Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: 66Vf543zpImwKBCQmQdYjdLVkwGAbGR8X7TCKPP2pTM=
Subject key identifier: 1C:C8:87:8F:90:AD:6C:53:66:56:C6:91:9F:5D:86:0B:4D:E4:6B:93
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 1C1958DAD79AE775B7FED5835C6B3E186947332D
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 04:00:02 +0000
ROA not before: Sat 18 Apr 2026 03:55:02 +0000
ROA not after: Sat 17 Apr 2027 04:00:02 +0000
asID: 136088
IP address blocks: 2400:d940:cabe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:19:58:da:d7:9a:e7:75:b7:fe:d5:83:5c:6b:3e:18:69:47:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 03:55:02 2026 GMT
Not After : Apr 17 04:00:02 2027 GMT
Subject: CN=1CC8878F90AD6C536656C6919F5D860B4DE46B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:12:b1:f0:a1:dc:df:86:23:4b:b9:d8:19:
af:4d:c9:71:cd:be:2b:62:56:16:35:cf:0d:e8:bc:
0a:d3:a2:75:3a:91:ab:1b:e7:64:02:54:fe:0b:57:
41:8b:c8:1b:be:27:17:44:16:ec:4c:b4:86:e9:a8:
69:a0:3e:9d:b0:df:5d:b0:bb:dc:2b:55:e7:c6:c2:
cd:da:e2:1b:da:54:d3:c6:1d:e7:6c:54:a3:ed:d5:
4e:b2:6b:8d:e8:28:05:dc:23:5a:86:af:ff:86:f1:
b0:7f:cf:2c:4a:99:82:71:dd:12:36:be:38:27:f9:
57:e8:cb:6e:15:5a:e6:de:fa:36:c7:8a:81:6c:39:
37:97:9b:2a:b5:04:4d:ed:5d:69:ab:fa:a0:0c:be:
63:3b:62:e7:f4:65:63:09:fd:18:c1:d7:20:a9:df:
d5:4b:63:19:6a:26:46:fe:79:5d:23:bf:72:34:22:
a2:bb:3d:20:87:5d:d9:1e:a4:15:cf:10:84:f6:14:
c2:74:a5:ba:1f:d0:12:61:67:9c:2e:b2:9e:e1:28:
8f:dc:04:0a:a2:d9:f6:5c:27:1d:34:c5:0d:f9:b4:
d5:ee:5f:01:7f:96:cb:ff:23:e2:3c:71:df:a2:4d:
6f:bd:05:bc:a0:db:21:62:68:15:2a:55:15:80:50:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:87:8F:90:AD:6C:53:66:56:C6:91:9F:5D:86:0B:4D:E4:6B:93
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:cabe::/48
Signature Algorithm: sha256WithRSAEncryption
92:52:29:46:21:a8:6b:16:76:88:47:c0:a9:26:c8:b4:b2:64:
58:68:e0:84:b2:2a:08:23:07:35:f4:6f:f5:02:50:7d:8d:98:
cc:c1:97:fc:8d:b2:35:fb:4f:1c:65:90:90:60:a8:26:9f:bc:
f4:a3:04:32:0f:bd:1d:0b:dc:fb:0d:e4:5d:08:32:81:b3:00:
c1:63:14:60:f9:d7:fb:3a:e7:4d:ac:87:19:f3:54:de:c3:2e:
3f:b3:dd:0f:55:66:65:97:20:59:46:79:b2:d7:9e:59:1f:bf:
01:71:56:eb:f4:da:55:62:30:ad:ec:41:e2:c8:db:a6:32:bc:
cb:d4:7f:84:c6:06:ad:f1:7a:7e:11:09:ec:0c:22:75:22:8a:
b9:df:03:09:ac:8a:63:bb:e9:a9:2e:f3:f5:35:f7:f0:db:fd:
1c:86:13:64:e5:b5:39:9a:6f:ca:66:3f:20:f1:85:19:45:a6:
60:c4:94:8a:2e:91:52:4f:2c:67:1b:d1:4f:65:51:33:b6:a9:
c3:64:d8:77:15:b5:7b:03:b9:1e:11:fd:ff:3a:e9:74:89:ed:
ce:07:92:c3:af:a7:de:1f:a2:81:57:6a:fd:6b:bc:6c:3d:47:
55:31:f2:24:44:e3:e8:e7:bb:42:ed:2a:50:c5:b4:c0:fc:3e:
58:28:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:24 2026 by rpki-client