Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39302e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: uG7Uuqz58X19YmZUQ4IOtFpy0ubNPTsYaOrqALB+Ix8=
Subject key identifier: 24:EB:2F:E2:2D:3F:A8:75:6F:9F:22:DF:93:92:8B:68:07:8B:4D:BF
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 4E54D50D15439F539FDC231064EC87A123DAC499
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:50 +0000
ROA not before: Sat 18 Apr 2026 11:57:50 +0000
ROA not after: Sat 17 Apr 2027 12:02:50 +0000
asID: 17671
IP address blocks: 114.199.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:54:d5:0d:15:43:9f:53:9f:dc:23:10:64:ec:87:a1:23:da:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:50 2026 GMT
Not After : Apr 17 12:02:50 2027 GMT
Subject: CN=24EB2FE22D3FA8756F9F22DF93928B68078B4DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:12:f3:e3:40:27:8d:5d:27:4e:8e:6e:73:
30:7b:de:51:e1:45:47:fc:a4:a8:71:a5:33:48:3e:
25:2b:ad:26:3d:41:5b:68:0c:4e:42:01:11:c4:bb:
05:41:82:2b:98:a2:ba:40:e0:00:74:6f:3a:99:12:
cf:05:50:d4:3f:69:ae:88:5a:75:16:5a:94:49:1b:
56:7c:63:f3:19:28:1e:b6:fc:6e:f4:29:b0:d0:5f:
e7:c9:01:d0:9a:7f:fa:26:58:49:64:84:9d:af:f7:
29:a5:91:55:e6:9c:6b:ff:49:55:2b:a2:e1:c9:38:
e4:f4:e9:77:04:13:d0:52:bd:ef:7e:c2:79:db:a1:
09:7d:db:ff:38:7c:1f:5f:e9:c9:4f:ff:6c:59:b4:
f9:fe:12:74:7c:9b:fe:e7:0e:97:00:48:bc:07:21:
38:78:0f:a6:73:59:01:d6:cb:a7:b8:9a:44:00:c9:
8c:d3:e4:20:cd:dd:04:8b:f7:45:21:7a:e8:a5:7a:
83:23:ef:dd:79:85:f0:d3:f2:84:83:11:14:af:50:
1a:d0:4a:48:05:e3:08:57:6f:c0:ce:54:a2:83:63:
a6:c1:d2:df:d0:5a:5c:28:9b:5b:9d:7f:b1:f4:f3:
22:86:0d:93:b7:20:37:c6:0e:26:2f:b1:49:d3:8a:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:2F:E2:2D:3F:A8:75:6F:9F:22:DF:93:92:8B:68:07:8B:4D:BF
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.90.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0a:de:18:57:96:c4:bb:92:ec:db:d5:36:34:48:11:9b:d6:
34:37:00:90:83:21:e8:47:2d:1e:af:e2:38:44:37:f3:c1:7c:
86:9a:27:a6:98:93:d8:81:1e:8b:68:08:30:03:9f:98:08:d4:
69:f2:bd:66:43:76:f6:7d:5a:5b:50:8e:9a:15:75:4f:a3:f9:
93:f6:b6:24:5c:21:85:2a:3a:78:5a:fb:76:ef:57:c8:2b:21:
d2:4d:d3:46:38:4f:2a:45:65:63:09:63:6e:b8:d2:11:bc:2c:
d1:fd:b3:d1:78:60:00:c2:11:3e:75:fc:51:40:ba:53:be:50:
a0:07:2c:61:7e:a8:0d:87:a2:cf:88:ef:bd:ef:86:25:02:9a:
e6:d1:1a:6c:3c:ab:fd:fb:9f:cc:03:50:51:1e:19:c2:9f:84:
07:e7:74:da:22:4f:75:70:64:13:f9:63:70:43:82:cf:8a:03:
ec:e0:54:ac:ea:e5:b5:83:31:09:0d:61:a6:aa:8f:6c:5d:b7:
14:ff:01:8f:91:99:c8:fb:2d:56:93:b3:e7:84:6e:45:3d:49:
68:c3:86:d4:19:a9:fc:e2:26:a0:35:fe:11:8c:81:2f:72:3f:
43:57:3f:df:5c:31:a8:f8:cb:31:64:75:d4:db:f3:9b:1d:e1:
f4:3f:a1:ad
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTlTVDRVDn1Of3CMQZOyHoSPaxJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNjA0MTgxMTU3NTBaFw0yNzA0MTcxMjAyNTBaMDMxMTAvBgNV
BAMTKDI0RUIyRkUyMkQzRkE4NzU2RjlGMjJERjkzOTI4QjY4MDc4QjREQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaThLz40AnjV0nTo5uczB73lHh
RUf8pKhxpTNIPiUrrSY9QVtoDE5CARHEuwVBgiuYorpA4AB0bzqZEs8FUNQ/aa6I
WnUWWpRJG1Z8Y/MZKB62/G70KbDQX+fJAdCaf/omWElkhJ2v9ymlkVXmnGv/SVUr
ouHJOOT06XcEE9BSve9+wnnboQl92/84fB9f6clP/2xZtPn+EnR8m/7nDpcASLwH
ITh4D6ZzWQHWy6e4mkQAyYzT5CDN3QSL90UheuileoMj7915hfDT8oSDERSvUBrQ
SkgF4whXb8DOVKKDY6bB0t/QWlwom1udf7H08yKGDZO3IDfGDiYvsUnTikPvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJOsv4i0/qHVvnyLfk5KLaAeLTb8wHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHWjANBgkqhkiG
9w0BAQsFAAOCAQEAiAreGFeWxLuS7NvVNjRIEZvWNDcAkIMh6EctHq/iOEQ388F8
hponppiT2IEei2gIMAOfmAjUafK9ZkN29n1aW1COmhV1T6P5k/a2JFwhhSo6eFr7
du9XyCsh0k3TRjhPKkVlYwljbrjSEbws0f2z0XhgAMIRPnX8UUC6U75QoAcsYX6o
DYeiz4jvve+GJQKa5tEabDyr/fufzANQUR4Zwp+EB+d02iJPdXBkE/ljcEOCz4oD
7OBUrOrltYMxCQ1hpqqPbF23FP8Bj5GZyPstVpOz54RuRT1JaMOG1Bmp/OImoDX+
EYyBL3I/Q1c/31wxqPjLMWR11Nvzmx3h9D+hrQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:12 2026 by rpki-client