Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: j4tHXk85sSczqFbTShVxU7HbSzx6jiQfq7DuNJkfC7w=
Subject key identifier: F4:7A:3D:CA:DA:57:8C:6E:A0:98:4B:90:A8:30:16:9D:CF:D7:3E:33
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 29CB161FC1B0219F78BC2C9F48FC9CE05A9C8F83
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 05:00:02 +0000
ROA not before: Sat 18 Apr 2026 04:55:02 +0000
ROA not after: Sat 17 Apr 2027 05:00:02 +0000
asID: 136088
IP address blocks: 2400:d940:baba::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:cb:16:1f:c1:b0:21:9f:78:bc:2c:9f:48:fc:9c:e0:5a:9c:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 04:55:02 2026 GMT
Not After : Apr 17 05:00:02 2027 GMT
Subject: CN=F47A3DCADA578C6EA0984B90A830169DCFD73E33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:7d:18:43:ed:65:2d:20:08:3a:78:d1:65:
46:dd:13:b8:b0:0f:18:31:fb:ab:34:59:93:e3:28:
bd:da:08:0d:d2:e4:a2:d4:bd:2a:91:bf:83:c6:63:
b6:40:8b:6d:ff:1d:06:fb:29:36:e9:67:15:17:fe:
6d:67:52:fb:87:ba:a7:96:89:74:b2:07:ca:3c:bf:
03:c9:79:9d:8f:bd:1f:57:af:a5:98:62:f9:ed:da:
4d:aa:83:b2:db:3b:97:a4:57:a9:9b:e5:c0:4d:bc:
3c:9c:59:00:a2:81:ee:97:7b:ca:43:1f:a3:49:5d:
da:a0:c3:03:66:f3:0e:9e:28:4a:2a:0d:f8:7a:38:
e1:fc:f7:64:c6:e9:7e:48:5d:3e:7f:2b:af:fd:f8:
55:18:b3:e3:be:f1:47:40:e5:ad:cb:e8:4c:c3:3f:
44:3e:47:00:98:29:f3:fa:69:33:37:d8:cb:91:ef:
30:35:9b:d2:55:4d:bc:b9:d2:70:ce:4c:27:5c:bc:
34:d2:2f:01:84:7a:e8:35:42:f1:f6:3a:0d:d6:c0:
59:04:d3:48:21:ce:c9:43:7c:bf:cf:2e:7e:f8:fe:
d0:04:36:b1:a1:5d:51:f3:06:41:fa:d2:8b:68:d7:
a9:38:c9:ce:12:4b:0c:4a:e0:b5:21:f4:97:c3:d2:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:3D:CA:DA:57:8C:6E:A0:98:4B:90:A8:30:16:9D:CF:D7:3E:33
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:baba::/48
Signature Algorithm: sha256WithRSAEncryption
79:71:fd:2d:d5:83:a5:5f:2b:1d:f7:05:2f:9b:c3:5e:c8:9c:
63:e6:cd:47:16:b8:c0:45:3e:36:75:33:89:fa:80:25:bb:18:
12:0a:a7:75:99:08:14:69:fe:fe:6e:b7:8e:ba:8b:98:cd:d9:
8f:06:ba:8a:76:ab:11:55:ad:10:7e:e3:c1:7e:96:d0:88:32:
90:b4:67:31:56:e7:d3:1b:91:59:81:ce:09:23:6b:88:ef:df:
f2:47:ae:85:85:0c:40:38:14:ae:12:15:0a:ba:ca:c6:05:b2:
1e:fe:71:eb:60:4a:2f:01:3c:f2:eb:f9:7e:29:ce:89:2d:52:
57:1e:59:f9:df:3d:c5:c6:8c:b1:0e:48:37:ec:a6:63:60:45:
f8:1e:a7:28:34:eb:64:99:45:70:22:1d:ca:13:1d:39:21:29:
ad:7c:b3:5b:23:fb:fd:70:1f:65:7f:78:92:8c:6c:13:93:c2:
54:69:d1:06:ee:93:68:25:8c:17:27:33:94:d8:66:53:07:02:
61:de:4f:09:83:ce:8d:2e:71:06:cd:b3:58:9e:c2:54:d1:22:
37:8e:13:eb:80:4b:0e:21:f1:60:59:36:08:64:3b:0a:b2:28:
2c:d6:10:72:e7:0d:3a:d0:e8:73:31:3d:f3:79:1c:fc:72:6d:
4f:58:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:43 2026 by rpki-client