Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38372e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: 7ycjFF7mnnxBhHFw+4rL9ziM33pRGqE7h3mqJ00/NIQ=
Subject key identifier: 30:F6:52:F2:24:C8:37:1A:68:B5:8A:5D:6D:89:E5:1D:79:9D:AD:B9
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 5B1B6D4ACBED158B01D8A8AAC387536DEFC76498
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:47 +0000
ROA not before: Sat 18 Apr 2026 11:57:47 +0000
ROA not after: Sat 17 Apr 2027 12:02:47 +0000
asID: 17671
IP address blocks: 114.199.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1b:6d:4a:cb:ed:15:8b:01:d8:a8:aa:c3:87:53:6d:ef:c7:64:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:47 2026 GMT
Not After : Apr 17 12:02:47 2027 GMT
Subject: CN=30F652F224C8371A68B58A5D6D89E51D799DADB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:62:12:df:e3:7a:5f:0a:f2:c7:ca:48:44:
5a:3a:ab:0f:ea:00:af:9f:cc:e1:79:2f:04:79:f5:
54:60:10:ff:25:cb:ed:a2:03:b3:0f:29:69:47:6e:
f7:22:c9:aa:29:5d:a6:1a:a0:2d:60:d9:5e:8f:23:
cd:67:d9:e6:4c:8b:30:40:60:aa:ec:f6:59:e4:a7:
9b:3f:91:80:ef:af:30:09:51:80:b2:a6:6e:8b:bb:
00:89:49:78:89:c6:94:e5:62:87:b6:37:08:66:df:
36:aa:31:34:65:ec:aa:5a:3e:82:3d:6d:6e:20:50:
24:d2:f7:84:4a:65:12:19:7a:b3:5c:79:2d:56:d4:
29:39:19:bb:eb:95:3b:08:df:f7:0a:51:80:5b:b0:
7a:57:a3:d8:5d:06:87:c3:30:12:11:31:c9:27:e1:
a0:61:44:40:81:14:d3:3b:ad:64:86:ef:e7:8b:53:
62:8d:d5:f8:a2:32:c6:bc:97:62:e3:17:ea:44:cf:
b9:d9:06:7f:d3:a8:d6:7f:22:53:e9:e9:27:44:11:
70:c0:d3:3e:23:06:e6:13:16:de:f9:bd:29:3b:6f:
f0:62:61:ab:5a:53:7a:9b:a4:5c:4a:fd:f8:a0:2f:
0c:fa:86:e2:79:fb:75:2d:10:73:5b:c0:04:16:cd:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:52:F2:24:C8:37:1A:68:B5:8A:5D:6D:89:E5:1D:79:9D:AD:B9
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:63:7f:07:c4:2d:66:99:94:21:4a:fc:1e:46:c8:28:c6:16:
14:f4:9d:9d:db:29:a1:e4:9b:59:4e:9b:b2:b0:ed:0e:b5:70:
4e:4e:41:81:7f:ee:b5:37:68:ec:10:ce:ec:06:12:c0:79:5c:
92:9c:1e:02:eb:9a:98:f3:9d:39:c3:fa:b3:30:5b:52:58:4c:
f2:2d:8a:01:64:a0:8b:ec:cf:6c:91:f9:8f:8b:a0:e1:4d:32:
a6:c6:78:05:e4:57:75:48:0b:20:a0:e3:68:a0:9c:e6:fe:be:
31:2e:7e:8f:5a:34:6d:a8:a2:e9:8b:27:ef:2f:87:b5:2a:49:
0b:3d:62:f6:2c:9f:ae:3b:6d:3e:85:e4:f0:c0:ac:22:01:40:
fa:9c:ac:f6:e5:55:7b:fe:d4:b5:63:c3:15:63:2e:0d:30:da:
05:86:21:e4:b9:0f:49:5f:08:b3:ea:de:2c:d5:fd:d5:3d:c1:
7e:bf:b7:fb:8b:7a:09:97:4d:88:f1:78:6c:06:6e:e6:64:86:
6e:15:ff:6c:6e:5d:df:60:ed:7c:78:4e:71:f7:fe:46:bd:60:
33:3b:fa:84:9d:3a:99:c8:f1:02:ac:1a:66:31:0b:47:5f:20:
36:86:0d:21:de:7a:06:70:78:cb:5d:41:24:9c:f7:c5:35:a0:
36:b4:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:02 2026 by rpki-client