Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: ds+8o09EGN4dN6v07VddxeMu9UwA97lxuSIfWp/5IQs=
Subject key identifier: CE:88:69:94:DD:34:19:7D:9B:1B:60:0E:5D:72:40:5E:6A:8E:15:22
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 53335DA993295693969A88F6C4186AE5E7F83B36
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 05:00:02 +0000
ROA not before: Sat 18 Apr 2026 04:55:02 +0000
ROA not after: Sat 17 Apr 2027 05:00:02 +0000
asID: 136088
IP address blocks: 2400:d940:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:33:5d:a9:93:29:56:93:96:9a:88:f6:c4:18:6a:e5:e7:f8:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 04:55:02 2026 GMT
Not After : Apr 17 05:00:02 2027 GMT
Subject: CN=CE886994DD34197D9B1B600E5D72405E6A8E1522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:5e:b4:93:2b:72:af:c8:60:55:ea:0f:b3:
e4:4e:c2:c0:b1:84:19:91:52:93:4f:7b:5a:4e:e7:
0d:20:fb:d3:fb:83:43:f9:d4:1e:61:51:4a:cf:b3:
78:a9:61:53:8a:8e:d7:02:19:41:3c:1b:52:77:f6:
4a:b8:50:31:d6:7a:28:73:c4:9b:81:af:fd:49:f8:
5f:50:c0:8a:4b:b1:34:44:4d:49:bb:b3:a6:5e:cf:
b0:12:30:b7:f0:52:b2:32:c4:e0:95:3c:7a:e2:76:
b2:39:fd:ba:25:42:cd:de:fc:13:e0:1f:2c:0b:c5:
55:71:8c:03:10:e5:65:87:cd:09:b5:86:9b:f5:4c:
fb:e5:e2:c9:86:f5:2d:8c:72:72:07:57:db:62:cd:
d1:21:59:b5:9b:77:2f:24:4c:9b:c4:cd:28:d6:e6:
cb:db:83:d8:79:ed:8f:00:eb:60:18:fb:fc:1b:d0:
2f:18:5e:59:44:d1:86:62:ec:dd:d0:21:15:35:92:
35:fb:ea:ed:db:c9:68:bd:1d:85:3e:25:53:24:0b:
61:aa:98:02:61:77:8f:bb:16:3b:e6:4d:d1:46:0a:
68:47:cf:6d:4c:ff:8f:7c:7c:7b:a5:d6:ff:6e:aa:
3e:d3:3e:ff:5f:c5:01:5c:0b:99:7f:7d:7f:c6:4b:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:69:94:DD:34:19:7D:9B:1B:60:0E:5D:72:40:5E:6A:8E:15:22
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:dead::/48
Signature Algorithm: sha256WithRSAEncryption
a5:a3:1a:34:b7:e6:44:8e:9c:5a:e3:2d:b7:2d:e9:21:e7:2c:
1b:18:cb:1a:32:42:df:39:8d:ce:8c:9b:c8:39:2b:e5:aa:fd:
41:df:87:34:1d:1a:09:6b:f9:6d:be:ba:bc:d0:a0:5e:e2:3f:
8b:12:5b:9e:67:b4:7c:0e:3e:5e:36:8d:47:26:80:9b:42:fa:
c6:9a:65:7b:44:0e:33:47:b0:d4:df:63:d0:02:ae:12:9c:7a:
c1:f4:8d:f2:46:4a:1d:e2:4d:51:02:71:54:a0:88:87:72:5a:
84:a1:2f:77:30:ac:85:8b:c0:09:61:8f:f7:ef:38:2f:a6:ed:
0e:8e:5d:59:fa:d9:d0:cc:d9:b1:0b:ea:05:de:a9:45:1e:b1:
aa:e5:4b:c9:14:f4:79:e7:19:81:51:c4:a4:54:92:64:8d:df:
0d:36:8b:5d:45:d8:78:45:8f:1d:be:8f:c1:f2:bc:91:26:46:
1c:f1:9f:45:90:d6:09:8c:26:51:51:62:ae:bf:15:66:8d:ff:
13:d3:da:68:23:ee:af:4e:67:43:92:0b:ec:ea:8b:f7:c7:29:
06:c8:48:da:83:c3:6b:0f:3d:07:5d:bc:f8:69:5f:1f:7d:4c:
b7:e0:c7:85:42:94:a5:2b:8d:0c:fc:18:e1:4b:24:30:59:12:
2c:80:27:db
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUzNdqZMpVpOWmoj2xBhq5ef4OzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE
MEJFOTIzRjAeFw0yNjA0MTgwNDU1MDJaFw0yNzA0MTcwNTAwMDJaMDMxMTAvBgNV
BAMTKENFODg2OTk0REQzNDE5N0Q5QjFCNjAwRTVENzI0MDVFNkE4RTE1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJl60kytyr8hgVeoPs+ROwsCx
hBmRUpNPe1pO5w0g+9P7g0P51B5hUUrPs3ipYVOKjtcCGUE8G1J39kq4UDHWeihz
xJuBr/1J+F9QwIpLsTRETUm7s6Zez7ASMLfwUrIyxOCVPHridrI5/bolQs3e/BPg
HywLxVVxjAMQ5WWHzQm1hpv1TPvl4smG9S2McnIHV9tizdEhWbWbdy8kTJvEzSjW
5svbg9h57Y8A62AY+/wb0C8YXllE0YZi7N3QIRU1kjX76u3byWi9HYU+JVMkC2Gq
mAJhd4+7FjvmTdFGCmhHz21M/498fHul1v9uqj7TPv9fxQFcC5l/fX/GS8XDAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUzohplN00GX2bG2AOXXJAXmqOFSIwHwYDVR0j
BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2
QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF
OTIzRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05
YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhNjQ2NTYxNjQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ANlA3q0wDQYJKoZIhvcNAQELBQADggEBAKWjGjS35kSOnFrjLbct6SHnLBsYyxoy
Qt85jc6Mm8g5K+Wq/UHfhzQdGglr+W2+urzQoF7iP4sSW55ntHwOPl42jUcmgJtC
+saaZXtEDjNHsNTfY9ACrhKcesH0jfJGSh3iTVECcVSgiIdyWoShL3cwrIWLwAlh
j/fvOC+m7Q6OXVn62dDM2bEL6gXeqUUesarlS8kU9HnnGYFRxKRUkmSN3w02i11F
2HhFjx2+j8HyvJEmRhzxn0WQ1gmMJlFRYq6/FWaN/xPT2mgj7q9OZ0OSC+zqi/fH
KQbISNqDw2sPPQddvPhpXx99TLfgx4VClKUrjQz8GOFLJDBZEiyAJ9s=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:01 2026 by rpki-client