Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39332e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: +pIcD2gQ9kZydbauIY6+SP2T5sE2NrvAcIbzdwBpxaM=
Subject key identifier: 3F:C3:13:2C:F3:B5:D6:7C:9B:C0:EF:B2:9A:13:68:3D:A2:49:F3:9C
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 7202999ED31B740BEAC2F5014E576B0730EB9F4A
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:52 +0000
ROA not before: Sat 18 Apr 2026 11:57:52 +0000
ROA not after: Sat 17 Apr 2027 12:02:52 +0000
asID: 17671
IP address blocks: 114.199.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:02:99:9e:d3:1b:74:0b:ea:c2:f5:01:4e:57:6b:07:30:eb:9f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:52 2026 GMT
Not After : Apr 17 12:02:52 2027 GMT
Subject: CN=3FC3132CF3B5D67C9BC0EFB29A13683DA249F39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:87:95:c7:6d:c4:c8:66:41:f0:81:78:68:
9d:14:a3:c8:28:b5:67:37:88:8b:40:ca:37:6b:d4:
74:56:7f:9d:fa:27:a4:73:fa:48:26:fb:04:05:fa:
1b:b0:c3:76:c8:fb:31:1e:c5:15:93:30:9a:89:c0:
d6:e1:28:a6:97:87:3a:5b:b5:a1:dd:5d:d7:ae:5e:
0b:2c:19:16:f6:73:21:0f:d8:ff:62:f3:27:0d:98:
e3:48:e1:8d:13:b5:7c:d5:f4:f2:52:c9:14:aa:6d:
69:e3:fb:7e:e5:b4:6a:dc:07:23:08:7f:0e:10:ad:
3e:56:02:c9:d9:61:37:c2:2d:cf:4c:02:80:21:52:
c2:f8:5d:3a:33:b8:bc:6a:da:fa:69:84:0d:69:97:
86:44:40:b7:47:ca:5a:41:af:02:94:d4:bc:e6:1d:
6f:b8:10:11:d5:4a:ae:e8:44:cf:f3:41:a9:f8:9a:
fd:88:14:69:5c:96:05:bc:1b:af:dd:11:3b:89:33:
7c:82:f7:ab:0f:66:d9:d9:3d:a8:12:c7:1a:a4:af:
63:a5:62:78:95:7b:29:1e:91:9b:41:55:12:e7:82:
3f:63:80:ab:14:14:f2:dc:f6:e6:40:6b:85:79:06:
20:96:a7:cd:33:e3:ee:ff:52:ef:dd:f1:e3:bd:d5:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C3:13:2C:F3:B5:D6:7C:9B:C0:EF:B2:9A:13:68:3D:A2:49:F3:9C
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.93.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f0:c5:d3:4f:cd:68:b0:e2:aa:13:2c:ad:cd:f8:7c:f1:93:
b3:ff:1d:c0:af:cf:e8:ab:79:bf:4a:c2:7c:09:75:c5:2c:a9:
24:c4:82:bd:40:cd:da:c4:a8:7b:1e:d2:54:29:3b:0a:00:e0:
7d:9d:73:cc:64:7f:e2:8d:05:8a:bf:2a:35:d2:e0:fa:01:fb:
66:3c:37:62:98:15:fb:c9:94:69:b9:69:60:c8:de:d2:a6:8d:
39:b8:60:33:cc:16:78:e4:49:87:da:3b:24:47:05:2c:45:bd:
45:ef:83:45:87:88:19:10:02:c2:11:24:62:89:b7:09:93:4e:
95:36:5b:18:ef:e3:4c:38:0f:71:83:89:41:2f:c2:06:06:0a:
98:aa:9c:09:b3:71:02:fc:9f:a5:99:5a:5a:ab:81:85:9b:a1:
02:1f:99:f3:e1:6c:4f:5d:89:50:91:c4:7e:40:26:4e:b7:02:
b8:e4:6c:94:5e:6e:1f:60:ac:fd:14:85:29:4a:37:56:0d:fb:
6e:b5:b1:f4:21:43:aa:3f:9d:b0:d6:5b:00:96:0a:7b:5d:c0:
a6:26:1a:c3:44:0f:9e:d2:96:b4:bf:0a:d5:3a:ef:2d:b8:87:
14:c4:7e:a3:d1:4d:30:19:b0:9a:ef:0a:a7:37:15:d3:c2:ae:
00:be:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:11 2026 by rpki-client