Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: sTzEaohAXk/85dxzqcidtg2C7xK4HE+XvX7aGlthv0k=
Subject key identifier: 48:25:EB:0D:1D:5F:0E:84:37:A0:49:B7:0F:C3:39:7A:50:B1:B8:13
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 4A9407BA4F49EF999FCDB7820AA8B6F74D761802
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 06:58:00 +0000
ROA not after: Tue 20 Apr 2027 07:03:00 +0000
asID: 46045
IP address blocks: 122.128.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:94:07:ba:4f:49:ef:99:9f:cd:b7:82:0a:a8:b6:f7:4d:76:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 06:58:00 2026 GMT
Not After : Apr 20 07:03:00 2027 GMT
Subject: CN=4825EB0D1D5F0E8437A049B70FC3397A50B1B813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:0c:98:e8:69:19:94:89:7a:03:53:ab:92:
cb:26:a3:93:ed:60:a3:db:bf:0d:a9:4d:31:91:38:
02:f0:f0:71:55:ee:47:30:09:e3:03:65:ee:29:af:
0d:4d:ef:ef:d4:80:e2:de:e9:b1:30:c8:cf:c3:88:
ab:5d:24:33:98:06:29:49:a8:34:bd:7c:1b:17:3b:
5b:f3:55:c6:c2:d7:50:01:ea:22:fe:cb:38:d2:24:
6b:95:81:2b:59:31:c1:59:87:12:0b:83:f8:80:50:
ff:85:44:45:49:f4:3a:ae:f9:71:72:c3:a8:e4:96:
dc:d0:e8:00:05:0b:e8:8e:ed:24:1d:26:4b:03:5d:
a8:18:40:68:ef:ad:e0:51:8a:2f:26:51:d9:f9:65:
25:ad:0b:9a:1f:a5:d5:d4:df:d9:fb:ff:29:c5:61:
27:f9:5b:be:4b:96:6f:25:37:ae:19:b1:e9:e8:44:
ca:71:45:1b:b6:97:71:a8:d8:ef:44:02:7c:7f:66:
d1:fa:67:35:53:8e:54:ad:1c:a1:7e:ab:ce:f4:e2:
56:5e:e6:80:e5:fd:8f:ed:d6:fa:47:25:07:32:c4:
87:91:dc:95:bb:38:a1:61:d2:65:67:e4:06:da:a2:
1a:53:df:7b:f7:fa:39:de:35:25:45:71:f6:9e:ab:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:EB:0D:1D:5F:0E:84:37:A0:49:B7:0F:C3:39:7A:50:B1:B8:13
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.22.0/24
Signature Algorithm: sha256WithRSAEncryption
96:40:38:75:85:3f:64:25:86:70:e1:a8:f5:ae:a5:4f:fb:18:
bc:90:be:f8:2d:01:84:32:1c:cb:aa:e0:5f:b3:dc:73:16:40:
16:4a:6e:93:c8:0c:13:83:61:bc:72:a6:70:2e:78:19:3f:88:
d8:ef:42:21:30:b3:17:1b:91:d6:ae:aa:32:3a:4b:ed:ca:5f:
3b:11:5c:c1:ab:3f:e5:d9:ff:f7:c5:1b:9c:e5:1a:92:92:34:
fd:7a:08:94:3e:9f:85:69:7a:73:69:e0:a8:90:19:af:92:4f:
ed:1d:da:c2:ed:1f:b5:09:19:5b:53:c9:f8:47:85:c3:37:80:
e5:a9:74:75:c7:b3:94:0f:83:56:04:26:16:17:cd:8c:2f:23:
74:3e:44:bf:9a:16:00:44:a9:20:d2:ae:cb:cb:3f:fb:13:46:
d3:54:d8:b2:e8:84:09:ed:25:b3:e5:7c:a7:02:62:01:ad:ef:
bd:50:77:d2:8b:f3:0e:6a:c2:bd:90:39:cf:27:4d:df:1d:b7:
a1:c6:db:29:20:f0:53:5d:0c:08:55:f9:49:82:24:68:bb:76:
90:55:d5:b8:81:dd:16:7b:0d:31:43:0f:23:02:55:e7:30:df:
e6:2a:6e:1a:73:46:6d:bb:9b:a3:cd:66:de:d7:c6:6b:90:a3:
cd:4c:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:20 2026 by rpki-client