Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203436303234.roa
File: 34392e35302e342e302f32332d3233203d3e203436303234.roa (raw, json)
Hash identifier: r62zp7RmkmWiyc2UZ6D3Occ8VtwUISH44wQpPFUAC3s=
Subject key identifier: D7:4B:30:01:6E:76:DD:56:5A:F3:B3:97:DF:01:60:FB:86:A5:45:60
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 77EFA5EB86351AEF07B14C66054516A4358FB04B
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203436303234.roa
Signing time: Thu 23 Apr 2026 05:02:28 +0000
ROA not before: Thu 23 Apr 2026 04:57:28 +0000
ROA not after: Thu 22 Apr 2027 05:02:28 +0000
asID: 46024
IP address blocks: 49.50.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ef:a5:eb:86:35:1a:ef:07:b1:4c:66:05:45:16:a4:35:8f:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Apr 23 04:57:28 2026 GMT
Not After : Apr 22 05:02:28 2027 GMT
Subject: CN=D74B30016E76DD565AF3B397DF0160FB86A54560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:93:61:cb:58:c4:68:32:34:3e:18:e4:00:
2e:34:a9:4c:ab:7a:94:5b:0f:00:d2:bc:8e:94:66:
ad:4d:ba:a4:ea:e7:ab:52:70:d0:22:b3:5f:f9:be:
63:26:4d:c9:85:43:66:bc:a8:27:f7:52:03:54:32:
60:72:52:9a:6d:d8:8a:b4:81:14:83:d7:0f:d2:a5:
22:37:75:7f:50:83:c4:57:9a:03:57:b3:4c:6e:a1:
40:29:f0:71:52:72:91:9a:f5:05:78:67:4e:8e:51:
dd:50:d8:09:82:02:4e:d7:00:03:42:f6:19:d2:b5:
d0:3f:ff:ca:13:d8:02:6f:49:76:36:9d:fe:3f:8d:
0d:21:2a:4d:93:39:a3:ec:c4:2e:aa:4f:da:6a:99:
56:86:bb:2d:ce:4c:6d:26:f4:6e:ac:f8:0b:06:75:
3f:00:d9:ca:01:3e:db:47:4b:0d:3c:8e:6b:25:e3:
2f:7e:1b:76:d3:4a:43:6c:e7:fa:a4:5b:2e:6b:bd:
6b:60:52:3a:21:9e:2d:88:eb:90:a6:95:76:b1:c8:
33:20:0e:9c:0e:52:1a:7c:83:c7:05:f4:15:2d:9b:
49:40:b1:06:46:30:bf:58:21:c5:e0:55:05:02:a5:
2b:47:67:1f:88:8a:c7:e0:be:91:d8:82:9d:91:b1:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:30:01:6E:76:DD:56:5A:F3:B3:97:DF:01:60:FB:86:A5:45:60
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203436303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.50.4.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c4:f8:6b:c2:82:52:d2:48:06:e4:2e:57:bf:c2:9f:42:30:
d9:f3:8d:04:dc:ed:59:27:a2:2c:2b:69:75:d6:02:94:e9:37:
72:86:6c:18:9e:68:37:79:eb:53:8a:a7:8f:0c:94:20:56:44:
b9:f1:c3:bc:e1:0d:60:42:97:45:cc:ea:98:13:d1:ef:ee:5b:
94:3f:03:49:31:7b:f7:d6:a7:6a:5b:fc:d5:eb:1b:9f:6d:4f:
60:74:c4:84:34:52:02:9d:56:0f:35:f7:95:ca:b9:96:5f:f2:
52:8b:05:1c:94:fa:38:35:aa:49:04:80:e2:7b:20:6b:1f:ce:
2d:c4:d0:52:11:51:cb:aa:c3:88:0f:bc:7f:51:35:fa:d7:43:
0d:42:fd:34:3c:16:18:71:04:00:a4:9c:ad:a7:3f:3e:56:bd:
f5:ac:a4:13:c4:f1:f9:00:65:8b:07:e7:19:3f:3f:d2:03:0e:
13:cf:d3:f0:06:cf:0e:cb:7c:f2:e1:c2:2b:5d:22:54:8e:72:
e8:25:7d:9c:ea:26:20:16:e7:ca:23:d3:64:bd:e0:28:19:b3:
e6:b1:47:aa:d3:dc:cc:99:32:66:91:64:47:c0:1d:1c:b2:c2:
60:f6:9d:2c:13:6a:93:5d:f9:00:ba:54:cf:f2:63:c0:b5:7a:
c2:f3:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:56 2026 by rpki-client