Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32332e302f32342d3234203d3e203436303435.roa
File: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier: p6nrhpHBfMyYkb0T1FNLtZ+AZMX8ZvMdI+wp+32DREg=
Subject key identifier: 13:88:36:68:37:C5:4E:1A:BB:01:8E:EC:63:A3:76:78:2A:2D:D0:2D
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 79613BB63E943A29BFECCD5C1012D0BE46893652
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32332e302f32342d3234203d3e203436303435.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 06:58:00 +0000
ROA not after: Tue 20 Apr 2027 07:03:00 +0000
asID: 46045
IP address blocks: 122.128.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:61:3b:b6:3e:94:3a:29:bf:ec:cd:5c:10:12:d0:be:46:89:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Apr 21 06:58:00 2026 GMT
Not After : Apr 20 07:03:00 2027 GMT
Subject: CN=1388366837C54E1ABB018EEC63A376782A2DD02D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:84:fb:f0:9f:b2:92:55:60:84:52:f1:dc:
09:d1:19:20:8a:4a:03:29:c0:e0:54:1f:1a:0d:eb:
f2:17:e9:4f:99:6d:bf:8f:18:e5:f2:64:6b:e7:1d:
a0:19:77:31:b4:23:45:14:48:1e:37:82:b7:82:ef:
f3:90:8d:09:b5:f5:c7:6a:d3:ca:e8:ad:2d:cc:da:
fe:eb:b1:0a:50:4b:8b:29:09:25:ce:86:ac:60:aa:
b2:92:24:7d:ce:0f:d0:77:2a:e6:65:03:6a:c6:18:
7f:65:35:69:37:f7:e9:38:e9:4b:8e:34:9d:cf:7a:
9e:f9:6d:a6:61:e8:48:88:39:1a:f0:23:ee:46:d4:
0e:a9:5b:60:6b:b6:58:33:98:31:57:12:38:2d:98:
4b:6c:94:60:01:53:ca:b6:e4:d0:15:2a:e6:26:ab:
20:d1:53:63:a6:19:d7:54:65:d0:d6:db:5a:36:9c:
c0:76:68:2d:27:47:c7:09:38:39:71:8b:d5:15:9f:
28:c0:8b:01:e8:93:53:9f:ce:c5:d7:43:55:b5:18:
2b:e4:98:09:28:8c:a7:82:96:74:d6:c8:8b:5e:30:
b3:27:d6:2d:9b:86:b2:56:bc:4e:17:24:3c:df:f3:
24:89:54:6b:41:60:b0:4a:70:de:35:ad:e5:ac:9a:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:36:68:37:C5:4E:1A:BB:01:8E:EC:63:A3:76:78:2A:2D:D0:2D
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32332e302f32342d3234203d3e203436303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9b:64:6c:e3:5b:b1:9b:dc:8e:c0:23:6c:7a:6a:4c:29:96:
a9:0c:08:89:3c:a9:a1:78:0c:1b:2d:32:e9:13:6a:9b:25:40:
80:90:0e:36:20:7c:95:ba:fc:7e:ad:b1:75:90:c7:ec:03:3e:
c9:05:cd:58:55:15:b7:00:ee:5f:91:a8:53:23:97:5d:06:2f:
86:3c:dd:bc:2b:d5:df:8a:54:f2:6f:c5:e5:a0:66:01:e7:44:
08:1f:6e:44:97:44:1b:c6:ae:ac:3a:dc:ef:60:cd:b8:9f:4a:
ac:17:fc:9c:e6:17:41:48:0b:e9:a6:48:60:28:ec:72:66:47:
a4:61:ea:aa:a7:d8:77:57:59:f5:a4:43:80:99:fa:bd:94:c7:
73:9b:fc:a3:3f:c7:d0:46:49:f0:f2:54:51:07:9b:fc:57:e7:
75:ac:8b:10:7d:8f:63:d0:41:a6:dc:da:20:f8:f7:85:19:bb:
90:f4:55:3e:94:10:90:bb:98:1c:ac:19:ef:74:9b:29:55:c8:
ed:ea:4a:3c:68:f9:c5:e8:0e:2d:99:88:2d:47:95:5c:4b:00:
c2:d3:62:76:0c:5d:38:86:ca:7c:52:68:a1:61:10:eb:22:36:
d6:79:82:62:12:1e:f3:67:db:a5:d3:dd:7e:8a:f3:7c:ad:54:
11:ca:af:d3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeWE7tj6UOim/7M1cEBLQvkaJNlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNjA0MjEwNjU4MDBaFw0yNzA0MjAwNzAzMDBaMDMxMTAvBgNV
BAMTKDEzODgzNjY4MzdDNTRFMUFCQjAxOEVFQzYzQTM3Njc4MkEyREQwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVX4T78J+yklVghFLx3AnRGSCK
SgMpwOBUHxoN6/IX6U+Zbb+PGOXyZGvnHaAZdzG0I0UUSB43greC7/OQjQm19cdq
08rorS3M2v7rsQpQS4spCSXOhqxgqrKSJH3OD9B3KuZlA2rGGH9lNWk39+k46UuO
NJ3Pep75baZh6EiIORrwI+5G1A6pW2BrtlgzmDFXEjgtmEtslGABU8q25NAVKuYm
qyDRU2OmGddUZdDW21o2nMB2aC0nR8cJODlxi9UVnyjAiwHok1OfzsXXQ1W1GCvk
mAkojKeClnTWyIteMLMn1i2bhrJWvE4XJDzf8ySJVGtBYLBKcN41reWsmpdnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUE4g2aDfFThq7AY7sY6N2eCot0C0wHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAFzANBgkqhkiG
9w0BAQsFAAOCAQEATZtkbONbsZvcjsAjbHpqTCmWqQwIiTypoXgMGy0y6RNqmyVA
gJAONiB8lbr8fq2xdZDH7AM+yQXNWFUVtwDuX5GoUyOXXQYvhjzdvCvV34pU8m/F
5aBmAedECB9uRJdEG8aurDrc72DNuJ9KrBf8nOYXQUgL6aZIYCjscmZHpGHqqqfY
d1dZ9aRDgJn6vZTHc5v8oz/H0EZJ8PJUUQeb/FfndayLEH2PY9BBptzaIPj3hRm7
kPRVPpQQkLuYHKwZ73SbKVXI7epKPGj5xegOLZmILUeVXEsAwtNidgxdOIbKfFJo
oWEQ6yI21nmCYhIe82fbpdPdforzfK1UEcqv0w==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:08 2026 by rpki-client