Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38342e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38342e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: of5IeefIpB2QlYJYJSWlyeyBbAqN+1ZYSQO2IKxsb4U=
Subject key identifier: 07:3B:E5:88:70:7F:2C:4E:DB:A3:45:81:2A:9F:A1:80:C1:77:7D:DF
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 0FA6CCC449D7BFC8F14DE046B09CFFEC7C9FC3B6
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38342e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:49 +0000
ROA not before: Sat 18 Apr 2026 11:57:49 +0000
ROA not after: Sat 17 Apr 2027 12:02:49 +0000
asID: 17671
IP address blocks: 114.199.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a6:cc:c4:49:d7:bf:c8:f1:4d:e0:46:b0:9c:ff:ec:7c:9f:c3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:49 2026 GMT
Not After : Apr 17 12:02:49 2027 GMT
Subject: CN=073BE588707F2C4EDBA345812A9FA180C1777DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:0d:0d:00:c6:ef:df:ee:d3:89:a0:cb:c1:
ea:25:2c:96:30:f7:67:ce:2c:8c:39:e6:6f:34:be:
58:b8:35:e3:8c:d1:5a:f3:ef:11:c1:a8:29:e5:7c:
82:e8:87:c7:ed:42:ed:34:17:cd:61:3a:b3:dd:da:
9f:75:44:57:ea:5c:6d:2f:bd:d4:5c:9e:88:5d:9f:
40:7e:87:6d:cc:25:00:92:8b:15:bc:fe:0d:b0:b7:
29:2b:92:17:5a:b1:58:57:69:46:86:27:1c:ca:f8:
be:22:17:a3:55:11:62:98:1c:03:02:a2:00:af:3b:
67:6d:94:f5:58:5f:81:fd:df:ee:ca:de:87:e8:16:
c1:3c:da:3d:ce:91:57:fa:69:d6:88:89:86:5f:f6:
3c:fe:6c:eb:91:f2:0e:75:bf:f0:9a:bc:2e:7b:2d:
a6:eb:3f:04:e3:29:9c:c5:65:79:59:00:2d:2a:05:
02:1c:d5:7c:b7:e4:95:8e:60:e4:91:e7:7a:58:da:
96:a5:f7:e5:8d:38:92:42:46:48:f8:cf:6c:e2:55:
f2:62:09:0f:88:37:57:80:06:bd:68:6b:d5:04:e0:
a6:14:c9:19:37:c6:c9:46:dc:65:d1:68:eb:b6:20:
97:fe:2f:33:6e:5b:38:c6:12:5a:71:49:51:c1:8f:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:E5:88:70:7F:2C:4E:DB:A3:45:81:2A:9F:A1:80:C1:77:7D:DF
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38342e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.84.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fd:84:0a:61:22:08:a6:8e:11:0c:a8:72:c3:c7:69:bd:4e:
f0:37:8c:60:8c:7f:05:5d:44:11:18:ad:89:c8:0f:1b:3b:7b:
20:e9:bb:88:35:3d:01:7f:26:24:02:27:8f:70:b6:b6:bd:4f:
28:54:a9:e1:81:d2:1e:ce:16:6b:14:20:8e:48:82:2f:d7:2f:
42:7f:13:b7:4d:05:49:b2:28:69:6d:23:67:a4:c9:be:d1:bd:
08:dc:46:5f:5e:ff:23:ad:8a:86:7b:76:65:b5:02:b2:93:cd:
4e:0b:3d:8f:5a:0e:b7:65:4e:28:c6:73:93:5f:48:65:1a:46:
20:cc:aa:05:16:84:0a:88:f6:2d:93:37:a2:ce:c3:44:a8:05:
a0:68:79:70:9b:b3:61:0e:04:93:ad:f5:43:31:86:5a:d6:d0:
b2:62:86:e8:b5:33:45:b0:ab:f0:4b:d1:7c:59:c1:30:e2:e4:
47:17:da:f1:c4:d9:19:b2:6b:61:7f:45:96:80:3c:f5:ac:3a:
84:d0:ac:c1:08:e4:ab:61:c9:e7:86:f8:65:0b:ce:37:fe:d0:
5f:ba:4d:ef:8a:75:2c:ac:2d:c6:74:ca:d3:68:e8:8e:b9:0f:
7a:1c:86:26:0a:8e:97:bd:07:10:c3:2c:75:20:b2:22:c6:3e:
44:a9:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:11 2026 by rpki-client