Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39352e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39352e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: BlBz5ZWlobyEvxvlW6DCDdSez/tMKvilPwimnHhAVI8=
Subject key identifier: EC:DC:C0:1F:02:A1:AB:08:AA:B0:53:72:8F:31:D8:19:6E:C1:3C:F2
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 2F400A8124538D618799B95AE10AACB7FDEC6226
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39352e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:50 +0000
ROA not before: Sat 18 Apr 2026 11:57:50 +0000
ROA not after: Sat 17 Apr 2027 12:02:50 +0000
asID: 17671
IP address blocks: 114.199.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:40:0a:81:24:53:8d:61:87:99:b9:5a:e1:0a:ac:b7:fd:ec:62:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:50 2026 GMT
Not After : Apr 17 12:02:50 2027 GMT
Subject: CN=ECDCC01F02A1AB08AAB053728F31D8196EC13CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:9c:fd:c0:f9:34:33:ce:9d:0b:2c:54:07:
1f:2a:82:b8:66:73:8c:dc:55:fc:59:d8:04:38:24:
4f:7b:d7:62:3e:d3:ef:67:70:15:c6:26:5e:82:3d:
96:78:95:d2:4d:4f:e1:06:bf:e0:1c:8b:ff:09:b4:
f9:7a:be:6d:48:26:e3:2c:24:5a:c4:58:cc:e5:0c:
1b:b9:c5:ac:62:26:96:25:4f:4f:2d:a8:9e:9f:d8:
e3:8a:f6:68:c0:39:c9:c5:99:9d:7d:a8:df:99:3c:
39:50:50:c1:c0:d0:1f:6e:57:2b:57:02:50:7d:90:
28:16:8f:ee:f4:5b:4c:b7:04:c6:e3:ff:07:80:c9:
3d:50:7a:4d:df:4a:39:f8:02:c2:88:6a:c6:72:6d:
7b:f1:aa:13:d2:81:2b:0d:f1:3b:f0:a9:7f:13:ef:
eb:29:f0:02:ee:f4:03:5d:71:32:31:3d:43:88:3b:
62:9b:30:40:30:92:93:ab:02:7f:8a:7f:30:1b:c0:
20:96:7e:91:cc:c6:db:46:dc:92:3e:bb:cb:06:7c:
24:fa:a7:49:1c:8b:ef:1f:35:51:ae:a6:1e:1c:9b:
e1:43:da:5b:f3:8e:6f:9d:88:e1:37:e2:9c:4e:15:
da:29:89:f7:b5:d6:90:f4:dc:6f:a7:fa:89:62:cc:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DC:C0:1F:02:A1:AB:08:AA:B0:53:72:8F:31:D8:19:6E:C1:3C:F2
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39352e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.95.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f4:be:32:05:32:67:2c:bd:be:6b:b1:c6:30:55:55:2e:27:
c1:18:7e:40:ce:7c:3f:40:d1:c1:d2:ff:83:38:bb:b5:86:35:
10:da:aa:ab:f1:db:f1:ec:6e:c0:62:d4:fe:1f:9e:42:f7:33:
03:5e:73:f0:46:37:28:9e:b1:75:96:42:0d:3d:a4:78:03:27:
61:88:6e:fc:83:2f:fa:bc:ca:8d:7c:a2:42:00:4a:84:fa:8c:
e8:6f:33:44:e2:8d:07:fa:ec:6f:aa:01:f0:41:1e:cd:c6:9d:
b6:35:02:a3:f8:dd:8a:34:3d:c9:31:46:78:59:c7:b4:38:9f:
d3:03:d9:c7:af:46:aa:b8:67:e1:cf:5a:46:98:57:9a:36:6b:
73:17:7d:da:8d:93:3a:44:2e:64:ec:b3:e2:42:f4:b1:bc:08:
67:f2:93:8b:5f:c6:c3:a5:9b:c1:ea:d6:c9:d7:9a:71:3e:6e:
90:01:e9:5c:e4:1a:16:15:7d:a2:22:90:7e:75:82:4d:3a:01:
c2:2e:50:f5:e0:ca:c8:c4:bc:f3:12:c9:22:92:29:ad:7f:fa:
1a:a2:cc:bd:4e:63:01:e2:33:b7:66:fb:ff:67:84:2c:44:e3:
25:1e:b2:12:21:dd:76:f4:f0:5f:c8:36:ad:71:9c:50:7b:09:
c3:03:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:11 2026 by rpki-client