Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203436303234.roa
File: 34392e35302e342e302f32342d3234203d3e203436303234.roa (raw, json)
Hash identifier: uZsu20P99N4nOTp4cTFDjkRGr3XiOqb9DW/gmky7TdU=
Subject key identifier: 06:07:D8:A4:6E:5D:51:BC:A5:DF:01:C6:4A:C6:EE:F8:C5:DD:62:22
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 777C111CDA9AA07587A18F7C8453D094830E17C2
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203436303234.roa
Signing time: Thu 23 Apr 2026 05:02:28 +0000
ROA not before: Thu 23 Apr 2026 04:57:28 +0000
ROA not after: Thu 22 Apr 2027 05:02:28 +0000
asID: 46024
IP address blocks: 49.50.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7c:11:1c:da:9a:a0:75:87:a1:8f:7c:84:53:d0:94:83:0e:17:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Apr 23 04:57:28 2026 GMT
Not After : Apr 22 05:02:28 2027 GMT
Subject: CN=0607D8A46E5D51BCA5DF01C64AC6EEF8C5DD6222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:49:c7:b6:0f:be:93:78:ca:0c:77:b8:c4:
12:a8:64:3c:37:00:7d:57:92:2e:2a:0b:76:d4:ea:
43:62:36:b7:bf:73:fa:6e:7a:44:ea:a3:89:2e:36:
51:12:aa:47:08:32:94:32:a7:e0:39:87:3f:3c:28:
0a:ad:2f:31:cf:dd:7f:de:69:40:80:c3:30:eb:64:
f2:eb:34:69:76:31:ce:68:6d:4e:01:d5:47:f9:fc:
2f:2f:aa:04:d2:a2:29:37:dc:5a:f1:06:f1:5f:c4:
cf:10:41:b7:40:c0:ca:39:59:9e:c8:fe:24:80:72:
30:26:f6:e3:86:f8:01:38:cd:a6:d1:fc:3f:ca:b8:
cb:9c:3c:a7:60:90:19:8d:1e:da:92:42:e9:0c:fc:
f6:b5:23:5f:d1:9a:92:c2:37:e7:16:15:78:aa:82:
8e:4b:2d:db:f1:93:72:b1:05:d3:a0:d2:f7:1c:ee:
48:5d:d8:ef:40:3c:52:40:2e:ab:78:73:0b:bd:4c:
76:78:27:2f:b6:29:47:53:9a:3e:73:b7:62:05:4a:
5f:a8:f0:f5:a0:5b:30:66:91:a7:68:6f:70:3d:a0:
37:41:bc:ad:14:76:ba:5d:14:c3:c0:b8:b6:85:f8:
f6:6d:cf:cc:8f:c2:64:33:3b:aa:1e:9c:00:bc:e2:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:D8:A4:6E:5D:51:BC:A5:DF:01:C6:4A:C6:EE:F8:C5:DD:62:22
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32342d3234203d3e203436303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:af:8f:e6:dd:75:08:ec:a7:1c:01:de:d4:11:ca:e8:9f:48:
1b:30:ee:58:72:c1:f4:89:69:ed:c4:82:07:d9:e3:b6:e8:5e:
fb:47:67:82:2e:6a:0f:60:1c:84:12:ad:13:c6:84:a9:58:8e:
64:6d:c5:bc:ee:7b:d2:de:e5:80:02:1b:05:16:5e:26:74:f7:
33:1a:66:ac:45:dd:25:93:bf:b6:11:fb:d7:25:5a:d0:aa:7b:
7c:23:02:c5:ef:5f:b4:4b:2c:92:15:68:3b:9f:b5:42:ab:d6:
72:43:64:c4:c7:2b:4e:48:e4:64:d8:10:24:37:c8:ca:b8:04:
c7:80:6a:33:64:2c:17:0b:51:35:68:83:9d:e2:ea:0e:83:53:
e8:c6:f7:73:24:69:ad:4d:0b:b5:72:d6:13:52:22:38:c3:15:
e4:df:f4:fd:67:c8:12:70:ac:50:24:37:94:1a:4c:41:56:68:
f6:dc:59:b3:d7:e2:91:32:a0:bf:b0:7d:01:ff:28:92:5b:06:
14:75:fb:a0:af:95:40:19:e3:8e:44:b1:18:a2:f1:0e:fa:54:
ef:bb:0a:a7:41:5f:79:42:52:ee:99:50:7a:f1:36:d9:3c:cf:
43:6d:15:8c:33:0d:cf:19:7a:48:af:14:f6:eb:8f:a0:fe:8b:
95:18:92:92
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUd3wRHNqaoHWHoY98hFPQlIMOF8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD
ODg2RjFERTAeFw0yNjA0MjMwNDU3MjhaFw0yNzA0MjIwNTAyMjhaMDMxMTAvBgNV
BAMTKDA2MDdEOEE0NkU1RDUxQkNBNURGMDFDNjRBQzZFRUY4QzVERDYyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnCknHtg++k3jKDHe4xBKoZDw3
AH1Xki4qC3bU6kNiNre/c/puekTqo4kuNlESqkcIMpQyp+A5hz88KAqtLzHP3X/e
aUCAwzDrZPLrNGl2Mc5obU4B1Uf5/C8vqgTSoik33FrxBvFfxM8QQbdAwMo5WZ7I
/iSAcjAm9uOG+AE4zabR/D/KuMucPKdgkBmNHtqSQukM/Pa1I1/RmpLCN+cWFXiq
go5LLdvxk3KxBdOg0vcc7khd2O9APFJALqt4cwu9THZ4Jy+2KUdTmj5zt2IFSl+o
8PWgWzBmkadob3A9oDdBvK0UdrpdFMPAuLaF+PZtz8yPwmQzO6oenAC84oJzAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUBgfYpG5dUbyl3wHGSsbu+MXdYiIwHwYDVR0j
BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw
M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2
RjFERS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw
OTctYzBiZWMwYjI2NmE3LzAvMzQzOTJlMzUzMDJlMzQyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzNDM2MzAzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMTIEMA0GCSqGSIb3DQEBCwUA
A4IBAQAvr4/m3XUI7KccAd7UEcron0gbMO5YcsH0iWntxIIH2eO26F77R2eCLmoP
YByEEq0TxoSpWI5kbcW87nvS3uWAAhsFFl4mdPczGmasRd0lk7+2EfvXJVrQqnt8
IwLF71+0SyySFWg7n7VCq9ZyQ2TExytOSORk2BAkN8jKuATHgGozZCwXC1E1aIOd
4uoOg1PoxvdzJGmtTQu1ctYTUiI4wxXk3/T9Z8gScKxQJDeUGkxBVmj23Fmz1+KR
MqC/sH0B/yiSWwYUdfugr5VAGeOORLEYovEO+lTvuwqnQV95QlLumVB68TbZPM9D
bRWMMw3PGXpIrxT264+g/ouVGJKS
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:26 2026 by rpki-client