Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3a2f33322d3332203d3e20313336303838.roa
File: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (raw, json)
Hash identifier: hlYHv//KiCqYtT7qxCSzI1v5jG9OUE0221XQ9b6uFCg=
Subject key identifier: 36:E1:FB:D6:65:1A:17:10:B2:6D:FC:F1:71:14:B5:2A:F7:B9:BF:8E
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 626AE1F9E47808279064D223C8D72C9DB1DFD170
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3a2f33322d3332203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 05:00:01 +0000
ROA not before: Sat 18 Apr 2026 04:55:01 +0000
ROA not after: Sat 17 Apr 2027 05:00:01 +0000
asID: 136088
IP address blocks: 2400:d940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6a:e1:f9:e4:78:08:27:90:64:d2:23:c8:d7:2c:9d:b1:df:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 04:55:01 2026 GMT
Not After : Apr 17 05:00:01 2027 GMT
Subject: CN=36E1FBD6651A1710B26DFCF17114B52AF7B9BF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:48:a7:56:07:81:46:cd:66:96:5f:f2:60:
de:f5:e3:1a:f3:4e:3a:08:e8:49:81:bf:8d:8b:71:
8d:e8:e1:94:0f:d1:54:36:d1:bf:71:1d:90:97:41:
26:42:68:d3:a8:e1:8f:2e:77:10:5d:c3:88:17:7a:
39:35:7f:f9:1d:09:b0:a9:98:91:fe:05:db:7c:7c:
8e:fe:e9:43:f6:7f:e5:75:60:e5:8e:78:3b:7b:06:
a5:ec:a6:ff:4c:22:40:bb:a7:79:59:94:f3:53:8c:
9f:8e:df:f3:33:46:e0:c2:00:09:ec:97:27:4d:50:
88:22:33:cd:21:14:f7:94:f7:ba:02:54:ac:10:4f:
76:52:a1:52:42:35:c7:57:59:04:3a:46:5c:d4:8c:
78:e3:40:58:e4:55:5a:86:ea:a0:8b:a5:56:65:6e:
a8:69:bf:a1:32:00:b1:d3:97:fb:a1:51:62:b0:03:
8b:52:c3:5b:45:47:a4:8f:e1:fa:55:9c:6c:8f:78:
65:43:b7:85:e0:d4:e9:7a:14:73:74:96:1d:63:d2:
93:c5:26:30:2c:df:b8:27:9a:db:cc:b0:2a:de:e9:
66:e5:b9:e7:0e:8f:91:72:4b:1c:ed:4b:f1:f5:b6:
a1:c1:7b:50:cf:5a:41:17:a4:fc:3f:70:0e:e9:ab:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:FB:D6:65:1A:17:10:B2:6D:FC:F1:71:14:B5:2A:F7:B9:BF:8E
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3a2f33322d3332203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940::/32
Signature Algorithm: sha256WithRSAEncryption
59:2a:1d:c0:ef:11:12:22:d7:d0:08:93:ac:60:60:52:ff:c3:
3c:0c:39:f0:ce:37:1f:8d:2a:c1:40:58:a6:20:8d:a7:ac:08:
f1:91:ab:ab:a3:a6:de:83:3a:f1:f5:8a:1e:31:f8:2e:7b:68:
4c:42:0b:5e:ac:63:13:59:2a:b1:0f:a8:e8:93:3c:f3:04:0b:
d5:89:2c:58:b4:e1:36:eb:bc:0f:9f:5c:30:37:d3:83:bb:e4:
e2:1e:29:08:71:4b:98:ae:99:0e:85:06:13:a4:2a:61:ab:df:
c2:10:e5:2c:13:5d:8e:30:57:7f:72:da:cf:a0:a4:92:4e:0c:
59:92:60:70:a0:7b:48:60:68:20:fd:6e:a7:b1:1f:94:ba:b6:
28:9f:46:fe:71:bd:a8:8c:ed:a6:6a:05:16:27:dc:87:62:18:
86:99:7c:72:0e:bb:a5:62:c0:66:aa:e7:cf:44:bf:23:71:86:
f5:3d:e2:93:85:dd:bf:90:2d:74:2f:c4:0c:dc:36:2c:21:b8:
a0:76:2b:21:84:70:71:4f:e1:c8:ac:1b:9c:9f:d1:cd:ee:e4:
ae:35:fc:6f:a9:ee:70:29:de:08:0b:e6:a2:7e:7d:0f:9f:30:
44:92:f5:5e:2d:86:ce:6f:87:ec:44:10:b7:c4:8e:c4:a4:32:
3b:6a:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:34:12 2026 by rpki-client