Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/323430303a666230303a3a2f33322d3438203d3e203535363730.roa
File: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (raw, json)
Hash identifier: 5yQGaqzvYD+DZWUeWhnPkUryDtMNua4qyKlRjvSoEZU=
Subject key identifier: 54:07:C4:3A:40:84:4F:25:C7:B4:F1:D4:92:9E:A0:85:90:E1:DC:7E
Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial: 3A26C31AC517441C36ED854177257AA42FADEC3F
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/323430303a666230303a3a2f33322d3438203d3e203535363730.roa
Signing time: Tue 21 Apr 2026 02:00:02 +0000
ROA not before: Tue 21 Apr 2026 01:55:02 +0000
ROA not after: Tue 20 Apr 2027 02:00:02 +0000
asID: 55670
IP address blocks: 2400:fb00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:26:c3:1a:c5:17:44:1c:36:ed:85:41:77:25:7a:a4:2f:ad:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Validity
Not Before: Apr 21 01:55:02 2026 GMT
Not After : Apr 20 02:00:02 2027 GMT
Subject: CN=5407C43A40844F25C7B4F1D4929EA08590E1DC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:4e:e3:de:e5:eb:63:84:5e:92:97:80:15:
54:1a:a7:35:b9:f1:7d:f5:d3:d4:78:74:98:be:a4:
a2:e1:23:eb:83:f1:d3:20:1e:44:50:98:34:92:45:
85:ac:51:90:50:2c:4a:17:87:24:00:05:ff:c3:7f:
ce:ce:a8:da:44:b2:b3:aa:ca:3f:bb:42:44:2e:28:
1b:a6:8b:52:02:85:08:dc:a2:62:31:aa:d6:5f:9c:
13:f1:88:b8:a8:9f:98:39:3f:92:49:80:d2:0d:10:
96:fa:1c:5a:1b:c5:db:73:89:4d:9b:1b:57:99:cf:
b3:f0:eb:e5:c6:49:e9:2c:ff:61:ca:09:08:30:61:
db:5f:28:ad:46:34:39:9b:0f:dd:60:41:6e:8b:87:
ff:10:33:ba:1f:cb:ca:d9:e1:2c:96:37:fa:e2:de:
6e:91:45:8f:f3:94:a1:da:e4:5d:7d:0f:6f:c4:a0:
b0:c1:7a:8a:c3:42:88:28:94:71:4e:53:2c:0f:df:
43:b2:e4:e2:0b:5a:ae:c0:16:ad:cd:a5:2c:fe:2d:
c1:ca:e1:99:af:e7:ea:e8:e7:83:49:64:5f:3e:fb:
03:48:fe:89:b3:78:ea:74:54:2a:a5:7a:bf:97:4b:
8c:a0:a9:15:25:be:a6:19:e0:e1:63:93:fd:08:08:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:C4:3A:40:84:4F:25:C7:B4:F1:D4:92:9E:A0:85:90:E1:DC:7E
X509v3 Authority Key Identifier:
keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/323430303a666230303a3a2f33322d3438203d3e203535363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
bf:f8:93:e7:f9:40:cf:d0:6d:fb:cd:1d:59:41:c2:f8:59:a2:
db:52:82:16:cd:06:e8:9c:8d:f6:d9:a9:ce:ee:f1:d3:4f:32:
e9:4f:5d:65:2c:af:f4:0b:ca:19:3e:8e:75:50:38:c6:55:c4:
f4:17:2a:e7:92:7c:aa:18:c0:3f:9d:a5:bd:7e:83:f5:8f:4a:
b1:af:a0:42:6f:fd:7a:b6:c9:c5:f3:50:94:44:fd:80:ca:31:
4a:3a:ee:96:7b:7f:af:34:d6:57:7c:65:e4:59:1f:9c:06:03:
86:a9:e6:bd:b4:f6:70:e1:63:87:a3:32:51:f6:8e:2d:b6:32:
b4:7c:89:8b:45:64:b2:5f:31:7c:32:cb:f7:18:4c:69:ce:fc:
50:8a:3b:9e:b5:2a:c4:8b:f2:81:50:84:6b:b6:ed:0d:87:22:
f1:ac:b2:58:bc:d0:9b:bc:b4:c2:7a:c7:1d:a0:f8:53:d8:b6:
e5:f5:f5:04:8a:6d:6b:5e:88:7c:f0:94:b6:fe:13:d1:f4:27:
f4:9f:ca:ba:d6:03:b4:3f:7f:c1:85:41:3b:55:c5:a6:33:15:
f3:38:aa:9d:29:64:ba:dc:c6:30:1e:00:7e:19:53:47:16:11:
c3:d3:00:ad:96:40:fb:b4:93:ca:73:0e:47:fc:d8:a4:be:ce:
35:2a:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:14:08 2026 by rpki-client