Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: wLPis3Z6C2OnWyLbXRaak/cSqe3klaCnLFarar16Wj4=
Subject key identifier: 3E:83:A1:83:49:54:D4:5F:A3:18:E7:23:19:64:63:B9:DD:04:1C:56
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 2BD4A853F3DAE189081F7B106850B468F179BACE
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 04:00:01 +0000
ROA not before: Sat 18 Apr 2026 03:55:01 +0000
ROA not after: Sat 17 Apr 2027 04:00:01 +0000
asID: 136088
IP address blocks: 2400:d940:dede::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d4:a8:53:f3:da:e1:89:08:1f:7b:10:68:50:b4:68:f1:79:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 03:55:01 2026 GMT
Not After : Apr 17 04:00:01 2027 GMT
Subject: CN=3E83A1834954D45FA318E723196463B9DD041C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:e5:6b:f5:13:74:f0:58:7a:09:ff:3d:66:
f8:70:82:ec:00:37:57:1e:c5:6c:70:4e:e5:ae:0c:
43:7d:ee:1a:89:2f:93:5c:32:af:22:71:97:78:d4:
98:bb:88:dd:70:21:c8:12:58:05:7e:af:ec:bd:25:
ac:24:85:d0:5b:21:51:f3:6d:cd:e4:2c:22:3d:7c:
7b:cf:34:d6:31:6c:3d:ab:bd:75:52:e6:22:99:0b:
45:76:79:15:1d:47:ef:bc:39:c5:f6:86:e7:19:4f:
c6:eb:6a:41:83:ea:18:cc:f8:5b:4e:ae:95:b8:de:
c9:24:7e:cb:9a:6f:07:94:27:f3:5d:81:e9:9d:3e:
f0:65:9f:94:38:ef:15:b6:17:0e:23:87:00:6e:a7:
57:af:ef:ab:e3:db:76:b7:9b:4d:17:b3:24:0d:03:
14:e4:49:c8:68:d3:fd:7a:b7:43:f6:44:8b:ae:9c:
f5:83:a5:83:7c:dd:3b:21:7d:0d:22:43:0d:d7:ef:
f4:f8:ce:28:90:89:6f:ca:ce:56:70:04:cd:5d:11:
04:74:43:5b:d0:2a:28:36:51:83:1a:89:86:3f:3f:
78:b5:81:c4:62:a6:2c:35:26:b0:85:e7:59:95:e8:
60:a4:3c:f0:be:d0:52:ee:4f:ce:17:23:71:14:bf:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:A1:83:49:54:D4:5F:A3:18:E7:23:19:64:63:B9:DD:04:1C:56
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:dede::/48
Signature Algorithm: sha256WithRSAEncryption
34:ac:ee:12:ba:07:b7:95:e8:5b:01:e8:fa:ce:f5:ac:63:9f:
d8:03:d7:84:48:5d:b8:eb:70:1a:6b:0d:ee:72:81:6c:cc:fd:
e3:5d:2c:78:2a:8e:61:2b:36:0b:b1:1b:f3:ca:41:91:be:26:
6d:c4:20:93:e6:2b:13:b1:a4:ec:90:73:4c:5b:26:ca:29:cd:
98:40:fe:15:ae:04:8e:e2:a2:43:06:d3:1b:72:36:e5:3e:36:
4d:3b:72:6d:a7:af:6e:4b:62:ca:20:c5:c3:e4:20:b6:21:cc:
c4:cb:c1:af:89:63:76:39:51:ba:64:93:fd:84:ff:5a:65:cf:
0e:bf:ef:94:1b:02:8d:93:b3:66:22:ce:b6:55:5c:77:5b:ec:
40:83:90:06:98:dd:92:72:84:60:56:8f:16:8d:3f:47:4a:42:
53:fb:8f:a8:af:58:4c:09:61:60:44:80:f6:ae:73:5c:47:36:
a5:27:9e:b0:39:f8:1f:53:64:00:51:e0:4c:e4:63:7d:41:9c:
c9:dd:95:19:63:c9:af:a5:14:ea:95:c4:95:ce:7e:03:3d:b5:
20:aa:59:8f:d2:f5:6c:2f:48:75:d5:10:f3:5b:55:5b:ad:06:
69:af:81:ab:1f:4a:9d:15:09:64:4c:e7:14:dc:ee:d9:4c:82:
14:24:87:7e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUK9SoU/Pa4YkIH3sQaFC0aPF5us4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE
MEJFOTIzRjAeFw0yNjA0MTgwMzU1MDFaFw0yNzA0MTcwNDAwMDFaMDMxMTAvBgNV
BAMTKDNFODNBMTgzNDk1NEQ0NUZBMzE4RTcyMzE5NjQ2M0I5REQwNDFDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3OVr9RN08Fh6Cf89ZvhwguwA
N1cexWxwTuWuDEN97hqJL5NcMq8icZd41Ji7iN1wIcgSWAV+r+y9JawkhdBbIVHz
bc3kLCI9fHvPNNYxbD2rvXVS5iKZC0V2eRUdR++8OcX2hucZT8brakGD6hjM+FtO
rpW43skkfsuabweUJ/NdgemdPvBln5Q47xW2Fw4jhwBup1ev76vj23a3m00XsyQN
AxTkScho0/16t0P2RIuunPWDpYN83TshfQ0iQw3X7/T4ziiQiW/KzlZwBM1dEQR0
Q1vQKig2UYMaiYY/P3i1gcRipiw1JrCF51mV6GCkPPC+0FLuT84XI3EUv0qpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUPoOhg0lU1F+jGOcjGWRjud0EHFYwHwYDVR0j
BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2
QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF
OTIzRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05
YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhNjQ2NTY0NjUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ANlA3t4wDQYJKoZIhvcNAQELBQADggEBADSs7hK6B7eV6FsB6PrO9axjn9gD14RI
XbjrcBprDe5ygWzM/eNdLHgqjmErNguxG/PKQZG+Jm3EIJPmKxOxpOyQc0xbJsop
zZhA/hWuBI7iokMG0xtyNuU+Nk07cm2nr25LYsogxcPkILYhzMTLwa+JY3Y5Ubpk
k/2E/1plzw6/75QbAo2Ts2YizrZVXHdb7ECDkAaY3ZJyhGBWjxaNP0dKQlP7j6iv
WEwJYWBEgPauc1xHNqUnnrA5+B9TZABR4EzkY31BnMndlRljya+lFOqVxJXOfgM9
tSCqWY/S9WwvSHXVEPNbVVutBmmvgasfSp0VCWRM5xTc7tlMghQkh34=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:53 2026 by rpki-client