Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38302e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: XOE3Uvf3PAm4IHNPZ6RbCMrxT4kzQ72vPuGV6FBVrCU=
Subject key identifier: 3A:C3:37:CD:9A:2F:E5:98:5E:4B:21:20:36:DC:43:A2:E6:77:4E:B6
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 09341BD1BECB10EB47A12D0D804DF85B3BF73FDA
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:53 +0000
ROA not before: Sat 18 Apr 2026 11:57:53 +0000
ROA not after: Sat 17 Apr 2027 12:02:53 +0000
asID: 17671
IP address blocks: 114.199.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:34:1b:d1:be:cb:10:eb:47:a1:2d:0d:80:4d:f8:5b:3b:f7:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:53 2026 GMT
Not After : Apr 17 12:02:53 2027 GMT
Subject: CN=3AC337CD9A2FE5985E4B212036DC43A2E6774EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:01:20:6b:c6:a5:cc:ba:8c:89:df:3c:84:
82:65:f0:75:47:6c:e5:9b:20:ee:ba:00:01:9a:d1:
91:82:b3:fa:0f:87:9d:41:b8:56:c4:e2:c6:ba:71:
8a:d8:12:30:24:33:31:23:bb:54:75:17:ae:18:3b:
c1:f1:0d:31:19:13:a0:72:5b:bb:a3:fa:37:a3:c2:
df:74:85:43:81:b6:3a:4a:31:8d:63:02:1b:c6:e8:
ae:0f:80:78:71:38:1d:78:36:13:6c:4c:36:3a:10:
d8:43:79:8c:f0:20:09:c8:df:1e:dc:19:60:3f:a8:
c8:bb:7e:90:f5:92:17:e6:b9:93:e2:a8:cc:55:42:
70:a1:79:bc:04:78:dc:02:ac:f0:99:5b:84:68:23:
b2:72:b4:a9:ab:15:1c:ed:5f:cd:15:b3:7b:dc:c8:
1f:7b:14:5d:e2:d8:4e:7f:e1:9b:a9:c8:d1:cb:50:
f3:e9:fe:32:3e:9a:f0:60:02:00:2a:da:7d:0b:53:
88:f8:51:a2:6e:42:ee:70:61:37:f3:c8:e9:7d:b8:
1c:86:2a:0e:19:83:17:58:a6:40:30:a8:2a:39:01:
ee:93:18:0d:6b:c4:2f:5e:e8:fd:de:7c:12:3e:fb:
66:7b:73:de:3a:1e:83:7c:e2:7b:64:2a:38:10:2f:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:37:CD:9A:2F:E5:98:5E:4B:21:20:36:DC:43:A2:E6:77:4E:B6
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.80.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:4b:95:76:ab:82:b6:74:ca:a6:bc:78:9c:28:3a:96:f5:74:
b5:29:70:5e:f6:a4:db:bc:45:a9:fe:2f:be:19:ad:3d:f1:f2:
d6:92:f0:6c:56:4a:3c:f7:8d:60:e5:fb:69:5c:61:ce:d8:c2:
cb:89:94:4a:23:5c:13:31:7f:c1:2a:c1:02:5a:95:f6:ff:a4:
12:4f:f8:98:cf:05:ae:38:7e:9f:44:b4:91:9b:6e:29:cd:8a:
f3:95:72:4c:19:d8:c1:92:39:02:e2:5d:10:50:51:28:43:79:
1f:b9:c8:f8:c0:fe:da:51:56:ed:31:d0:63:d5:d9:bc:f7:e9:
a7:15:59:ad:0e:49:9e:d3:c0:68:10:ae:f0:65:d7:e5:3b:30:
05:8d:3a:5f:30:5f:54:81:3f:82:9e:75:2c:10:a0:17:d0:43:
b0:49:29:e6:29:c2:43:66:a1:a6:c0:a2:61:bf:4c:af:bb:ef:
60:02:26:25:f8:ad:82:2e:b1:84:9b:44:2f:f4:45:94:02:89:
28:20:ff:42:14:69:cb:98:fc:74:9d:e7:29:80:cf:11:91:2d:
09:83:6d:89:f2:f7:00:5f:7d:50:6d:e4:5c:85:a2:73:ca:6e:
d6:a3:fc:2e:c4:fa:ff:eb:38:8e:e0:40:36:b4:4b:ee:df:53:
b6:67:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:02 2026 by rpki-client