Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa
File: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier: 5RJ+ErlAvKjKOH6LCkqJC6W9A7wUJAzUC0lOc8+5IC0=
Subject key identifier: 7F:59:B4:CF:D5:4D:D7:BC:E7:3F:88:7C:7C:FF:C0:3A:DF:B0:10:B2
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 5492482106E40A15896F05CEF7C7578405CC1517
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa
Signing time: Sat 18 Apr 2026 05:00:01 +0000
ROA not before: Sat 18 Apr 2026 04:55:01 +0000
ROA not after: Sat 17 Apr 2027 05:00:01 +0000
asID: 136088
IP address blocks: 2400:d940:face::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:92:48:21:06:e4:0a:15:89:6f:05:ce:f7:c7:57:84:05:cc:15:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Apr 18 04:55:01 2026 GMT
Not After : Apr 17 05:00:01 2027 GMT
Subject: CN=7F59B4CFD54DD7BCE73F887C7CFFC03ADFB010B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2e:17:14:5e:77:02:e1:94:67:8c:48:e8:ec:
7e:47:80:2b:72:aa:a9:28:2b:0c:fe:db:03:9b:2a:
c4:96:16:f3:35:15:5f:71:e4:81:6c:64:f8:50:be:
4f:91:a9:d5:3c:c5:66:e4:93:7b:94:07:82:7c:cd:
95:e2:69:73:90:99:97:d6:7a:6e:e9:0c:7c:9b:a5:
47:d9:15:0a:a4:84:f2:aa:1c:f2:a5:16:7e:d9:3d:
58:3e:42:b8:0a:b7:4a:70:58:a7:f6:3c:cc:61:4d:
fd:32:a6:db:7e:b3:be:73:70:d7:03:40:79:98:25:
7a:a2:35:9a:cf:9f:dd:43:bf:7d:59:89:e5:43:af:
78:64:6d:b0:51:e1:6e:22:03:88:b6:0c:18:4a:0b:
a0:d1:ca:b3:e9:a7:0f:0c:3e:b3:9c:6c:6a:54:f1:
96:98:4d:db:ee:0a:c5:17:31:1b:ac:d8:83:3b:15:
54:f5:0e:95:d4:82:50:9e:18:97:a9:47:ee:a8:5c:
0e:90:c1:f8:e9:9d:aa:a7:02:11:6d:1e:0c:af:46:
bf:ba:47:51:20:3b:95:84:06:44:5e:cb:eb:9b:6e:
9d:5c:a7:a5:50:fe:a6:e6:b0:ee:67:99:d8:9a:79:
6e:a3:38:f9:27:14:62:f8:79:94:b3:02:55:bb:ff:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:B4:CF:D5:4D:D7:BC:E7:3F:88:7C:7C:FF:C0:3A:DF:B0:10:B2
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d940:face::/48
Signature Algorithm: sha256WithRSAEncryption
c2:b2:64:6b:8e:d8:d9:f8:c1:3d:5e:f4:38:8c:72:d7:9c:ad:
fe:1f:3c:44:8e:b7:7a:bd:4c:46:de:c6:c9:39:3d:b2:c9:f4:
6b:00:ea:5d:07:07:66:e5:d8:ef:9d:26:bf:69:e7:63:b3:1b:
89:86:54:8e:0a:84:fa:16:d5:ef:59:28:59:e1:4d:dc:43:62:
2f:f9:56:52:a2:97:e1:02:8e:ac:46:65:68:0c:c6:1b:ae:8e:
17:d6:e2:a5:f1:6b:77:1e:f3:72:32:21:9b:52:46:a4:05:91:
0c:97:4d:a0:ac:e7:d1:2f:f1:c9:2b:85:7d:96:b7:8e:ec:90:
de:42:a3:01:15:e2:0a:c4:8a:c8:77:a7:8f:70:29:97:88:89:
b7:7e:a6:ed:79:dd:21:98:44:d7:14:f7:8e:6a:9a:8a:e5:6a:
82:0a:66:b7:75:9c:93:23:72:86:d4:ff:11:4a:66:40:6c:a2:
33:c5:d9:7b:78:44:60:c7:d7:27:4b:7d:ff:fe:2a:95:2e:0e:
5b:e2:9e:a8:7d:48:34:5a:bb:fe:32:b7:f7:36:08:3d:d2:b4:
63:c8:9d:b9:f5:bb:45:1f:22:01:63:40:78:0e:ff:f2:93:3e:
41:c0:da:bc:7f:90:3c:fe:98:c1:f1:de:98:07:8a:97:9c:83:
58:fd:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:24 2026 by rpki-client