Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3234203d3e203435373235.roa
File: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (raw, json)
Hash identifier: EfbUee5PYoRSB21tNMwW5oSxVvNhMvTw5WiQ2eXggGc=
Subject key identifier: 88:D8:86:1D:B3:8B:6F:EA:F9:AA:1A:0E:3D:1A:00:55:81:37:00:9A
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 1DCB79054C4C5BE81E2C0BF970FA0827087A22B0
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3234203d3e203435373235.roa
Signing time: Tue 28 Apr 2026 10:00:35 +0000
ROA not before: Tue 28 Apr 2026 09:55:35 +0000
ROA not after: Tue 27 Apr 2027 10:00:35 +0000
asID: 45725
IP address blocks: 43.230.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cb:79:05:4c:4c:5b:e8:1e:2c:0b:f9:70:fa:08:27:08:7a:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Apr 28 09:55:35 2026 GMT
Not After : Apr 27 10:00:35 2027 GMT
Subject: CN=88D8861DB38B6FEAF9AA1A0E3D1A00558137009A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:12:11:8b:31:b5:8b:ac:65:ff:65:82:ca:
4f:52:93:af:24:2c:00:03:3c:d1:63:f0:88:de:5b:
0f:51:8a:da:10:49:33:d1:59:6c:bb:6d:ef:e6:a3:
5a:13:60:a9:e2:e2:d7:ed:1f:b7:6a:22:a1:50:02:
93:af:3c:7e:a3:f2:f9:3c:6b:fb:8a:ca:d3:17:98:
dd:46:36:1f:2a:d2:b5:e0:87:e6:7a:a4:cd:3d:1c:
f1:c2:ed:d2:d7:b0:22:d3:a2:16:f1:31:22:3f:5b:
54:3f:38:30:67:e0:70:fe:41:6a:af:8c:35:14:9c:
b4:8b:1b:04:cf:dc:e1:07:a2:e2:e3:6d:d2:1c:3e:
0a:e3:f5:a9:6d:96:05:9a:4c:6b:27:36:65:1b:a5:
d3:d6:06:81:7a:3a:31:88:83:cf:15:f4:72:40:78:
6b:6d:bf:61:b7:bf:e8:f8:2f:d7:26:d7:de:5b:9e:
12:e2:ff:a6:06:14:1d:44:03:01:27:bb:4a:ce:f0:
1b:3b:6e:53:5c:c4:0b:66:b9:d3:37:9c:28:ed:d1:
db:51:f2:c2:41:34:2d:98:68:0e:f0:1b:24:c5:52:
47:50:c9:af:e8:dd:c9:88:93:26:c4:44:ff:db:1f:
0c:e3:77:ed:c1:07:73:1f:27:02:e5:25:92:96:d0:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:86:1D:B3:8B:6F:EA:F9:AA:1A:0E:3D:1A:00:55:81:37:00:9A
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.152.0/22
Signature Algorithm: sha256WithRSAEncryption
76:84:84:b0:68:1f:a6:04:33:cb:bd:47:1e:4a:ff:00:4c:15:
c7:95:2c:e6:f1:11:2f:c5:b8:cc:1a:7e:61:b1:4f:a2:71:49:
8f:f6:21:9f:e2:38:c3:b1:0e:1b:09:bc:f9:69:fb:d9:9f:b8:
eb:5f:95:fc:48:2c:1a:70:4b:c8:6b:cd:4c:68:f1:ec:9a:4c:
ad:2f:96:79:6b:57:67:8a:5a:3b:29:f0:34:77:5b:29:f4:b3:
46:26:e5:3e:c0:50:b7:ee:ac:a7:32:9f:ac:73:1c:e0:7a:e8:
b4:a2:d1:a9:7a:93:98:6d:b9:94:2c:84:b9:af:f2:9d:19:42:
fe:50:07:4a:76:50:be:19:3d:27:45:66:7e:24:b3:5b:5d:ac:
18:c4:37:1c:40:50:73:b2:19:15:01:06:04:ed:25:a0:c8:e7:
ab:bc:9c:1e:19:b8:71:13:9e:c2:ac:8a:96:73:62:66:db:73:
6a:3b:8d:0f:be:29:f4:6a:24:53:8e:c2:ed:c4:f6:10:b6:ec:
3d:a4:ed:42:5a:a7:98:41:e1:46:bf:eb:bf:27:cd:1a:64:39:
06:ae:13:1b:f7:1e:75:68:52:f4:ff:9b:db:1c:98:66:64:08:
af:1f:94:fc:94:74:7b:71:a7:bc:a1:a9:d6:4d:86:7a:f9:d6:
63:b4:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:58:46 2026 by rpki-client