Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38332e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: DZVr5TR+R4i1+LPxCrJw5xCdZMhiQr/X8vCO/WNmdHY=
Subject key identifier: 31:A9:BD:10:A7:C2:80:32:18:5D:7A:C3:A0:09:24:69:21:D6:56:F2
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 382E096760FA834B1594FBC90753C0E8DD7B4F62
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 114.199.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2e:09:67:60:fa:83:4b:15:94:fb:c9:07:53:c0:e8:dd:7b:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=31A9BD10A7C28032185D7AC3A009246921D656F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:c2:6b:b4:f0:e8:8d:0a:3a:af:7e:7b:40:
ac:eb:87:37:b1:c1:4a:b5:3c:c5:ff:1b:c0:e4:05:
64:9f:29:4b:2e:79:5b:4b:45:0a:c5:fa:a9:f1:50:
f7:d3:c4:68:24:58:fc:61:db:8d:46:f0:50:b3:c5:
2d:d7:19:95:55:62:3d:63:1e:a6:44:d1:b0:3a:4d:
a2:90:f4:08:1f:93:b5:72:76:43:91:93:c1:96:5e:
83:c3:8a:e4:fe:73:3b:08:e3:d3:4a:63:d1:48:28:
69:3f:29:7d:99:87:8d:96:4a:c5:94:b5:93:80:97:
2b:a4:40:85:12:c9:cb:eb:cf:70:07:d4:84:ce:2c:
7d:70:7c:6a:ae:e3:06:3e:8f:75:37:0f:41:47:c0:
37:36:d7:62:c4:4b:ae:75:ee:4e:26:11:cd:4a:87:
c7:41:43:e1:47:a3:ef:13:6f:44:0c:d1:83:0b:62:
f8:3d:e3:9a:62:5d:32:b3:ce:04:7d:7d:81:6b:94:
c8:8c:d0:f8:28:8f:bd:30:9d:15:bd:43:50:b6:f1:
73:8a:cb:49:61:2c:f5:ca:20:6e:3f:6d:dc:e0:33:
e0:3a:b3:8d:22:aa:82:d8:53:d0:3d:5c:5e:88:46:
7c:c7:d9:f2:5e:99:95:5e:13:fb:66:a7:6d:cf:24:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A9:BD:10:A7:C2:80:32:18:5D:7A:C3:A0:09:24:69:21:D6:56:F2
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.83.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ee:81:3f:ae:9e:0f:a8:a5:52:ce:ef:39:3b:23:79:4f:49:
56:aa:9c:6b:99:b2:08:0f:dd:e6:3e:0e:01:1a:8e:96:99:f9:
e0:35:16:44:41:85:6f:35:8a:bd:02:ba:33:fb:cd:73:6b:09:
08:ae:e1:49:bd:d3:76:bc:65:06:09:14:2d:7c:a1:90:b1:5e:
66:a8:43:5e:c7:da:9a:33:11:da:25:cd:fb:b2:0d:40:6d:96:
0c:18:94:07:26:c2:96:f3:b1:fd:4c:d4:81:14:89:85:f9:7e:
e4:21:af:1d:34:27:97:d2:5f:fb:d3:7f:cf:11:6e:a8:e3:fa:
f6:58:bc:dd:fc:fb:f3:11:e6:27:4e:ee:5d:fd:61:e5:38:02:
16:82:be:71:4b:da:5b:a5:3a:de:3b:7d:3a:84:10:b4:10:ab:
e4:7c:8c:be:16:c9:12:82:e3:de:43:39:c2:97:ad:82:e0:72:
42:ab:cd:44:90:3d:9e:93:57:27:dc:60:1b:12:56:c7:2d:3e:
ca:ab:a9:ea:41:e8:f5:7c:22:09:9c:fb:15:48:9c:eb:f6:8d:
0d:7a:4f:dd:2e:2c:00:b2:16:f4:32:03:37:d4:be:f4:21:a5:
1f:c6:5d:ca:cc:33:fc:c0:63:75:ab:bc:9a:6c:b7:02:32:a2:
51:56:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:11 2026 by rpki-client