Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38382e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: 2rSa58hCQtYE+ajz/eT55LjrZlxu6bbZoGOOOMf2lqo=
Subject key identifier: C0:44:79:E7:E5:C2:C8:F1:FC:4C:61:48:4A:89:1D:B2:86:BA:DD:D4
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 471A0BC196691F57B0E063968F5CFDF71DAC8E62
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:51 +0000
ROA not before: Sat 18 Apr 2026 11:57:51 +0000
ROA not after: Sat 17 Apr 2027 12:02:51 +0000
asID: 17671
IP address blocks: 114.199.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1a:0b:c1:96:69:1f:57:b0:e0:63:96:8f:5c:fd:f7:1d:ac:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:51 2026 GMT
Not After : Apr 17 12:02:51 2027 GMT
Subject: CN=C04479E7E5C2C8F1FC4C61484A891DB286BADDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:c6:69:5b:99:ee:2b:9e:9c:50:8c:e0:a5:
7f:fe:eb:97:ad:d6:b1:5a:a7:c7:b3:ed:28:c6:1a:
b7:61:9c:a5:d5:ce:45:ba:cf:d8:6a:d5:64:70:04:
16:9f:ec:8c:42:e8:0e:35:5b:ea:72:c3:e2:e4:f5:
55:50:c9:31:bc:dd:19:f2:d4:65:37:8d:7d:e0:22:
6a:b0:7c:5f:e0:e7:92:dc:bc:d2:22:ca:47:e4:06:
0d:ec:cc:63:6a:ee:79:e0:b3:52:cd:7c:32:fb:77:
3e:41:6a:de:e1:b7:cc:29:89:e9:cf:46:4c:3b:71:
c1:bc:c3:54:e9:16:96:ad:a9:56:21:bd:4b:96:47:
51:2d:3b:ba:f5:e0:db:16:2f:9a:04:18:c0:bf:b3:
be:5b:53:93:25:99:64:94:ef:56:b4:b3:4c:de:68:
0f:ca:b7:fb:3f:59:3f:16:a0:59:ae:90:7b:df:2d:
42:95:b6:3f:3c:6c:5a:2e:15:19:05:8a:cc:37:3a:
c6:23:be:0c:6f:b6:ae:df:04:7a:dc:f9:96:4a:f4:
89:bc:53:c1:06:b1:71:a4:97:22:e5:7b:0e:81:58:
3e:a6:99:db:7e:c1:9e:62:ae:8b:33:70:6c:69:c3:
fb:66:04:a3:68:26:58:f4:ec:45:5a:b1:90:cf:05:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:79:E7:E5:C2:C8:F1:FC:4C:61:48:4A:89:1D:B2:86:BA:DD:D4
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.88.0/24
Signature Algorithm: sha256WithRSAEncryption
44:13:73:b7:92:4c:e1:14:38:50:e7:e3:ac:ee:4a:a7:52:61:
49:dc:ee:63:92:ad:86:c1:14:56:06:e7:20:b2:88:96:d7:ef:
a8:a9:48:ec:02:bf:93:3d:cb:38:b8:77:2f:a5:f0:ca:3b:21:
d9:34:42:ca:2c:64:d8:47:2b:44:e6:63:0d:72:90:65:8f:bf:
68:ef:af:32:45:15:28:a9:90:f7:c1:00:17:a2:4e:be:a0:20:
ab:36:4a:14:ef:b6:d1:28:f9:24:08:4b:33:ab:7d:a5:a1:77:
b6:ce:23:87:77:e9:59:4f:50:81:bf:f6:3f:60:92:6e:15:51:
72:ea:3b:43:ec:b5:b7:1a:41:ec:70:45:01:a8:fe:1f:fe:47:
59:27:06:86:aa:8c:7f:83:3e:99:5e:40:9e:26:b7:c9:24:59:
64:c8:b4:51:d6:10:51:ad:33:64:c5:da:29:d0:af:e5:a6:9c:
25:b7:85:bf:e4:89:51:6e:90:db:dc:ad:c0:d8:ff:6d:fd:d6:
14:aa:41:5e:87:3a:64:95:1f:19:6e:4c:14:ca:69:13:46:9c:
d1:70:58:5d:32:8d:e9:ab:e8:58:fc:29:16:bc:01:4d:65:39:
99:55:1a:29:67:e0:fb:60:23:86:9d:35:e6:ee:1b:06:5b:00:
b4:ba:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:10 2026 by rpki-client