Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39342e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39342e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: MeGLLBBg86LV4Jbi9FSosumMD86mAohpPdj+7b76B9M=
Subject key identifier: B2:2B:58:2C:F2:6F:65:C1:08:4B:BA:19:7E:04:70:DC:3F:8B:79:F8
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 0BF140347873F10F4608C2227CF458B12E16FD5B
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39342e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:50 +0000
ROA not before: Sat 18 Apr 2026 11:57:50 +0000
ROA not after: Sat 17 Apr 2027 12:02:50 +0000
asID: 17671
IP address blocks: 114.199.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f1:40:34:78:73:f1:0f:46:08:c2:22:7c:f4:58:b1:2e:16:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:50 2026 GMT
Not After : Apr 17 12:02:50 2027 GMT
Subject: CN=B22B582CF26F65C1084BBA197E0470DC3F8B79F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:0f:3e:b9:fd:c0:dc:09:0e:81:fd:0f:1c:
9c:9d:24:9f:c3:0b:d3:e5:cf:5f:f1:a5:97:46:2b:
5e:76:83:fa:1d:d2:73:82:08:2f:c8:e7:35:bb:41:
42:76:57:d7:0b:2b:d4:8f:a3:a7:96:70:b5:e4:9e:
f1:b2:40:0f:04:04:b5:c8:19:f6:99:48:c8:fe:76:
3f:fc:bb:bb:e0:2b:16:ab:6c:d8:3f:15:64:be:55:
dc:47:26:0c:bd:55:52:e9:dc:7d:14:54:c4:dc:28:
2f:9d:92:fa:81:71:a0:c0:7a:41:03:8d:f7:28:ce:
95:05:80:3e:84:bf:7f:7c:53:95:7d:96:9d:a1:b6:
65:8d:9e:c5:14:29:41:59:ff:27:c6:bc:a8:70:1e:
66:f2:00:15:f4:0a:b6:fc:30:cf:6b:1a:6f:5f:f1:
1c:3a:29:83:08:19:a7:7b:59:b1:c0:da:b2:1d:19:
07:5d:f6:57:c5:67:ac:e3:d5:8a:91:80:9e:60:d8:
53:af:b8:92:97:6a:ac:15:2f:ba:80:79:d2:c7:f3:
05:5c:82:96:4c:7b:3a:ae:c8:d1:eb:ba:f4:8c:cd:
18:e2:dc:aa:db:39:d1:62:0a:d8:f9:44:f1:25:f1:
e1:49:d8:fc:56:50:44:34:31:38:52:9a:a1:a6:93:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:58:2C:F2:6F:65:C1:08:4B:BA:19:7E:04:70:DC:3F:8B:79:F8
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39342e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0b:52:c3:fa:6a:81:7a:4c:af:9f:96:28:75:f4:91:05:d5:
a1:54:35:78:a1:92:1e:09:86:0d:ca:db:ea:fa:c2:4a:d9:b5:
25:d9:69:af:bc:e8:06:af:e9:6b:4a:25:b0:81:7b:c0:f5:02:
cd:38:c3:7c:2a:14:1c:6e:26:d1:16:9f:9e:49:69:15:77:83:
9b:61:76:f5:bc:14:4e:ae:cc:cd:1e:2c:67:76:57:eb:c4:81:
fa:d9:25:ca:5e:60:18:ff:2e:9d:62:92:20:1d:0e:1c:66:19:
1b:a7:1d:84:9e:db:f3:89:96:c0:24:b5:dc:11:0b:60:7d:d0:
cf:2b:9a:43:cc:4a:ad:af:f5:f5:7f:d4:ff:8e:e5:4a:a8:02:
e0:cd:5d:1a:52:1c:06:63:41:b8:29:55:0e:a4:d5:47:a0:a7:
8e:0d:49:e9:52:61:ba:22:3e:ce:f9:d8:2d:f4:dd:a8:17:2b:
ed:0c:1f:44:1c:d8:38:17:d0:dd:c1:69:19:dc:2e:b8:40:34:
c2:7c:a1:90:95:f0:27:6b:2a:d3:5d:00:52:8e:20:4d:d3:54:
59:c3:3e:a1:ca:5c:48:5f:47:40:2b:1a:d0:76:37:23:12:2e:
7b:9c:ba:04:cb:58:13:dc:d5:bf:ef:1e:ff:65:d7:0d:33:56:
1e:b4:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:11 2026 by rpki-client