Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32302d3234203d3e203137363731.roa
File: 3131342e3139392e38302e302f32302d3234203d3e203137363731.roa (raw, json)
Hash identifier: lWEZcY4m37wDPwkrkpE1o/ELSVN4xTKPb3uTPSv2TBQ=
Subject key identifier: D1:A3:8E:7E:E4:58:F9:5E:BA:56:C2:E3:38:72:37:95:72:0E:D1:17
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 5635FB977A55BAA986B35FDC18E681FA6929EAA6
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32302d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 114.199.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:35:fb:97:7a:55:ba:a9:86:b3:5f:dc:18:e6:81:fa:69:29:ea:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=D1A38E7EE458F95EBA56C2E338723795720ED117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:d5:22:f8:2c:04:d7:8c:5c:51:5d:2a:b3:
6e:47:23:b6:73:5f:1d:fe:e3:26:63:8f:67:08:5c:
a0:0c:c0:3c:df:49:1c:45:98:8c:83:28:a7:25:10:
64:68:55:63:f5:9d:7b:8e:fa:77:2a:88:ae:de:77:
14:9b:76:86:59:db:71:02:c3:99:0d:9e:89:42:38:
ef:dc:48:bf:8d:77:ed:2e:0e:95:99:74:da:9a:07:
db:7c:44:a7:fb:b7:90:42:15:79:70:79:5f:49:4a:
49:62:a1:e8:6f:c4:b2:e4:71:f8:d9:1a:c1:ec:81:
bc:ab:c9:2c:45:59:94:7c:fe:a6:4e:48:64:e2:fa:
28:c5:4b:1d:3e:a1:8a:25:f3:d4:3b:f0:04:c9:b8:
79:2b:96:73:4b:34:67:54:46:2d:d8:0d:5c:3e:7e:
a4:f3:44:e3:c5:c4:5a:57:0c:ab:f5:54:11:5d:04:
63:fe:69:f5:7a:76:f2:79:5b:f0:74:56:5c:6f:ad:
9f:2c:37:a8:40:33:db:90:6a:21:ec:7e:64:1c:e6:
7f:77:04:84:d2:fa:bf:e2:eb:a8:fa:33:67:56:e0:
f3:36:21:10:d6:59:23:25:0c:f8:41:ff:f4:05:bd:
4c:95:4b:bf:87:f0:9a:20:03:f8:3a:2a:7c:99:3f:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A3:8E:7E:E4:58:F9:5E:BA:56:C2:E3:38:72:37:95:72:0E:D1:17
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32302d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.80.0/20
Signature Algorithm: sha256WithRSAEncryption
80:ae:2e:6d:9e:f2:22:43:5f:2b:59:34:19:bd:ff:2c:b8:54:
16:48:7c:11:80:26:c7:ee:91:86:ab:66:86:b5:d7:fa:08:3a:
60:52:34:6c:8e:12:60:7a:9e:5f:df:33:9d:6f:20:65:1b:f9:
17:30:d5:c2:a7:f8:10:18:19:ab:fe:77:40:55:8b:75:7b:ed:
24:41:55:d3:dc:a6:7d:04:0d:d9:13:93:b7:d7:35:3b:d5:23:
51:5b:7c:1c:96:f0:90:13:22:02:3a:b7:f6:a7:15:d8:e9:bb:
3a:d0:7f:67:28:2a:13:6a:f1:1d:79:9b:7a:7e:20:fa:77:d5:
c4:7b:91:9d:18:5e:51:56:eb:29:b3:e7:f4:4d:26:11:b9:2a:
23:e9:17:df:9b:4a:3e:8d:b6:94:d9:35:b5:3c:47:8b:a1:db:
5a:21:3c:e5:ea:13:5a:ba:4c:a2:1c:ad:dc:9f:25:cb:08:10:
21:e8:3d:32:74:9f:4f:07:bc:53:f3:c5:1d:f8:78:99:6e:f8:
f3:a4:c3:04:b5:c1:b9:81:0e:17:d9:2a:3e:53:d3:d0:c6:c8:
62:0f:7e:be:4c:4f:7b:b0:4a:32:55:59:81:64:08:4c:76:29:
bc:26:72:9b:bd:44:0a:92:98:1b:66:17:fe:c9:68:0b:f5:1f:
bd:44:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:03 2026 by rpki-client