Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38322e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: D84q77Gx0XvYglnLMeR+Yx7k+Npq7qoChdSIFmhfRwg=
Subject key identifier: F6:40:C4:D9:18:EE:6B:9D:D3:62:0E:B7:4A:B7:0D:6B:4A:04:82:02
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 038ECD1569B456BE8347B5F4E232EFFBED37E8BE
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:47 +0000
ROA not before: Sat 18 Apr 2026 11:57:47 +0000
ROA not after: Sat 17 Apr 2027 12:02:47 +0000
asID: 17671
IP address blocks: 114.199.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8e:cd:15:69:b4:56:be:83:47:b5:f4:e2:32:ef:fb:ed:37:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:47 2026 GMT
Not After : Apr 17 12:02:47 2027 GMT
Subject: CN=F640C4D918EE6B9DD3620EB74AB70D6B4A048202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:44:1a:37:a9:45:e1:5c:08:6c:73:5b:0b:
fe:ab:60:95:56:47:40:a2:96:5d:1b:c5:7f:bd:a7:
a3:92:ee:c6:84:38:2c:0a:07:6e:7e:bb:94:51:91:
0b:e0:dc:f9:e6:38:8c:0e:fb:f0:77:70:49:59:c3:
f8:93:82:1a:f8:9a:9c:43:a3:a1:e3:81:35:f3:66:
a5:87:4d:75:47:f4:69:23:f6:d5:cc:90:5a:d2:9e:
13:06:2e:8c:65:1a:10:41:06:6c:b9:2a:1c:99:dd:
e4:68:11:f2:ad:b0:89:4e:26:07:59:aa:46:fe:5b:
c5:a0:fb:37:aa:2d:b3:ad:57:b3:b7:1c:5c:da:4a:
2e:26:76:3c:eb:08:d3:ad:d8:47:de:6f:3f:58:a6:
77:70:4f:fa:9b:db:71:dd:ab:a0:c8:f6:67:b1:57:
a5:c2:4f:ed:95:8b:71:80:3e:11:6d:c7:65:b3:34:
ac:36:09:d6:57:66:bf:93:d7:c6:eb:6e:13:c0:a4:
42:5b:b5:3e:3a:2b:1c:79:ce:93:8c:5d:b1:31:fb:
26:9f:d1:7a:8f:d5:94:c4:6f:40:31:00:9c:43:8b:
72:4d:37:79:2e:92:eb:92:c2:fb:40:07:17:d4:ce:
fa:39:ac:00:97:de:32:d3:88:3a:5b:93:ab:77:0e:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:C4:D9:18:EE:6B:9D:D3:62:0E:B7:4A:B7:0D:6B:4A:04:82:02
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.82.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b8:91:f6:fb:be:7f:1e:33:32:31:ee:78:51:b9:bb:c2:84:
bd:86:bd:4d:a1:0b:42:5e:4f:9a:cb:59:1b:78:56:11:36:97:
ed:1d:58:bd:d1:19:1e:a7:10:ab:8a:03:2e:3f:d3:71:81:d6:
33:ce:18:fd:c9:3e:9b:76:03:7a:07:97:36:41:4f:ad:27:05:
22:80:4b:df:85:b0:5e:1d:ea:ca:69:0d:63:7e:e1:e7:6f:b4:
a5:8f:6c:ca:5e:58:c7:51:06:a9:1a:a3:42:2b:a9:60:92:c4:
7e:03:82:be:c4:56:d1:d5:49:25:c0:d6:21:71:5a:ef:78:d9:
ef:f3:52:55:ea:9a:2e:d1:b3:fb:7a:da:7f:ae:08:9e:44:50:
17:03:d7:d7:9c:77:7a:78:8a:78:3f:12:0d:21:97:00:70:45:
8d:d1:70:0b:d2:e1:d3:ee:83:d1:7e:aa:57:7c:a5:e3:67:b3:
4e:80:59:f4:9a:a0:84:38:b2:f8:16:01:4d:51:d3:2f:b8:6f:
a3:f2:15:8d:0f:ca:3d:43:b9:28:da:ca:30:c2:bb:e7:fc:46:
b0:cf:44:ee:3e:5a:c7:83:a7:2e:99:49:41:82:3b:98:8c:2c:
68:c0:ff:c9:31:39:5b:98:e5:32:18:73:ce:2f:42:4a:fc:27:
96:02:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:09 2026 by rpki-client