Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38352e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: g5Xnhm4rFyVhi0vOBuj3de51yLEKaT8IpsZud0Afeqk=
Subject key identifier: A9:36:D1:3A:93:85:AD:44:D4:98:47:A3:1F:AD:3B:0D:60:5A:D8:43
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 31ED427042392683CF2E3393315C00A4AA69DC15
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:53 +0000
ROA not before: Sat 18 Apr 2026 11:57:53 +0000
ROA not after: Sat 17 Apr 2027 12:02:53 +0000
asID: 17671
IP address blocks: 114.199.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ed:42:70:42:39:26:83:cf:2e:33:93:31:5c:00:a4:aa:69:dc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:53 2026 GMT
Not After : Apr 17 12:02:53 2027 GMT
Subject: CN=A936D13A9385AD44D49847A31FAD3B0D605AD843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:dd:ad:2c:27:78:db:df:c7:cf:36:27:03:
e8:cd:b6:55:b0:2d:64:de:fa:68:a4:5b:de:a3:c0:
f0:2d:ad:0f:c2:f8:5c:71:9c:4e:5e:c8:e6:54:2b:
27:96:a8:75:27:de:7a:38:0b:d9:96:5e:40:78:d0:
45:cd:2e:9a:ab:65:f6:f4:ce:72:a7:2a:a9:bc:de:
2e:b3:c8:fd:5a:07:bf:d6:42:b3:12:ef:f2:aa:f2:
4e:20:85:a9:c6:4b:35:2b:78:d9:06:c2:7d:55:96:
64:c9:a7:4f:ee:23:82:68:e9:fe:34:6b:64:d0:e5:
39:9e:f6:e8:46:39:41:a1:38:36:a5:fa:62:56:e7:
9a:88:cb:e0:45:2f:1a:83:aa:34:41:01:c2:04:e1:
79:df:5f:1e:00:74:08:9d:bd:bf:43:44:2d:ea:ef:
d1:72:c7:04:86:f3:4d:f0:fd:c4:b3:f8:cd:76:81:
5e:67:bb:ea:86:a3:5f:a7:c9:45:6b:46:87:17:22:
df:c1:90:3f:81:73:aa:45:1c:46:b9:da:f4:d8:0f:
34:6c:5f:45:f4:b7:0f:91:6e:76:c5:f0:86:2e:94:
7a:bd:5a:66:f2:b8:1d:a1:c9:d2:3c:87:7c:40:a4:
09:59:e6:76:f6:31:be:52:25:eb:22:8f:06:ae:7c:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:D1:3A:93:85:AD:44:D4:98:47:A3:1F:AD:3B:0D:60:5A:D8:43
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.85.0/24
Signature Algorithm: sha256WithRSAEncryption
40:39:f0:4b:06:9f:19:93:09:7a:42:ca:11:7a:63:4b:4a:c0:
d4:ba:ab:ae:46:08:96:91:62:6e:84:9f:8e:71:c2:88:0e:ff:
87:66:2c:e3:f5:c9:b1:d6:9f:e4:77:9a:5a:37:5b:75:4e:a1:
a9:45:67:54:67:d8:b6:94:f0:2a:3c:69:0a:e4:20:0f:50:ac:
52:1f:00:9c:08:d1:76:b1:6c:a0:98:aa:d9:71:45:94:94:b4:
a2:1a:cc:ae:0c:14:58:27:49:f4:96:6a:1e:c9:55:2a:bf:54:
bc:92:ad:0e:83:1d:1d:be:7c:9d:10:bf:11:87:2c:17:35:e4:
99:4f:a8:c5:7d:c5:3e:0b:75:6d:28:09:f4:9c:d8:f3:12:79:
65:2b:98:17:cf:25:12:cb:ef:e9:3d:ad:c9:15:22:fc:9e:44:
c4:00:72:39:37:8f:49:78:72:df:c5:af:2d:ad:49:f5:af:f6:
40:b6:83:8e:0b:c1:90:2e:71:16:42:b4:ee:d5:ef:6c:0c:2e:
d7:b7:22:fb:32:2d:c2:78:2c:95:94:3a:8a:4c:06:e9:43:c0:
48:bd:63:23:7b:ed:54:75:79:2e:a3:d8:7f:58:c4:92:6b:94:
b3:f7:88:59:55:2d:6b:46:74:da:f6:98:0d:61:fd:22:3b:34:
ee:07:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:11 2026 by rpki-client