Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: woZ5lAu7WqqwSNg0NnzvYjIAiiDSC+MZdDvMOgTVNhU=
Subject key identifier: DE:51:F5:33:67:A1:C3:7A:DC:BC:AD:99:E7:A8:FE:7C:BC:A0:CB:58
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 217362618CBD32D106D5B2C3525369DE13E0C3A4
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 04:00:02 +0000
ROA not before: Sat 18 Apr 2026 03:55:02 +0000
ROA not after: Sat 17 Apr 2027 04:00:02 +0000
asID: 136088
IP address blocks: 2400:d940:baca::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:73:62:61:8c:bd:32:d1:06:d5:b2:c3:52:53:69:de:13:e0:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 03:55:02 2026 GMT
Not After : Apr 17 04:00:02 2027 GMT
Subject: CN=DE51F53367A1C37ADCBCAD99E7A8FE7CBCA0CB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:d4:bb:66:2b:d8:c3:01:03:1f:51:e8:ea:
c7:57:d1:9f:7a:ce:57:54:7a:62:f8:2d:ca:e9:02:
51:ec:f7:23:2f:6c:7f:85:f7:0b:cf:34:3f:f1:bc:
9e:fe:73:e2:6c:69:98:cd:9b:00:28:94:55:e6:94:
e2:0f:ea:36:b1:1d:0a:6e:6d:a8:4e:39:ab:60:4e:
60:47:d6:ce:e5:65:27:ad:0b:ad:48:dd:67:ea:26:
c1:81:4c:4b:8c:6e:17:d1:a9:e0:9c:4f:15:df:4a:
55:2c:3b:53:72:3b:c3:a5:69:ee:34:64:b2:84:38:
f6:7b:6b:7f:a6:e0:b7:e6:f7:c9:b7:cb:09:ea:f8:
4f:f8:51:08:04:35:ad:53:3a:fe:63:d9:11:c9:76:
e2:2e:44:69:b1:89:ef:a0:1f:52:38:fd:54:7d:f8:
26:22:8a:20:59:fd:b7:9d:30:7f:80:03:e4:fc:3b:
54:a8:2c:16:7a:79:ec:38:d4:35:e0:ba:b8:77:a0:
46:ac:d4:d3:75:14:09:dd:49:e6:74:bf:6e:e7:19:
6c:33:72:82:84:70:00:9b:27:03:1d:ad:47:ce:ad:
41:8f:e8:65:08:5f:94:96:0f:49:72:8c:9f:26:2e:
fc:6e:f2:d9:4b:97:77:bf:09:65:27:ff:be:3a:59:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:F5:33:67:A1:C3:7A:DC:BC:AD:99:E7:A8:FE:7C:BC:A0:CB:58
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:baca::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ce:72:fa:33:98:b6:51:aa:80:cc:0f:16:4f:ca:8c:83:dd:
a4:fc:4f:48:a9:55:d5:30:ed:ad:f7:43:02:3f:d7:ab:3a:a2:
e8:d5:22:00:e9:95:9d:da:d7:bc:df:e3:64:02:8a:8a:4e:71:
0d:12:d5:37:24:09:0a:4f:19:63:d1:f9:e5:1a:c5:5a:dd:61:
bc:d3:1c:08:98:80:9f:4f:39:a2:5f:6d:59:ef:18:d6:3b:33:
08:33:17:e3:6b:cf:fa:53:2a:2d:f6:54:15:73:78:32:28:0b:
08:2d:2c:09:50:93:d6:0e:3e:be:97:39:6b:5e:9c:c4:44:8b:
de:9d:3e:9a:20:f6:0c:cb:cb:5f:83:9d:23:85:23:c4:cd:ea:
80:17:26:a4:91:1e:50:92:a2:28:6f:80:c3:5d:b5:46:19:84:
cd:ec:6c:04:29:36:3f:90:f1:49:02:7a:08:b6:72:95:e2:13:
0c:85:e3:9b:41:30:33:ea:be:dc:e8:88:23:d8:ed:60:0c:32:
2b:70:dc:58:db:b9:63:9a:43:cf:8f:c5:cc:3f:35:01:0a:10:
9d:46:11:29:6a:1e:91:d4:4c:df:9f:ce:38:56:0d:a0:30:81:
e8:60:b4:14:e6:e4:d5:90:95:32:88:ab:c6:9a:86:cd:d7:a6:
69:dc:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:15 2026 by rpki-client