Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3234203d3e203137343530.roa
File: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (raw, json)
Hash identifier: O++Sa+xGdWc6Wc5EoYjycrLxRN6uKNCrao/z1oPM9LA=
Subject key identifier: 93:45:AD:5F:95:6F:A9:8A:AC:14:D8:3E:65:4B:68:22:87:5E:BB:92
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 200A6436DF0E6FCC5389C8394B07DA340EFED3E3
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3234203d3e203137343530.roa
Signing time: Wed 29 Apr 2026 04:00:01 +0000
ROA not before: Wed 29 Apr 2026 03:55:01 +0000
ROA not after: Wed 28 Apr 2027 04:00:01 +0000
asID: 17450
IP address blocks: 119.2.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0a:64:36:df:0e:6f:cc:53:89:c8:39:4b:07:da:34:0e:fe:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Apr 29 03:55:01 2026 GMT
Not After : Apr 28 04:00:01 2027 GMT
Subject: CN=9345AD5F956FA98AAC14D83E654B6822875EBB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:2d:28:a3:22:99:d0:8d:7c:2e:aa:20:59:
3c:f3:ca:c3:3d:45:cd:72:e7:b2:46:69:08:e4:29:
88:64:ab:b0:52:86:18:e6:f3:1a:c6:c1:e3:02:3e:
35:97:45:30:af:bc:09:bc:f3:59:18:8a:e1:4b:32:
37:c5:16:08:20:d4:9b:28:4d:fc:6b:1d:ac:85:1b:
d7:7c:51:94:d9:15:81:fd:ed:56:26:4e:46:14:c2:
e7:a6:fd:eb:15:25:b4:0c:c7:0d:88:9d:10:b8:bc:
7b:26:be:41:d2:19:cd:cc:30:dc:0b:4c:bb:64:79:
79:70:7e:64:5e:bd:c2:bb:e2:c0:14:ed:62:41:58:
67:6f:02:3b:e7:2c:b5:dc:18:3e:af:8c:e0:d3:af:
03:e4:e4:c7:cf:21:ec:98:94:a3:bd:79:e1:21:89:
06:bc:23:69:b2:4e:7c:d9:95:d9:16:5a:68:c3:1d:
bb:99:30:db:82:92:3f:6b:73:c3:de:76:d4:54:bf:
00:11:63:59:82:9f:49:18:43:5d:05:2b:c1:b2:2b:
df:e7:ad:54:80:1d:72:be:c6:57:7d:23:5f:54:55:
54:b6:05:b1:c2:3d:e8:b8:6e:f1:ae:b3:3c:e1:ec:
0b:05:12:d3:fb:52:93:9a:d0:01:0d:47:17:a6:af:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:AD:5F:95:6F:A9:8A:AC:14:D8:3E:65:4B:68:22:87:5E:BB:92
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3234203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:f3:66:50:79:17:80:c9:3c:55:6e:2a:88:38:36:a7:bb:e2:
6a:79:42:fc:b1:af:05:c9:2e:0f:cb:9b:5a:d4:27:93:b8:43:
83:ec:95:8a:ce:ba:53:b9:44:bb:96:4f:52:a8:8e:75:97:af:
df:4f:91:67:92:a4:8a:09:1b:5c:d7:16:ec:2a:78:cd:1b:b5:
1c:7d:8d:7b:2f:3e:67:12:a4:51:11:b1:c5:75:b6:73:37:f3:
05:28:ba:0a:50:37:1c:65:43:47:52:fd:e9:44:bb:de:ed:dc:
f1:43:f0:28:64:6b:6c:8e:13:9c:7a:ee:45:1a:e1:cd:c5:fe:
e0:a3:b3:85:e3:96:76:d5:ff:13:4c:4b:37:7a:4d:d4:53:4c:
3e:4d:2c:2c:f4:18:8b:d7:a8:1f:03:fe:0d:e2:1b:c8:dc:30:
e8:74:ed:69:3c:1a:be:15:2f:de:0d:39:2d:a2:e6:f6:bd:6f:
51:97:40:bd:bc:92:7d:94:20:f4:b9:0d:f8:38:e6:ad:01:e6:
9d:c1:0c:8c:2a:a2:d8:8a:92:a8:0b:98:f8:eb:b1:99:af:1a:
48:82:15:a0:9a:33:44:4d:e4:18:bd:24:d6:bb:4e:90:7e:d2:
65:dc:52:6b:53:6c:5a:d4:6a:da:41:f9:f3:bf:31:8a:ea:bd:
d0:6b:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:34 2026 by rpki-client