Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa
File: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (raw, json)
Hash identifier: qhUD1njRWhpk5b0mHVf1Fz7zkScDE3m+CtrS9HUEbOI=
Subject key identifier: 5B:8D:3B:F3:64:25:3A:D7:E3:89:77:65:63:F9:DE:59:C7:40:BA:BD
Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536
Certificate serial: 611A261E5655B2F0AE47573DA34A66D25CBA5254
Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa
Signing time: Thu 23 Apr 2026 10:00:02 +0000
ROA not before: Thu 23 Apr 2026 09:55:02 +0000
ROA not after: Thu 22 Apr 2027 10:00:02 +0000
asID: 141075
IP address blocks: 2001:df4:da80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1a:26:1e:56:55:b2:f0:ae:47:57:3d:a3:4a:66:d2:5c:ba:52:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536
Validity
Not Before: Apr 23 09:55:02 2026 GMT
Not After : Apr 22 10:00:02 2027 GMT
Subject: CN=5B8D3BF364253AD7E389776563F9DE59C740BABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:3a:76:a1:0f:91:a9:3b:70:fe:e3:1a:58:
25:16:da:86:1c:93:eb:2d:14:75:1b:99:31:04:43:
86:05:b4:95:8f:60:32:c7:10:72:3d:b0:09:70:43:
e2:10:93:ba:c8:18:b9:50:98:35:ff:ba:3c:8f:93:
dc:cd:be:72:f1:e2:8a:70:b9:ac:19:1f:b1:e4:f3:
2a:1f:78:7c:9d:82:cd:0e:5b:c5:9d:9f:34:b3:1b:
77:56:7a:97:d6:a3:de:b5:f2:fd:25:c5:29:24:bb:
21:ad:b3:3d:e9:98:ed:b8:9c:c4:ae:db:51:c9:67:
38:b0:46:6f:e0:b8:3b:18:fd:a0:04:73:0e:65:f4:
02:d2:c4:7e:a6:02:56:07:23:70:fe:05:a1:ce:63:
62:7e:d2:c7:4b:ff:2f:90:77:53:f9:1b:e3:5e:33:
de:aa:42:64:89:f4:39:e5:1e:7a:af:a3:04:d6:b6:
c4:7e:4a:63:f7:c0:89:7f:27:f9:06:50:51:0c:4f:
81:6c:0a:80:65:29:f8:db:49:f5:83:b6:dc:01:db:
cb:8c:f5:61:8d:96:3f:14:c9:e7:2d:56:1b:d2:cf:
0a:65:6d:51:7f:fd:48:02:93:f1:a6:5c:34:c1:31:
fc:2f:a5:4d:5c:45:77:29:0d:8a:8f:fb:fa:1c:a2:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:3B:F3:64:25:3A:D7:E3:89:77:65:63:F9:DE:59:C7:40:BA:BD
X509v3 Authority Key Identifier:
keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:da80::/48
Signature Algorithm: sha256WithRSAEncryption
ca:f0:c4:22:19:3b:d0:29:39:47:7d:f6:26:18:59:18:bc:9b:
24:c1:83:de:c0:8b:ad:41:98:a7:d6:e7:4e:ca:36:69:a3:ef:
19:ec:c7:80:99:ff:9f:85:29:8f:0a:e9:5a:25:5c:24:51:93:
47:a1:ea:ae:06:63:35:b8:64:71:3f:0a:6d:9b:ec:e0:8a:38:
1c:56:a6:31:c2:72:99:72:91:9d:44:e8:14:01:c1:ff:c9:98:
55:3a:b1:bc:e6:85:77:e8:2a:12:5a:87:db:90:a4:cc:1f:ad:
18:e0:b9:21:dd:de:d4:97:25:51:b4:3a:48:99:00:f6:d1:b6:
b3:37:e6:54:ac:d2:33:59:d8:9e:c1:39:c7:fe:cc:ee:99:e2:
71:45:54:97:cc:06:08:46:a0:a6:d3:ca:44:7f:ac:f7:34:e0:
9f:81:a4:53:bc:f6:9b:56:09:f7:6a:87:30:34:05:ec:95:6e:
28:6a:3e:45:cd:3f:8d:64:4c:88:32:e2:cb:cc:20:e3:ce:1e:
e1:57:0f:ee:84:55:ed:9b:b9:3c:33:46:c5:91:65:51:76:95:
9d:32:29:f3:55:d8:f6:38:62:63:7f:4d:97:5f:ef:3a:f4:8b:
2a:3a:68:41:f0:98:d3:fb:ec:7b:69:7d:ff:a5:fc:a1:3d:13:
9e:32:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:24 2026 by rpki-client