Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39312e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39312e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: CWcFxbhBFWq3ZT479gTxWQQtj5Cmo91O5cNQPn3upNU=
Subject key identifier: 3D:F0:2A:15:79:1B:4D:0A:3F:AD:01:5A:C6:04:EC:14:64:FF:0E:43
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 640F8F4E3F6FC55039C901A42D554E7BC751507E
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39312e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:53 +0000
ROA not before: Sat 18 Apr 2026 11:57:53 +0000
ROA not after: Sat 17 Apr 2027 12:02:53 +0000
asID: 17671
IP address blocks: 114.199.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0f:8f:4e:3f:6f:c5:50:39:c9:01:a4:2d:55:4e:7b:c7:51:50:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:53 2026 GMT
Not After : Apr 17 12:02:53 2027 GMT
Subject: CN=3DF02A15791B4D0A3FAD015AC604EC1464FF0E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:cc:0c:bc:be:fb:cc:2f:0f:8c:e9:5d:99:
e7:6d:35:ca:52:fa:c2:3a:b3:8b:89:bd:cc:56:9a:
7e:63:5a:84:23:62:ed:23:f6:cf:2d:08:eb:9b:98:
33:0a:c9:16:ad:f7:de:33:2f:a1:ea:4f:10:b6:ef:
81:fd:19:b7:f3:96:f5:a8:b2:74:c2:ac:cf:b9:b9:
59:d1:c7:53:87:e9:ab:5a:3d:60:c7:26:0f:97:2e:
04:1e:99:2d:88:ec:a6:33:3a:8a:2d:e0:96:ad:02:
05:92:f5:93:6e:8c:11:ee:6c:9d:39:48:8b:12:ce:
23:5f:30:40:2e:7e:b3:42:f4:b9:a6:45:fa:95:68:
c9:07:6d:bb:aa:d1:4c:ff:23:9d:b8:e7:2f:9a:e4:
71:18:03:b8:f0:9f:aa:21:c1:54:cb:1f:76:fa:e2:
e4:99:42:7a:6d:46:0a:15:4e:2c:bf:e4:4a:3d:7c:
3c:8c:65:15:2c:29:b9:bc:43:f5:4b:ef:d9:1e:ac:
d3:66:e9:3f:3b:bd:71:27:73:3a:34:65:91:f8:b9:
a9:83:65:fb:55:1c:5a:b3:45:22:54:7b:b1:68:7f:
b9:34:b6:78:7e:f1:ca:40:c3:61:eb:40:dd:2f:a0:
6e:48:39:55:1f:11:95:83:d4:78:2b:01:3a:a3:d9:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F0:2A:15:79:1B:4D:0A:3F:AD:01:5A:C6:04:EC:14:64:FF:0E:43
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39312e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a7:4a:44:a5:0f:be:cb:7b:85:73:35:75:75:c6:88:29:78:
61:12:0c:0d:e4:73:d3:18:ec:6f:88:59:77:41:b5:fd:88:3f:
e6:88:19:07:a8:79:0e:f4:de:4e:60:21:fd:cd:d2:16:69:2f:
c1:68:ed:f8:f0:39:92:2e:b7:25:06:58:7a:c7:58:87:7d:a3:
9e:73:0a:0c:06:de:e4:e3:2b:4d:68:1d:e4:f3:ff:19:4c:b7:
e6:66:de:a2:bc:b7:ab:cb:fb:19:4d:86:5e:5b:94:7d:2b:d5:
71:c4:85:58:dd:75:8d:24:e1:28:5b:75:26:f6:03:63:d1:25:
f7:d3:d3:c3:68:ce:07:d8:3c:59:ec:c2:35:c0:bb:e0:de:f9:
e4:2b:e6:c1:1a:0a:c0:18:1e:5b:c2:1c:cf:8f:79:7d:98:de:
4f:1b:84:12:c7:8c:74:2f:de:e2:44:84:0c:11:2e:b4:16:6b:
59:d1:ad:4c:f8:90:12:40:6e:56:1c:5d:62:16:f2:f8:22:68:
dd:cf:d1:28:94:d7:31:4a:2e:c5:3c:f0:f7:53:4a:4d:58:69:
58:4c:cb:d6:46:d9:c1:78:1e:bb:85:ce:70:c5:8a:cb:75:c6:
55:6b:43:61:0a:c1:58:f7:76:cb:a0:4a:75:61:5c:73:89:d4:
2b:a8:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:10 2026 by rpki-client