Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
File: 34392e35302e352e302f32342d3234203d3e203436303234.roa (raw, json)
Hash identifier: QYhBq1xXT03TtnlDBcVAfTKx33FUeyAJCGW/qs7gFKo=
Subject key identifier: BF:6A:19:59:6D:C9:27:86:55:03:49:3D:E6:D4:B1:E8:73:14:B8:1D
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 5AA8C71BA53FE9D9452B410FD5F0B9D68FC88613
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
Signing time: Thu 23 Apr 2026 05:02:28 +0000
ROA not before: Thu 23 Apr 2026 04:57:28 +0000
ROA not after: Thu 22 Apr 2027 05:02:28 +0000
asID: 46024
IP address blocks: 49.50.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a8:c7:1b:a5:3f:e9:d9:45:2b:41:0f:d5:f0:b9:d6:8f:c8:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Apr 23 04:57:28 2026 GMT
Not After : Apr 22 05:02:28 2027 GMT
Subject: CN=BF6A19596DC927865503493DE6D4B1E87314B81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:63:46:a2:af:c2:62:91:f8:b4:36:d4:d7:
5d:8a:39:2c:9c:d9:04:1e:f6:e5:3c:c2:f0:80:9c:
44:5d:da:be:2b:c2:3d:18:26:55:7f:79:cb:e9:4d:
d0:64:80:74:09:4f:26:67:ba:1e:ce:57:31:90:dc:
4f:aa:cb:81:80:a1:13:38:34:59:7b:20:29:68:33:
95:2b:26:da:24:37:7e:04:7b:8d:82:43:0c:6c:cd:
13:d0:9a:a7:4f:0a:e9:8d:43:8a:4f:3e:4a:e5:2e:
69:7c:3a:7c:8a:aa:57:cc:41:bb:e5:52:41:0e:42:
1a:ba:eb:42:a7:75:69:00:07:07:c4:00:51:1a:af:
a4:75:5a:35:2a:f5:52:a1:ec:7a:1d:de:df:9a:4a:
cb:9b:39:23:78:83:bf:a4:4f:23:3a:b9:1d:78:55:
16:72:db:76:83:3c:2f:1c:f1:54:c1:9c:40:74:4e:
4b:82:a5:28:2d:4a:f1:6e:63:94:f9:fd:8f:b8:68:
ea:35:6a:88:5d:49:49:39:69:cf:79:d7:23:44:e1:
b3:27:68:65:ac:e1:15:b8:c0:3b:40:1f:f3:23:75:
43:d3:5e:75:fd:1b:d6:c6:ab:a8:ae:b5:93:da:80:
c7:61:60:c7:60:a8:1a:79:6e:94:eb:bb:2a:09:4e:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:19:59:6D:C9:27:86:55:03:49:3D:E6:D4:B1:E8:73:14:B8:1D
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.50.5.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bb:c9:4a:3c:9c:90:73:cd:7b:fa:18:a9:6b:cf:92:19:08:
d7:63:ad:cd:0a:47:93:6f:9e:1c:02:01:60:80:4b:15:39:de:
cc:64:21:44:40:55:44:dc:46:f5:b3:f2:cd:25:bf:5d:a6:57:
a9:e2:5b:ba:2f:78:f0:53:98:e5:05:44:81:ae:0f:41:8d:3a:
6c:b0:d5:82:30:67:ab:25:b3:74:08:45:b4:af:3a:e3:da:3c:
bd:0c:69:16:68:c2:cc:38:bb:9c:b5:0c:38:c4:ef:2f:0b:6e:
50:bf:5a:ae:67:83:66:5f:5b:a7:46:07:5d:26:44:20:9a:8a:
59:aa:72:3d:4a:fc:5f:a5:45:91:63:b3:50:36:e9:6d:a6:ae:
09:94:6b:c7:7f:37:e7:f6:31:55:22:e9:d9:a7:25:07:1b:f6:
32:d4:c3:b8:d5:c8:fc:fa:33:26:95:c9:59:78:3a:d6:a0:03:
0a:1a:f0:84:b0:2e:ac:1d:3b:11:a8:97:ca:c6:a0:63:b1:9a:
99:af:a8:2e:43:d2:60:dd:5a:f7:8a:84:44:e4:10:ca:27:0d:
9e:65:08:63:68:71:77:7a:98:df:3b:bd:0a:3e:13:29:fa:f6:
3b:d4:00:eb:29:cb:ee:63:b7:75:a8:06:b1:1e:cd:33:ab:e1:
b6:46:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:26 2026 by rpki-client