Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: NniC77deRhfdHC1dWoW4T2F/Q75s7G039+eEY7tmr1s=
Subject key identifier: 6A:63:03:4A:A5:C0:17:E5:CD:EF:67:A2:FD:88:72:59:29:46:51:46
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 170DC23B2256F700A8954A2609BC760F13EEBC0A
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 04:00:02 +0000
ROA not before: Sat 18 Apr 2026 03:55:02 +0000
ROA not after: Sat 17 Apr 2027 04:00:02 +0000
asID: 136088
IP address blocks: 2400:d940:dada::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0d:c2:3b:22:56:f7:00:a8:95:4a:26:09:bc:76:0f:13:ee:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 03:55:02 2026 GMT
Not After : Apr 17 04:00:02 2027 GMT
Subject: CN=6A63034AA5C017E5CDEF67A2FD88725929465146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:1e:9d:8c:31:b8:f6:aa:e4:6f:a5:5a:8c:
ef:74:3c:65:61:ee:f9:0d:2e:f7:50:99:0e:01:59:
8a:4a:ef:a7:b3:32:f0:f3:93:22:b4:68:30:bc:40:
b2:95:f8:4e:0b:dd:cd:1d:19:6d:e1:02:47:a8:04:
07:7b:7f:92:54:69:b4:f0:78:0d:63:35:bd:28:39:
7b:f5:ef:48:da:99:be:0f:ff:ee:05:46:77:56:2c:
47:39:84:c7:d9:5d:a6:2f:8e:bd:60:61:58:31:cb:
ea:ad:1d:9d:49:07:e4:00:e8:d1:65:b1:26:b9:d3:
27:f7:ac:36:f5:74:cd:62:f0:3a:ef:3b:42:a3:a9:
a6:6a:cf:24:e9:05:75:d2:f8:14:1c:89:8e:b6:c2:
88:c8:8e:35:a5:7d:c0:f7:fd:80:1e:d8:19:44:a6:
8f:53:ce:6e:1f:86:69:34:27:a8:07:97:1c:31:d7:
f0:90:67:71:5c:2e:83:0a:9b:90:48:13:57:ae:d1:
fb:79:93:e1:7c:1b:d4:5e:58:64:b1:95:3b:f5:80:
fa:cd:b4:25:28:8f:9a:49:f7:ca:28:20:65:7d:42:
f4:f7:55:8a:41:7e:c6:71:2c:87:52:12:d2:a8:e2:
2e:05:f6:e3:ca:13:42:10:04:c4:6a:e9:a9:23:17:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:63:03:4A:A5:C0:17:E5:CD:EF:67:A2:FD:88:72:59:29:46:51:46
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:dada::/48
Signature Algorithm: sha256WithRSAEncryption
40:72:95:8e:91:b2:58:86:f9:37:4e:de:c6:f7:4a:94:60:c2:
b2:6f:05:84:c9:5e:cd:69:c3:8a:a6:4c:c4:af:d3:c2:eb:65:
6d:63:88:f6:b5:40:ce:3c:53:f5:38:77:8c:e8:08:60:00:1b:
00:0a:f3:94:49:19:03:1b:53:ab:fa:3e:64:df:45:fc:0a:32:
00:ef:96:b4:72:cd:a5:01:89:2e:98:d6:40:1e:92:a6:4a:0b:
5f:10:e5:ef:3b:28:77:ab:e6:b6:5c:43:47:e8:e4:4b:3a:49:
08:e1:82:c8:06:1e:8e:19:c3:fd:13:fa:94:9e:3c:a6:59:fb:
e2:f2:9d:e1:cb:a2:38:c1:6c:13:d9:5f:7b:15:05:a4:df:7b:
4c:79:98:75:50:d2:87:3a:3c:e5:d8:33:ea:9a:8e:4a:e0:7d:
06:88:45:90:76:c0:7f:5e:c0:03:56:17:1f:7e:3c:97:b3:5a:
ed:62:dc:61:b8:4f:f2:c3:d7:f1:92:84:52:e7:74:dd:53:35:
0c:3e:8f:c4:3d:4f:59:23:62:45:67:e4:03:d8:92:b9:da:0b:
21:a6:f6:d7:70:d5:52:55:54:92:a1:c8:17:2a:9f:f8:19:b8:
8b:5b:6c:82:7e:d2:27:e1:8d:55:fd:74:7a:f0:80:9c:e7:b8:
4d:a1:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:19 2026 by rpki-client