Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38392e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38392e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: srEFTjLJIexLXcMF8eHzVndqSw4+KRnpKJBmU8GonRc=
Subject key identifier: 01:A5:C2:2A:ED:8F:68:5B:19:46:97:97:AA:9D:47:B8:79:79:7A:10
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 1FE34EF5B4C2A97ADBCBB8473C0EE9C6D2F7D319
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38392e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:52 +0000
ROA not before: Sat 18 Apr 2026 11:57:52 +0000
ROA not after: Sat 17 Apr 2027 12:02:52 +0000
asID: 17671
IP address blocks: 114.199.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e3:4e:f5:b4:c2:a9:7a:db:cb:b8:47:3c:0e:e9:c6:d2:f7:d3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:52 2026 GMT
Not After : Apr 17 12:02:52 2027 GMT
Subject: CN=01A5C22AED8F685B19469797AA9D47B879797A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:7a:c6:50:ab:05:d6:27:66:c7:a0:f3:18:
24:ff:47:1e:f7:40:9a:8d:a6:0e:3d:ff:6e:87:f7:
eb:f5:1e:84:51:c0:d2:bb:57:df:df:df:4a:6e:9f:
a1:0b:ca:38:e4:f9:6d:20:95:aa:5d:dc:a4:a6:bd:
7c:33:57:80:2e:34:c9:47:d2:5f:3e:33:ae:ef:2a:
92:77:15:b5:01:fc:bd:3f:46:9d:c0:4c:a2:e1:0a:
08:a5:a0:f5:55:a2:19:1b:fb:54:a2:78:8c:8b:26:
3e:67:38:31:26:ad:64:28:62:46:4f:a4:2f:fa:f2:
0b:8f:73:10:08:ea:b2:f5:f8:f7:de:af:bf:17:2a:
3b:78:83:05:2e:bb:d7:63:54:93:23:8b:28:7e:6c:
73:6b:bf:49:e0:a8:f5:26:15:5d:67:b2:51:70:d2:
1b:a3:71:c1:73:9f:ac:3c:84:83:ee:99:20:ea:4a:
61:87:19:d1:c1:34:d8:a9:49:d8:13:a7:18:58:a3:
62:01:b0:73:95:00:0c:66:bb:9b:1d:61:c4:25:26:
38:e8:f6:3e:2a:2e:f3:6c:96:29:7f:2b:21:a9:bd:
b0:d6:6e:34:00:38:21:db:5f:e6:8e:9b:94:54:f6:
d2:f9:c9:e8:7f:4b:02:da:8c:25:a0:3c:e0:6a:47:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:C2:2A:ED:8F:68:5B:19:46:97:97:AA:9D:47:B8:79:79:7A:10
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38392e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:98:25:92:02:ca:e8:da:5e:90:04:3a:51:c8:83:66:d2:fc:
40:d0:05:aa:cf:80:08:1b:67:37:ed:1f:7e:c3:f1:9e:4b:d6:
e2:4a:7a:36:d4:21:c6:a6:c4:1b:0d:c1:29:1b:29:1d:a1:9c:
02:0f:31:0d:60:b0:20:12:53:20:ac:64:07:6c:2e:7b:e3:5d:
ae:e3:f2:99:a5:64:b4:d4:5c:a4:13:b2:1e:0d:18:0a:ff:81:
41:a4:e9:5a:df:b0:47:fc:ef:90:5c:aa:fc:0f:20:d6:ad:a8:
02:08:d4:93:7f:eb:8d:d2:6d:3c:63:2f:6a:3b:b1:01:c6:85:
38:c0:95:3d:c4:21:7b:06:3c:64:6f:27:3e:52:21:e9:df:1d:
c6:b5:9a:ff:7e:de:53:a2:7c:8f:21:60:c6:66:1e:71:aa:8c:
78:81:21:bb:6c:a3:9e:da:12:59:e3:bc:2a:80:9a:2f:07:4b:
e4:75:83:7e:b4:40:56:21:c2:a3:2f:58:fd:d7:49:fe:26:92:
26:19:e0:57:31:cf:30:44:9b:0b:78:0e:87:84:39:41:23:2e:
79:75:02:37:fd:da:b2:c9:9d:62:83:37:c2:57:b8:5c:9a:a3:
8c:d0:30:f3:3b:ea:e3:45:7d:ff:f9:0d:b5:ba:80:73:c2:a4:
0a:30:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:09 2026 by rpki-client