Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38312e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38312e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: kE9DjzKeE8hyD8nwOklBzZkFtKc4COxa087KKfPp4c0=
Subject key identifier: 99:2E:B5:CD:C7:84:C7:BC:85:BC:9D:35:42:51:46:FB:2A:B8:DD:73
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 43DCA4FDE44166AEB54FAB704EA3C29613482C58
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38312e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 114.199.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:dc:a4:fd:e4:41:66:ae:b5:4f:ab:70:4e:a3:c2:96:13:48:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=992EB5CDC784C7BC85BC9D35425146FB2AB8DD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:35:09:3a:9b:41:8b:26:af:e8:9d:1c:dc:
73:4b:3f:61:1c:0a:3c:d4:20:50:4e:b1:d7:00:7f:
6b:2e:40:be:9f:2f:d5:56:87:89:bd:9a:13:be:2d:
55:e9:7f:99:57:f3:d7:3d:a8:d0:7d:a2:0a:74:5f:
86:27:12:66:0e:96:1e:bb:f9:29:43:e1:22:45:be:
ae:ac:6b:79:74:22:2d:f2:47:05:6a:de:53:65:7c:
7d:fd:3b:7c:61:a7:67:ea:57:0b:37:76:97:d3:24:
e1:6b:ef:97:80:2b:e5:b1:d5:4d:3e:af:d5:3f:84:
4a:f4:98:4f:52:c1:54:c7:23:44:bd:43:78:e2:e1:
0f:cc:a6:00:88:f8:fd:13:18:9c:6b:74:0e:86:85:
47:be:3c:1d:bf:5c:7b:6f:a2:e1:63:da:b0:35:b9:
3c:b4:90:ed:e8:f2:ed:ed:44:d8:20:9c:75:08:17:
da:66:7e:04:99:4e:74:d9:fa:9e:16:ba:f4:62:66:
f2:34:56:f8:d2:02:5c:ed:d9:14:ad:82:2b:97:b6:
27:70:85:48:b9:aa:c6:d9:6d:15:f2:63:07:d8:73:
11:76:41:4d:38:22:af:70:fd:86:38:58:58:b9:4d:
78:4d:06:76:30:2d:6e:45:43:01:17:c9:80:38:43:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:B5:CD:C7:84:C7:BC:85:BC:9D:35:42:51:46:FB:2A:B8:DD:73
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38312e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b9:53:eb:8f:9a:51:6a:2a:4f:ff:ea:e4:c2:b0:16:90:a7:
41:26:7c:5b:da:9f:1e:8d:62:8c:f0:15:98:ec:7a:67:38:b3:
48:8c:72:91:31:72:6d:59:99:df:c6:5f:99:2c:d5:e4:1b:0c:
26:21:1c:28:da:ba:0d:47:a7:0f:d7:54:48:48:41:c1:7b:23:
62:c3:ff:63:13:8e:40:3b:30:d4:a9:42:fb:49:a1:90:60:f8:
21:c1:c4:1a:20:db:ee:13:38:51:ce:c9:d4:a6:29:8e:9d:d1:
6d:c2:bf:fd:d5:63:cb:29:03:dc:b4:43:a0:d2:99:ca:73:fe:
8a:0b:95:d4:6d:99:83:b7:c3:1f:79:54:cc:68:ee:61:ff:71:
41:cb:4a:38:ef:8a:5b:b3:5e:17:79:93:29:84:e0:00:5a:af:
fa:a3:83:04:8d:66:fa:eb:40:2d:d8:3a:a2:40:87:bd:3e:51:
63:09:b2:25:df:c4:ae:3b:73:2c:6a:18:71:8e:fe:57:f0:fc:
61:5a:32:f7:b8:1c:eb:53:c6:42:f4:c7:f4:c0:35:34:1f:93:
d8:9f:5e:e7:9d:4f:05:33:e6:c3:17:a8:b3:2f:88:84:a2:85:
83:c8:66:8f:a6:34:75:bb:1c:a4:90:0b:f9:3e:d9:09:31:6d:
cc:5f:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:10 2026 by rpki-client