Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32302e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: 5AnJnLuVz+sR0ZDIPceJ9Y+sauzcA2zWvkTeeYBj0fE=
Subject key identifier: 3D:DD:21:F7:4B:32:9F:AB:AF:65:7E:21:37:0B:87:3C:83:96:04:79
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 3628C6C31F22887C2B6AEDF0B887884D6F10FBBD
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32302e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 06:58:00 +0000
ROA not after: Tue 20 Apr 2027 07:03:00 +0000
asID: 46045
IP address blocks: 122.128.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:28:c6:c3:1f:22:88:7c:2b:6a:ed:f0:b8:87:88:4d:6f:10:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 06:58:00 2026 GMT
Not After : Apr 20 07:03:00 2027 GMT
Subject: CN=3DDD21F74B329FABAF657E21370B873C83960479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:a4:71:a2:b3:fc:74:2b:23:79:99:cf:9d:
4f:8c:01:12:24:2e:0d:a3:37:d7:66:4e:30:d9:35:
0b:79:f1:9e:8b:e5:3f:c8:20:8a:b5:30:a5:ca:f3:
34:5a:57:aa:ea:5d:7a:39:44:df:d7:22:12:4d:2f:
5a:5a:a2:04:d7:bd:22:c3:c7:ba:68:c6:44:03:d9:
3c:7d:aa:11:65:7d:a2:c7:c3:0a:f3:0f:37:af:72:
f5:49:7a:d0:62:a7:af:c9:14:7f:0e:17:0f:9b:f3:
34:e4:88:f3:bd:a3:7a:d8:93:f6:0f:dc:e7:7a:95:
68:1d:4d:b4:19:e6:91:69:73:62:7e:21:bc:4b:49:
f1:b6:07:e3:cf:9f:0c:b1:d7:60:c4:13:70:23:eb:
d1:28:93:48:a4:86:d2:b7:13:16:26:b4:79:8f:59:
69:64:55:1c:21:80:88:38:8f:2f:fb:18:54:b3:24:
5f:ed:44:66:d3:09:6c:c0:cf:c7:b7:08:bc:5c:6f:
b4:ef:06:24:56:78:52:9a:24:f9:68:6f:c0:11:f0:
17:00:4d:ec:b0:0f:0a:c7:8c:d0:f3:19:d6:cb:5f:
23:07:1e:61:55:c6:af:d8:53:42:27:7d:62:5c:46:
82:63:13:9d:05:03:7d:bb:c1:28:6e:5f:2e:74:ef:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:21:F7:4B:32:9F:AB:AF:65:7E:21:37:0B:87:3C:83:96:04:79
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32302e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.20.0/24
Signature Algorithm: sha256WithRSAEncryption
56:70:5c:18:0e:fb:05:17:f6:6e:f5:fd:a0:0e:06:12:ac:21:
d9:e5:76:24:4a:d1:cf:69:80:05:41:ea:8a:57:6c:59:9e:f4:
f7:f1:92:31:f0:1d:5b:e9:ea:99:d5:29:c5:21:6e:96:0d:2f:
b2:92:0d:b4:42:4a:28:12:d4:8d:2f:f1:57:71:4f:0c:1d:95:
b0:a3:cc:ac:b6:85:ff:57:f9:4f:5c:8b:d7:12:c0:a8:49:92:
64:bc:fe:ba:63:08:f1:37:a2:62:db:73:df:bc:1b:1c:f4:61:
78:bc:f1:a9:e9:a5:f3:0f:4d:7e:88:79:ec:60:54:b5:00:bd:
78:70:38:ab:6f:fb:1f:46:0b:4b:6d:c7:ad:c0:3e:00:f2:47:
5d:6b:3d:1c:d6:83:2f:dd:9d:0f:67:c2:c0:8b:d2:58:68:89:
e5:3e:a0:0d:f2:fe:32:10:3d:e4:eb:8f:11:8a:b9:c7:c6:5a:
72:1f:4d:04:c9:a3:80:54:4c:b3:0d:36:d7:37:0e:21:db:b3:
24:0e:d4:67:b9:ff:af:68:47:4e:00:49:5d:17:95:dd:84:e2:
45:82:7f:c3:48:c4:6d:f2:fe:e6:0d:2d:a4:5d:24:d2:0d:fc:
b0:0c:e0:ea:aa:19:a6:a4:6a:c0:e6:b4:64:b5:d1:47:0c:32:
65:a9:c6:84
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNijGwx8iiHwrau3wuIeITW8Q+70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNjA0MjEwNjU4MDBaFw0yNzA0MjAwNzAzMDBaMDMxMTAvBgNV
BAMTKDNEREQyMUY3NEIzMjlGQUJBRjY1N0UyMTM3MEI4NzNDODM5NjA0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLqRxorP8dCsjeZnPnU+MARIk
Lg2jN9dmTjDZNQt58Z6L5T/IIIq1MKXK8zRaV6rqXXo5RN/XIhJNL1paogTXvSLD
x7poxkQD2Tx9qhFlfaLHwwrzDzevcvVJetBip6/JFH8OFw+b8zTkiPO9o3rYk/YP
3Od6lWgdTbQZ5pFpc2J+IbxLSfG2B+PPnwyx12DEE3Aj69Eok0ikhtK3ExYmtHmP
WWlkVRwhgIg4jy/7GFSzJF/tRGbTCWzAz8e3CLxcb7TvBiRWeFKaJPlob8AR8BcA
TeywDwrHjNDzGdbLXyMHHmFVxq/YU0InfWJcRoJjE50FA327wShuXy5075RDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPd0h90syn6uvZX4hNwuHPIOWBHkwHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAFDANBgkqhkiG
9w0BAQsFAAOCAQEAVnBcGA77BRf2bvX9oA4GEqwh2eV2JErRz2mABUHqildsWZ70
9/GSMfAdW+nqmdUpxSFulg0vspINtEJKKBLUjS/xV3FPDB2VsKPMrLaF/1f5T1yL
1xLAqEmSZLz+umMI8TeiYttz37wbHPRheLzxqeml8w9Nfoh57GBUtQC9eHA4q2/7
H0YLS23HrcA+APJHXWs9HNaDL92dD2fCwIvSWGiJ5T6gDfL+MhA95OuPEYq5x8Za
ch9NBMmjgFRMsw021zcOIduzJA7UZ7n/r2hHTgBJXReV3YTiRYJ/w0jEbfL+5g0t
pF0k0g38sAzg6qoZpqRqwOa0ZLXRRwwyZanGhA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:57 2026 by rpki-client