Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31392e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: DKtkAn4TdjIwvWBn/gpCIF7QU3yxK7Kr1LmRxjBSGnY=
Subject key identifier: 6D:3B:58:A8:55:AE:B1:31:FF:E3:85:29:62:F2:FF:01:E0:56:FC:E7
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 0481883D48EF5D0C625EAB5A96023CCA1BC96E0C
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31392e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 06:58:00 +0000
ROA not after: Tue 20 Apr 2027 07:03:00 +0000
asID: 46045
IP address blocks: 122.128.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:81:88:3d:48:ef:5d:0c:62:5e:ab:5a:96:02:3c:ca:1b:c9:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 06:58:00 2026 GMT
Not After : Apr 20 07:03:00 2027 GMT
Subject: CN=6D3B58A855AEB131FFE3852962F2FF01E056FCE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:01:25:3a:b6:90:8f:f3:08:0f:60:5b:fc:
34:4b:07:5c:29:48:97:d4:74:69:a1:1a:09:ca:34:
3a:8e:05:19:75:fc:78:42:6e:2f:c1:39:30:99:ea:
b2:6c:3f:f4:b9:18:0d:01:70:3a:8f:74:3a:3f:fe:
f0:61:1c:80:2d:bb:37:a1:ca:84:4f:fc:1e:cc:d8:
d8:6e:a5:8e:7e:95:13:50:72:0e:03:0b:21:4b:40:
c7:38:dc:97:1f:c4:73:62:ac:27:86:dc:66:3f:ad:
91:82:58:ae:fb:ac:a8:63:b3:45:1b:65:1a:28:e6:
b3:0d:0c:f1:02:b8:8e:f8:99:30:21:38:f2:bf:47:
97:15:5b:78:07:9f:cb:66:d5:43:70:2f:4d:2b:dc:
42:42:c7:4b:15:a1:a7:f6:cd:32:3b:df:dd:8f:f1:
b9:1c:73:ab:04:0c:e6:69:63:a4:e0:58:ae:1f:85:
9c:20:6c:40:3e:32:7c:91:fd:36:3b:3c:6b:2e:ae:
7d:fb:1c:2b:67:b4:78:f1:57:9e:ce:d3:32:80:15:
7e:a7:68:b6:27:39:f3:a6:40:95:32:bf:bd:f9:08:
92:95:37:11:8a:c5:79:66:d0:e5:3d:9d:a7:b7:da:
c3:ed:79:e5:ca:8a:ff:48:d9:bb:fc:e1:b4:a2:dc:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:58:A8:55:AE:B1:31:FF:E3:85:29:62:F2:FF:01:E0:56:FC:E7
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31392e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.19.0/24
Signature Algorithm: sha256WithRSAEncryption
65:01:10:06:26:1d:f0:be:2e:6e:24:d0:24:a4:fa:0b:9b:36:
05:e1:47:69:d8:08:72:9b:a5:30:26:bc:50:82:39:2f:51:ab:
e3:6d:1c:70:c3:d4:12:32:c8:9c:3d:8d:f1:ef:2c:e1:1e:04:
d0:be:c9:f3:2a:0f:09:98:25:61:45:af:bf:37:71:d3:04:a5:
b6:30:66:d3:2f:7f:34:5e:31:60:3f:b9:6c:b0:29:8d:d9:68:
75:9a:1b:86:1f:15:02:6b:62:aa:92:55:9d:99:1a:81:2b:67:
e7:fc:1d:a0:20:c8:43:ff:41:c6:71:2e:b0:ad:c2:aa:67:a9:
dd:b4:eb:ef:ef:31:d1:88:d0:bc:e7:0c:28:1d:a9:57:4d:75:
02:4b:c4:de:e9:67:7b:bb:ff:4a:86:4e:0f:b3:de:66:ec:ab:
dd:b4:cd:f1:fd:40:b1:ed:88:29:02:2b:69:02:1e:34:a1:f4:
60:77:39:10:f6:9a:62:92:4f:da:49:d4:8d:ab:24:f7:d5:28:
ca:6b:da:56:ea:79:52:d9:f9:e0:f2:0f:7c:98:31:00:6a:84:
aa:7e:11:ba:dc:42:7e:5f:36:6d:dc:fb:74:62:67:71:e1:c2:
fb:5d:fa:08:03:3c:68:93:15:ab:1d:96:ac:67:f4:9c:ba:4f:
d1:31:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:34 2026 by rpki-client