:f6:f6:ff:2d:84:e0:6e:9a:cc:34:d4:5d:ce:fd:ea:
73:dc:2b:83:44:3b:76:4f:c8:9e:9a:40:4a:70:25:63:12:e0:
05:db:ea:d3:ac:d0:c5:09:cd:f6:8a:9a:ff:4a:3f:59:fd:dc:
56:45:5a:41:4f:22:5b:43:8c:d6:4f:25:81:c1:87:55:94:4f:
46:51:fa:56:d9:5a:c5:85:82:1e:59:ec:72:e4:d9:de:29:17:
d9:17:06:b5:ea:2d:63:fd:d6:d8:52:2b:a0:16:03:10:8d:36:
31:60:05:7a:f3:c3:8b:16:d7:0c:51:47:8d:30:81:67:63:ee:
5d:74:42:b1:83:2a:cd:76:d8:bc:9a:7a:11:80:3d:14:e8:9b:
64:5b:6c:43:df:a1:2a:af:c1:55:4e:54:d5:b9:49:bb:83:01:
5e:85:49:ff:05:fb:9e:0c:f7:ed:13:0c:c4:2b:4e:70:6d:59:
49:be:b7:6d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFv2Pv2K1rWpWgideZRnuh2IQi2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNjA0MjEwNTU1NTFaFw0yNzA0MjAwNjAwNTFaMDMxMTAvBgNV
BAMTKDYyNTdBMTFGMTg5Qzc0OTM1MDQ2RDBFMURFN0ZDMDQ5OEExOEY1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYUXZee/bhnzyIDw3DW7rXQaI
fbhOUWNyK1IcNBZgLvZXMVeCk2gjWUvuMoK6OsplfLrl9tL70BXZ9yyQBezEp+Nk
i0RKkp7nXD4n4Ytpyp4nWbFOHuUcwMuGp27iBSBg85+QaRLbu2s1NVKMol8UoFi2
kY+EvdhZ6Xaqaf8/HlpwoXJJGt3N0egBPwTJaSwQw91W5u6+mxGBP00TJUDzrBlm
Evr7oMU9lG5uKANV0M9DFb/4V9yeMTUNd6RzItpGz2nNJnhjPEuaHGo5BsN+3nkv
TJ2m/CNr/Hkwne6d8fWujREiUrsmbDnkVG0FDofwb7NfUpBXkmAujMHQgwcfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYlehHxicdJNQRtDh3n/ASYoY9dIwHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAEjANBgkqhkiG
9w0BAQsFAAOCAQEAdR7DsNMFCsHhUkmTp9y42vuwpcGHG90eO50fLhFGQDOSQ2NT
NeWXs8t459E/dleXJ2HEYRGtstEziC0U87bqa2+aPHnHLJ60QuhS9vb/LYTgbprM
NNRdzv3qc9wrg0Q7dk/InppASnAlYxLgBdvq06zQxQnN9oqa/0o/Wf3cVkVaQU8i
W0OM1k8lgcGHVZRPRlH6VtlaxYWCHlnscuTZ3ikX2RcGteotY/3W2FIroBYDEI02
MWAFevPDixbXDFFHjTCBZ2PuXXRCsYMqzXbYvJp6EYA9FOibZFtsQ9+hKq/BVU5U
1blJu4MBXoVJ/wX7ngz37RMMxCtOcG1ZSb63bQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:33 2026 by rpki-client