Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203535363730.roa
File: 3130312e302e342e302f32322d3234203d3e203535363730.roa (raw, json)
Hash identifier: Iw9/4H9z/oUlOlYaQk6Av53Qljs+W3HPrEX2/rDiTpA=
Subject key identifier: F0:F4:5C:D3:9D:41:0D:70:A4:ED:41:63:83:D7:0F:15:E7:4F:10:5A
Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial: 0F65D9F5C03903038EA5B04FC3A76689A890141B
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203535363730.roa
Signing time: Tue 21 Apr 2026 03:02:55 +0000
ROA not before: Tue 21 Apr 2026 02:57:55 +0000
ROA not after: Tue 20 Apr 2027 03:02:55 +0000
asID: 55670
IP address blocks: 101.0.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:65:d9:f5:c0:39:03:03:8e:a5:b0:4f:c3:a7:66:89:a8:90:14:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Validity
Not Before: Apr 21 02:57:55 2026 GMT
Not After : Apr 20 03:02:55 2027 GMT
Subject: CN=F0F45CD39D410D70A4ED416383D70F15E74F105A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:0f:f2:a4:cb:08:af:6b:c4:63:7d:15:3c:
0c:07:20:af:ed:fc:66:6b:f4:63:c0:53:ee:fa:3b:
b7:f5:7f:5d:b4:38:eb:1f:d2:88:05:ff:b0:21:39:
a3:7a:eb:4c:5c:07:c3:c8:84:ab:49:28:c4:7e:d9:
77:cb:40:8c:7f:78:fa:c3:c4:31:70:fd:d0:4b:4f:
07:c6:a3:f2:f7:37:ff:e3:80:87:a5:5b:cb:31:8a:
fb:06:82:53:f6:64:2e:b3:b0:98:df:78:7f:13:f0:
10:b3:24:98:f4:fc:50:dc:87:1f:a2:55:1d:45:b7:
31:36:37:9e:9f:0d:bc:dd:d6:e1:42:f8:5b:7c:f1:
02:b5:63:19:c1:97:bf:8b:97:e2:54:54:9f:6c:aa:
50:b7:c5:65:c7:37:04:5e:ac:60:69:87:2d:ab:04:
74:65:12:52:9e:18:9a:7b:2f:b8:92:86:8b:4d:96:
36:83:71:3e:65:06:ef:c6:4a:7d:30:fe:49:08:6b:
6e:98:32:21:1d:4c:b0:dd:68:c4:e7:ce:18:0c:bd:
bc:43:12:88:90:c3:92:2f:c5:bf:cc:a7:7a:03:b2:
f6:be:e5:4c:bd:43:81:5d:ac:fc:c2:3d:ac:0c:6f:
84:d4:e3:3b:f3:21:f6:cd:10:fc:a2:1d:8c:bc:ed:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:5C:D3:9D:41:0D:70:A4:ED:41:63:83:D7:0F:15:E7:4F:10:5A
X509v3 Authority Key Identifier:
keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203535363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.0.4.0/22
Signature Algorithm: sha256WithRSAEncryption
12:48:7e:f8:0c:df:5d:2d:69:3d:ad:41:8a:d3:72:c2:63:5d:
b1:85:32:e8:1d:2e:a6:1b:18:23:03:f3:fb:54:da:2d:fa:dc:
a3:75:da:b3:ec:fc:5a:8a:66:a6:72:80:6b:81:d2:94:99:14:
ef:7c:5d:d4:aa:5f:68:ee:24:cc:3a:60:83:06:8a:25:45:44:
18:c8:23:ca:7b:92:6a:a9:22:3d:63:c1:fc:64:ff:b7:e4:c3:
1c:2f:6f:0f:28:3b:7c:9c:20:60:47:26:e4:c9:2b:5e:e1:9b:
b4:61:a8:8f:51:98:ac:8b:bc:f9:f2:60:53:93:98:d9:1f:4e:
80:3c:11:0e:06:1c:54:d7:77:8f:c8:1d:38:f1:a2:32:e0:0c:
eb:16:88:d1:af:74:8c:95:12:44:33:8b:14:3d:44:04:64:d3:
68:67:56:3a:1e:f8:25:34:7e:30:a2:00:26:c3:4f:6b:5b:3f:
0b:98:d5:49:25:85:6d:05:d6:15:7d:1d:31:bd:4a:9f:3e:2a:
3a:1b:e1:08:90:f3:0e:b5:83:3d:69:8f:a1:bc:ce:61:0f:17:
d6:e4:ab:b0:13:62:06:bc:7b:d7:1b:96:14:39:59:35:22:ac:
c6:b6:b7:f1:9b:8b:9e:1d:6e:a7:f5:4c:77:12:e8:8e:fd:be:
78:b2:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:42 2026 by rpki-client