Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32312d3234203d3e203435373235.roa
File: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (raw, json)
Hash identifier: edOeVs+T0jNLOpw9fWV1Q6pXHsBhZ57WTGujEI9+TRc=
Subject key identifier: 4C:D5:5F:56:44:1D:F7:77:66:74:22:0B:86:27:5F:BD:93:BE:66:CA
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 297B79BE1E07F099A323102A9C90F5F24314ACEA
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32312d3234203d3e203435373235.roa
Signing time: Tue 28 Apr 2026 10:00:35 +0000
ROA not before: Tue 28 Apr 2026 09:55:35 +0000
ROA not after: Tue 27 Apr 2027 10:00:35 +0000
asID: 45725
IP address blocks: 180.211.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7b:79:be:1e:07:f0:99:a3:23:10:2a:9c:90:f5:f2:43:14:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Apr 28 09:55:35 2026 GMT
Not After : Apr 27 10:00:35 2027 GMT
Subject: CN=4CD55F56441DF7776674220B86275FBD93BE66CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e2:d3:fb:aa:7a:21:82:b9:0d:57:38:11:5b:
84:b6:42:97:1e:de:48:21:43:7a:31:8a:df:71:dc:
43:e2:b2:f3:6b:b3:f1:f8:46:75:27:c2:78:93:7c:
51:17:cd:25:c8:7b:85:26:ce:04:e9:b4:bb:d7:29:
66:ae:13:8a:f5:22:71:3d:20:22:eb:20:d1:fb:47:
7b:a5:97:cc:df:16:f6:b2:5f:13:ef:8f:8a:ea:5b:
98:29:08:ad:64:ac:a3:17:dd:01:1d:bb:1a:7d:ad:
9f:64:8b:4c:f0:10:ec:c4:d9:43:0b:e0:e5:c9:15:
cf:f8:51:14:e1:dd:0a:99:9d:7b:b8:25:91:2e:a7:
ac:4f:b6:51:3b:05:a1:d1:0f:e0:ad:a8:83:c3:f0:
e5:a5:aa:46:9a:95:37:bc:6d:81:99:fb:ff:1a:20:
a5:39:9b:d4:b4:d8:15:23:8e:cb:f0:5f:42:a8:98:
09:51:d2:bd:1b:69:b4:9d:b4:ff:57:64:e1:57:bc:
8e:8f:61:42:05:aa:63:1d:6b:12:92:e2:e1:5f:fd:
f8:a6:c3:ec:48:17:b8:57:84:0a:86:f8:7c:5c:04:
da:3a:61:a5:8a:16:d6:11:31:77:00:25:e9:b3:2f:
cd:d0:a8:bc:2d:44:bb:d5:c1:61:d5:49:1a:7e:56:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:5F:56:44:1D:F7:77:66:74:22:0B:86:27:5F:BD:93:BE:66:CA
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32312d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.211.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:9e:38:06:5e:8c:97:41:f2:db:05:14:08:9e:f5:d5:81:0f:
ed:e2:8f:d1:5a:bb:28:45:83:86:d8:1f:32:3a:16:12:53:4a:
9c:1c:74:f5:45:3b:c8:23:74:fb:31:ea:eb:d5:f2:40:23:85:
cf:3c:2c:1b:2e:00:da:e9:af:ed:0c:61:5f:78:10:5f:f8:b3:
e9:a2:a7:c5:4a:21:0d:5d:b7:69:59:4b:d5:ce:4b:cc:34:a9:
0e:46:63:72:38:ab:ac:10:8c:8c:c1:20:7b:fa:c5:ce:f4:fc:
3f:40:a8:fe:ee:83:53:80:dd:85:b5:ab:f3:89:dd:a0:b5:40:
c1:1c:1d:72:01:e0:7b:16:47:81:ed:32:86:76:6f:e7:89:58:
ca:d1:3f:7f:3d:f9:69:ad:af:c4:04:5c:2c:8d:bd:d5:51:d2:
21:0d:38:fe:08:45:df:a6:aa:ea:43:e1:95:9e:ca:e7:b2:a7:
f3:3b:44:ab:75:62:fc:df:c5:44:1c:89:57:f6:25:07:52:36:
4d:41:18:02:5b:6c:43:90:bd:46:57:66:d0:a2:f3:14:3a:e3:
00:74:d7:9d:6b:d7:41:60:76:2c:43:f6:a6:ad:1f:5f:fa:89:
69:cb:23:8c:85:0c:a3:f1:ba:68:67:2f:51:6e:76:15:11:38:
2c:b2:e6:db
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKXt5vh4H8JmjIxAqnJD18kMUrOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yNjA0MjgwOTU1MzVaFw0yNzA0MjcxMDAwMzVaMDMxMTAvBgNV
BAMTKDRDRDU1RjU2NDQxREY3Nzc2Njc0MjIwQjg2Mjc1RkJEOTNCRTY2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4tP7qnohgrkNVzgRW4S2Qpce
3kghQ3oxit9x3EPisvNrs/H4RnUnwniTfFEXzSXIe4UmzgTptLvXKWauE4r1InE9
ICLrINH7R3ull8zfFvayXxPvj4rqW5gpCK1krKMX3QEduxp9rZ9ki0zwEOzE2UML
4OXJFc/4URTh3QqZnXu4JZEup6xPtlE7BaHRD+CtqIPD8OWlqkaalTe8bYGZ+/8a
IKU5m9S02BUjjsvwX0KomAlR0r0babSdtP9XZOFXvI6PYUIFqmMdaxKS4uFf/fim
w+xIF7hXhAqG+HxcBNo6YaWKFtYRMXcAJemzL83QqLwtRLvVwWHVSRp+VhZLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUTNVfVkQd93dmdCILhidfvZO+ZsowHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMxMzgzMDJlMzIzMTMxMmUzODM4MmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7TTWDANBgkqhkiG
9w0BAQsFAAOCAQEAb544Bl6Ml0Hy2wUUCJ711YEP7eKP0Vq7KEWDhtgfMjoWElNK
nBx09UU7yCN0+zHq69XyQCOFzzwsGy4A2umv7QxhX3gQX/iz6aKnxUohDV23aVlL
1c5LzDSpDkZjcjirrBCMjMEge/rFzvT8P0Co/u6DU4DdhbWr84ndoLVAwRwdcgHg
exZHge0yhnZv54lYytE/fz35aa2vxARcLI291VHSIQ04/ghF36aq6kPhlZ7K57Kn
8ztEq3Vi/N/FRByJV/YlB1I2TUEYAltsQ5C9Rldm0KLzFDrjAHTXnWvXQWB2LEP2
pq0fX/qJacsjjIUMo/G6aGcvUW52FRE4LLLm2w==
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:58:48 2026 by rpki-client