Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: OCxSU2yKbkldRWxt9LOy5GvMxvQfehxxwGi98P6qbH4=
Subject key identifier: FD:77:34:15:39:46:8C:C0:68:A9:FD:46:86:4D:07:36:EF:39:56:92
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 5071F47250B4301DB5133A90C6FB32C5D82DCB04
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 06:58:00 +0000
ROA not after: Tue 20 Apr 2027 07:03:00 +0000
asID: 46045
IP address blocks: 122.128.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:71:f4:72:50:b4:30:1d:b5:13:3a:90:c6:fb:32:c5:d8:2d:cb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 06:58:00 2026 GMT
Not After : Apr 20 07:03:00 2027 GMT
Subject: CN=FD77341539468CC068A9FD46864D0736EF395692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:34:31:05:c0:4d:72:40:0d:13:72:a0:80:
e9:ac:1b:f3:21:5e:7e:b4:cd:76:0d:12:c2:86:73:
49:34:5e:2e:81:7f:79:5a:5b:07:76:55:3f:47:5f:
ed:f5:f5:46:5c:47:64:79:48:4f:44:46:ae:5d:3d:
2e:86:bb:e0:aa:68:ce:ba:e6:9a:1b:e6:24:1f:e3:
5b:cd:10:8f:48:45:d1:e8:78:34:95:c0:3c:6c:6c:
40:49:9c:18:47:ea:4a:77:2a:ca:5a:a8:06:a9:94:
b5:62:bc:6b:ce:bb:ef:61:e2:a6:b1:4d:12:3d:63:
32:da:1a:37:4c:70:c5:1d:3f:62:c7:6c:82:d6:d3:
19:c7:43:b1:bc:24:98:bc:5e:06:aa:26:85:e4:44:
00:5c:e8:4f:a8:2a:e3:da:c9:7d:bc:ac:dd:6f:a6:
e8:4c:10:41:10:97:cf:b0:ec:7f:7f:b3:18:c9:75:
45:13:90:fe:4b:51:0e:ed:f7:fa:af:b8:ee:1b:ad:
27:bc:54:62:c4:b7:d0:8b:5c:b5:75:8f:34:ee:c3:
43:b4:f2:69:4b:6b:7f:3d:cb:13:01:f8:2c:d4:d7:
ad:6a:11:61:6e:52:35:70:d6:43:39:fc:74:bc:1e:
22:ea:9b:0c:22:0e:13:ff:bc:dc:a1:d9:ff:e5:e8:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:34:15:39:46:8C:C0:68:A9:FD:46:86:4D:07:36:EF:39:56:92
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.21.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ce:23:db:73:09:78:00:cd:c1:58:aa:eb:9c:e9:f4:87:94:
34:3e:ca:d2:e4:09:d4:28:50:90:8e:ac:39:b4:88:73:bb:00:
d9:02:0e:a2:16:62:f9:3a:e0:21:70:aa:f4:df:3e:6c:3d:37:
e5:fe:46:2e:32:35:79:a4:aa:15:3f:bd:73:aa:68:72:1e:53:
0d:aa:1d:91:d2:cd:f4:f8:1f:f4:f5:4e:cc:c7:8b:a6:dc:c6:
3d:88:6f:af:6b:0a:4c:8e:d1:3e:44:ad:aa:d6:92:90:42:6d:
13:db:bd:18:01:b0:57:68:0b:68:24:11:d4:a6:65:be:30:ee:
e2:65:91:76:4e:dd:06:85:f1:a1:30:a2:44:c3:14:26:69:1d:
fa:c3:59:a6:d7:03:6d:70:be:59:79:2b:a9:c8:f8:60:fe:a7:
90:a0:1f:9d:35:5d:9d:8e:ea:db:cb:87:f8:34:1f:53:ed:b6:
9f:1a:39:79:de:31:57:dd:d4:7a:2e:f1:ca:38:6a:95:d5:d4:
d4:33:03:db:72:97:82:b9:b7:b6:25:a3:bd:c8:23:90:f0:e1:
3e:ba:88:c9:05:99:96:5c:b0:69:08:14:73:15:a1:b5:24:38:
5a:ad:91:57:82:ac:a0:5c:74:ca:d2:6d:84:7f:c2:a4:a9:79:
f6:b3:40:92
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUHH0clC0MB21EzqQxvsyxdgtywQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNjA0MjEwNjU4MDBaFw0yNzA0MjAwNzAzMDBaMDMxMTAvBgNV
BAMTKEZENzczNDE1Mzk0NjhDQzA2OEE5RkQ0Njg2NEQwNzM2RUYzOTU2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrjQxBcBNckANE3KggOmsG/Mh
Xn60zXYNEsKGc0k0Xi6Bf3laWwd2VT9HX+319UZcR2R5SE9ERq5dPS6Gu+CqaM66
5pob5iQf41vNEI9IRdHoeDSVwDxsbEBJnBhH6kp3KspaqAaplLVivGvOu+9h4qax
TRI9YzLaGjdMcMUdP2LHbILW0xnHQ7G8JJi8XgaqJoXkRABc6E+oKuPayX28rN1v
puhMEEEQl8+w7H9/sxjJdUUTkP5LUQ7t9/qvuO4brSe8VGLEt9CLXLV1jzTuw0O0
8mlLa389yxMB+CzU161qEWFuUjVw1kM5/HS8HiLqmwwiDhP/vNyh2f/l6E8lAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU/Xc0FTlGjMBoqf1Ghk0HNu85VpIwHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAFTANBgkqhkiG
9w0BAQsFAAOCAQEAhs4j23MJeADNwViq65zp9IeUND7K0uQJ1ChQkI6sObSIc7sA
2QIOohZi+TrgIXCq9N8+bD035f5GLjI1eaSqFT+9c6poch5TDaodkdLN9Pgf9PVO
zMeLptzGPYhvr2sKTI7RPkStqtaSkEJtE9u9GAGwV2gLaCQR1KZlvjDu4mWRdk7d
BoXxoTCiRMMUJmkd+sNZptcDbXC+WXkrqcj4YP6nkKAfnTVdnY7q28uH+DQfU+22
nxo5ed4xV93Uei7xyjhqldXU1DMD23KXgrm3tiWjvcgjkPDhPrqIyQWZllywaQgU
cxWhtSQ4Wq2RV4KsoFx0ytJthH/CpKl59rNAkg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:34 2026 by rpki-client