Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: JYQxite2u4N3gyNkByeqO9i2bXBYJdOyBMCZzWRPVRI=
Subject key identifier: B4:04:23:ED:1B:40:5C:17:8E:2C:3B:44:59:D7:14:F3:12:EA:61:60
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 243F243ACF70A2CAE93E0B7551A227B1FFA86CEE
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 04:00:02 +0000
ROA not before: Sat 18 Apr 2026 03:55:02 +0000
ROA not after: Sat 17 Apr 2027 04:00:02 +0000
asID: 136088
IP address blocks: 2400:d940:beca::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3f:24:3a:cf:70:a2:ca:e9:3e:0b:75:51:a2:27:b1:ff:a8:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 03:55:02 2026 GMT
Not After : Apr 17 04:00:02 2027 GMT
Subject: CN=B40423ED1B405C178E2C3B4459D714F312EA6160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:49:c6:d6:d7:f6:89:79:17:06:40:84:24:
19:fe:38:fc:f2:21:fc:7c:89:0a:ce:c9:11:06:a0:
a2:6c:11:b9:53:bf:f7:ab:21:d1:a2:3f:df:74:df:
2b:09:3e:81:cf:49:e4:50:06:cd:e0:5a:65:c6:30:
d5:bb:c4:b0:93:83:08:69:7e:a7:5a:3a:fe:af:8e:
70:e6:1e:23:8c:20:10:d8:4c:de:fc:99:d8:c0:30:
2d:18:9a:1f:64:6d:64:d5:58:29:d5:b4:88:32:0c:
5a:02:15:81:e5:d2:19:49:4c:08:f5:93:72:96:77:
b9:90:0c:57:3c:de:22:d5:28:8d:3c:f8:2f:c4:6c:
4e:56:3a:dd:ae:46:2a:58:55:4d:40:3b:7e:ee:37:
28:9e:7a:7b:6d:2f:20:3e:cc:18:97:ef:e0:b3:f6:
b6:d5:c3:d1:0e:c2:9b:55:dd:d6:5c:33:38:b5:27:
c5:6a:40:d7:56:37:28:fc:cc:02:45:58:15:07:c1:
ef:d1:2a:2d:e7:c8:66:da:94:15:1e:03:17:74:f5:
aa:5f:56:cb:5a:c2:a1:75:17:1a:4a:73:42:f8:bc:
86:2f:ce:86:be:29:d6:bb:01:d8:79:db:6d:38:52:
15:d9:3d:f4:44:a7:88:43:54:3b:a6:4f:87:6b:fd:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:23:ED:1B:40:5C:17:8E:2C:3B:44:59:D7:14:F3:12:EA:61:60
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:beca::/48
Signature Algorithm: sha256WithRSAEncryption
54:aa:80:27:c4:9b:1d:fe:15:92:ce:46:a1:18:a0:f4:d5:9d:
87:a8:6d:ca:75:22:b2:8a:4c:91:a4:b7:2d:b9:b6:3b:bb:5e:
59:95:0d:04:11:01:9d:a0:c0:3f:02:df:a7:b5:89:f1:24:ca:
98:fd:4c:a4:16:cc:3d:f5:b9:8e:c0:02:ee:2f:1b:61:fc:af:
1a:88:01:53:41:88:20:f4:01:4d:9e:78:db:26:c2:ee:a6:21:
b4:67:4e:8e:59:fd:b4:94:e7:55:ad:ef:61:5a:9a:41:c4:d0:
a0:85:a9:c8:e8:88:33:0b:60:c4:a7:25:81:fd:1b:0e:09:52:
9d:38:23:34:44:3b:94:cc:75:f2:ea:72:8c:a1:f8:1c:88:04:
50:69:91:7b:d4:4c:15:52:6f:1b:fe:61:2c:8b:f7:64:dd:cf:
4e:72:94:db:8d:cd:07:d3:1d:70:1f:5c:26:b3:b6:a3:2a:e8:
e0:4a:a6:d8:f8:48:cc:c6:bb:89:7c:ce:a6:a0:3a:2f:4e:08:
8d:16:7f:ca:bd:fc:b3:8a:31:97:21:09:2e:d2:8b:fd:9b:40:
85:45:8b:10:89:37:c9:55:15:be:8d:8e:04:e6:52:6d:f5:54:
ec:4b:44:b0:27:5c:df:04:97:7d:2b:aa:03:1f:d0:76:7f:27:
61:6f:4b:83
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJD8kOs9wosrpPgt1UaInsf+obO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE
MEJFOTIzRjAeFw0yNjA0MTgwMzU1MDJaFw0yNzA0MTcwNDAwMDJaMDMxMTAvBgNV
BAMTKEI0MDQyM0VEMUI0MDVDMTc4RTJDM0I0NDU5RDcxNEYzMTJFQTYxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkEnG1tf2iXkXBkCEJBn+OPzy
Ifx8iQrOyREGoKJsEblTv/erIdGiP9903ysJPoHPSeRQBs3gWmXGMNW7xLCTgwhp
fqdaOv6vjnDmHiOMIBDYTN78mdjAMC0Ymh9kbWTVWCnVtIgyDFoCFYHl0hlJTAj1
k3KWd7mQDFc83iLVKI08+C/EbE5WOt2uRipYVU1AO37uNyieenttLyA+zBiX7+Cz
9rbVw9EOwptV3dZcMzi1J8VqQNdWNyj8zAJFWBUHwe/RKi3nyGbalBUeAxd09apf
VstawqF1FxpKc0L4vIYvzoa+Kda7Adh52204UhXZPfREp4hDVDumT4dr/W/fAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUtAQj7RtAXBeOLDtEWdcU8xLqYWAwHwYDVR0j
BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2
QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF
OTIzRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05
YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhNjI2NTYzNjEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ANlAvsowDQYJKoZIhvcNAQELBQADggEBAFSqgCfEmx3+FZLORqEYoPTVnYeobcp1
IrKKTJGkty25tju7XlmVDQQRAZ2gwD8C36e1ifEkypj9TKQWzD31uY7AAu4vG2H8
rxqIAVNBiCD0AU2eeNsmwu6mIbRnTo5Z/bSU51Wt72FamkHE0KCFqcjoiDMLYMSn
JYH9Gw4JUp04IzREO5TMdfLqcoyh+ByIBFBpkXvUTBVSbxv+YSyL92Tdz05ylNuN
zQfTHXAfXCaztqMq6OBKptj4SMzGu4l8zqagOi9OCI0Wf8q9/LOKMZchCS7Si/2b
QIVFixCJN8lVFb6NjgTmUm31VOxLRLAnXN8El30rqgMf0HZ/J2FvS4M=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:43 2026 by rpki-client