Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32302d3234203d3e203137363731.roa
File: 3230322e34372e36342e302f32302d3234203d3e203137363731.roa (raw, json)
Hash identifier: OG4ABPYk96zySrdZsm9Bc9yPKmRw6yiYGTidBEM0D1w=
Subject key identifier: 9E:18:4C:2E:78:C4:02:A3:C4:05:57:F7:C3:A1:B5:8A:5D:60:AA:A3
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 078B7B2AC686A1D13433D3E854903D869E9BF736
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32302d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 10:02:43 +0000
ROA not before: Sat 18 Apr 2026 09:57:43 +0000
ROA not after: Sat 17 Apr 2027 10:02:43 +0000
asID: 17671
IP address blocks: 202.47.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8b:7b:2a:c6:86:a1:d1:34:33:d3:e8:54:90:3d:86:9e:9b:f7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 09:57:43 2026 GMT
Not After : Apr 17 10:02:43 2027 GMT
Subject: CN=9E184C2E78C402A3C40557F7C3A1B58A5D60AAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:6d:5f:6e:44:89:de:f6:c1:d7:ea:16:24:
49:bc:1c:52:c2:e9:ee:87:3a:5f:d7:85:4c:16:b1:
59:7c:9b:86:1c:46:76:fe:ca:2c:0e:ff:5b:7f:01:
c3:ca:b5:c2:62:98:fa:35:63:f8:de:27:8b:4e:25:
65:79:5f:e5:00:16:eb:17:7d:a1:a3:1c:51:ab:ac:
a4:d5:3c:16:e5:19:b9:e8:c6:c1:4a:ff:4f:51:32:
0c:98:fa:95:2a:dd:42:8a:8a:26:9e:0b:5c:bf:88:
8c:d7:a0:72:52:11:de:81:9c:15:03:55:38:73:f8:
50:c3:94:1f:02:a8:94:60:0a:f1:69:34:25:e2:62:
ac:00:d8:c9:14:b5:3d:b5:e4:5d:c1:7f:61:b1:bd:
9a:ad:9d:99:f8:eb:64:05:51:26:ee:25:fc:9d:4b:
89:4b:f0:e3:ed:5d:4b:b4:7b:57:1b:9a:bb:2d:07:
2e:36:29:9b:f4:33:25:63:f8:dd:11:b3:b2:8b:d6:
ab:46:32:fe:b3:d3:ef:52:bd:d2:6f:9c:8d:48:5d:
b5:1c:cd:f0:33:47:1c:00:de:70:9a:9d:5d:94:6d:
85:03:aa:5a:56:c8:b4:de:12:d5:dd:90:48:e4:33:
16:77:f7:7a:81:bf:8f:a3:66:42:d7:ee:90:6c:2f:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:4C:2E:78:C4:02:A3:C4:05:57:F7:C3:A1:B5:8A:5D:60:AA:A3
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32302d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.64.0/20
Signature Algorithm: sha256WithRSAEncryption
59:e0:5c:11:49:80:1e:48:f8:6a:76:a4:35:4b:81:70:63:4b:
c5:4a:df:2d:21:e1:b0:3a:5e:9d:2b:cf:e9:75:67:31:df:65:
24:b8:91:4f:7d:39:b4:cf:7e:24:30:a5:95:86:07:15:10:3d:
e2:43:e9:70:49:a9:14:22:d1:07:43:ab:b7:76:7e:39:0b:5f:
27:21:44:f3:04:bf:2f:27:6a:26:57:7b:ca:b9:89:08:f3:bc:
ad:92:b5:de:1d:56:cf:94:28:e5:d9:15:5d:c1:c3:70:c0:4b:
ec:17:f9:d2:99:0c:97:bd:d5:61:10:7d:2d:7e:5f:c2:99:a4:
5d:66:35:45:e4:61:1e:3d:b7:e3:6a:36:cf:47:9a:79:b6:0e:
b2:f9:e5:7e:51:db:9a:e0:b7:43:fb:c5:6f:b8:15:2d:93:e6:
f1:f5:70:72:55:0f:7d:22:ad:be:d6:31:2f:f9:58:ee:1e:c1:
56:f2:cb:7a:44:63:23:75:de:62:85:e8:fb:2d:5d:9a:a3:e0:
28:46:8c:ea:91:89:03:2f:1f:40:90:b4:63:ab:d9:23:55:2e:
c2:c5:a9:3d:48:9f:63:56:93:67:7f:1d:f0:b2:81:a3:58:f3:
24:1e:e5:49:2e:55:64:f6:ff:61:63:6a:dc:6a:f4:72:f0:a4:
e7:b0:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:10 2026 by rpki-client