Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38362e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: YNFfwpMe0T9X6Hvu3VoBsI5U4H+P1+ahs+KFXw4Mp4E=
Subject key identifier: CB:CA:11:D3:BF:7C:CD:8A:D9:C9:8E:84:08:EA:82:97:0A:63:2D:0F
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 78B675973A6A4EC11A4337D0E563369FC7BD96C8
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:49 +0000
ROA not before: Sat 18 Apr 2026 11:57:49 +0000
ROA not after: Sat 17 Apr 2027 12:02:49 +0000
asID: 17671
IP address blocks: 114.199.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b6:75:97:3a:6a:4e:c1:1a:43:37:d0:e5:63:36:9f:c7:bd:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:49 2026 GMT
Not After : Apr 17 12:02:49 2027 GMT
Subject: CN=CBCA11D3BF7CCD8AD9C98E8408EA82970A632D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:44:78:f0:9c:15:d1:46:94:f2:69:68:80:
39:59:ee:86:b2:42:00:5b:59:88:c5:09:fe:99:87:
ec:53:53:a7:4b:0a:b9:41:82:a4:ec:59:50:4d:a8:
2d:e8:7c:60:68:3c:8d:c5:24:69:1b:16:12:58:bc:
0d:06:34:d2:ba:a4:bf:cb:6a:c5:93:00:9e:0b:8d:
7b:81:11:5c:d0:8f:fa:43:7b:bc:a0:34:5c:63:a0:
42:a6:b5:59:95:15:d9:e8:fb:36:b2:0b:19:ae:a2:
26:7c:63:f8:bf:68:17:3d:ec:01:e8:18:94:84:f0:
a2:d3:45:74:5a:f6:a2:21:ec:a5:99:23:51:5c:b3:
1e:32:57:68:f6:dd:d1:0b:db:6d:0a:78:e2:5e:3e:
58:1c:c1:78:94:15:06:6b:1f:24:f2:e8:53:aa:12:
3e:f0:86:86:7a:6c:6c:cd:a2:69:32:5a:9b:a5:74:
5c:5f:15:d8:69:9c:c3:d1:ea:c8:51:cd:d6:b4:e4:
fa:8d:17:d0:d1:97:c3:d8:6a:1c:ff:83:87:1e:91:
d9:28:82:d5:73:f4:c7:a2:f9:fe:4e:75:0a:a6:e2:
a2:07:32:f9:23:60:78:98:36:22:cd:03:63:b2:39:
84:4f:fe:a1:5a:72:22:59:b8:b0:a1:a9:5b:14:9a:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:11:D3:BF:7C:CD:8A:D9:C9:8E:84:08:EA:82:97:0A:63:2D:0F
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0f:9d:3b:a9:50:7d:45:52:e7:d2:39:f0:6c:11:cf:56:8a:
e1:8f:c4:3d:47:91:1e:8b:cf:f7:c2:79:95:47:e1:a4:b7:9b:
33:63:27:d9:9b:d9:db:e8:be:d3:f6:5b:ac:0a:89:09:83:bb:
36:fe:b2:29:97:16:f4:0c:da:9d:e3:ab:3a:99:b6:7c:1c:c8:
a9:5a:c4:f0:2c:2b:aa:be:73:53:cb:48:9d:5c:23:24:a0:bb:
8e:3b:12:c1:9c:05:44:f9:4f:03:1b:72:e2:7d:51:91:68:7e:
bd:d4:f8:6f:2c:d5:8c:ce:a1:2c:07:43:17:8f:69:3e:45:f6:
b0:d6:dd:60:42:52:ed:3e:13:03:b0:ab:09:ba:e4:6e:6d:2b:
7d:69:23:e2:b6:7d:f5:f1:12:30:65:40:da:dd:a6:9d:1e:ba:
00:c7:e2:ff:65:3a:06:90:e9:57:f1:57:e1:76:86:62:20:51:
47:08:46:2b:0a:80:8d:54:88:cc:99:9e:5c:ed:53:9b:c4:b9:
eb:1e:16:3e:5e:5e:ea:f1:75:7a:10:ec:49:74:87:35:63:ec:
36:47:1e:26:0d:be:43:81:23:02:61:55:20:a7:2b:5d:4a:26:
cd:a2:47:a5:76:4a:68:fd:2c:d0:5c:66:77:98:e6:10:35:90:
14:f9:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:10 2026 by rpki-client