Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e36342e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: g/uwCNsgn/qpTIvhVDcDzxa/nGXxsVYIAJpSAWBQsXI=
Subject key identifier: 5B:6E:C0:A4:C0:B5:76:EE:33:07:55:B8:A0:8E:E2:69:CA:E8:05:7E
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 776C98FD7268B1AAEAA1136E929C74083D46F6
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:52 +0000
ROA not before: Sat 18 Apr 2026 11:57:52 +0000
ROA not after: Sat 17 Apr 2027 12:02:52 +0000
asID: 17671
IP address blocks: 202.47.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6c:98:fd:72:68:b1:aa:ea:a1:13:6e:92:9c:74:08:3d:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:52 2026 GMT
Not After : Apr 17 12:02:52 2027 GMT
Subject: CN=5B6EC0A4C0B576EE330755B8A08EE269CAE8057E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:f2:2f:fd:4c:dd:bf:fd:9b:43:05:20:d7:
ba:70:4a:bd:6c:e5:4d:df:0d:86:9d:f6:bf:85:20:
74:1d:c9:07:ec:ab:1c:be:ae:62:f2:cd:6b:81:cf:
61:09:9c:4d:fa:d8:54:fc:71:a6:1d:b2:af:b0:16:
70:a4:b4:2d:b1:6e:68:8e:f0:24:3e:07:ed:c9:78:
19:35:4e:31:1f:d6:b9:62:e0:ee:a2:a0:91:89:c3:
99:72:a5:a2:47:e6:b6:10:27:5f:aa:f6:bc:74:79:
00:d8:37:95:01:db:26:a0:54:ca:d9:68:3a:8d:2d:
5b:96:44:a3:1a:e6:6a:2d:10:36:0c:96:bc:2e:af:
c6:5b:24:9d:55:4f:43:5e:00:98:e6:bb:43:96:b0:
85:6e:c8:c9:06:26:7c:f2:c6:1a:b6:d3:0a:d8:d5:
8f:54:b6:b4:85:7f:43:a4:fa:9b:c1:de:3b:85:c1:
44:f0:67:30:10:e9:e6:1f:4f:cf:e0:eb:d6:79:6e:
6d:b2:24:21:a1:a0:8e:0d:2e:65:cb:22:08:03:33:
69:b9:2a:37:4d:24:d6:7e:cb:dd:af:d4:56:aa:56:
80:f3:2a:e7:a2:3a:55:d4:e6:b5:42:ec:1c:5a:7a:
31:9c:a1:88:3d:30:b3:ca:c4:24:02:65:37:e5:4d:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:C0:A4:C0:B5:76:EE:33:07:55:B8:A0:8E:E2:69:CA:E8:05:7E
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.64.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ae:76:cb:bc:3b:78:d0:b1:36:05:40:c1:df:15:a2:c8:1f:
da:bd:6e:5a:54:62:d4:3c:ea:49:7b:f1:de:ac:c9:77:34:66:
3c:53:81:5e:c8:79:00:ee:34:ce:d9:30:cb:7d:93:2e:de:3a:
f4:5d:93:7c:54:b7:16:96:b0:19:bb:89:d4:f5:e8:96:8c:12:
cf:7a:90:fe:c2:89:ba:35:f6:75:0f:3a:29:1c:93:1a:a4:e2:
00:11:2a:1c:89:8c:1a:b5:73:1e:e8:b9:25:0a:ef:35:0d:da:
99:2f:63:dd:96:fa:95:c4:a7:a4:e8:a2:2b:67:23:b8:82:26:
c8:10:15:24:b1:3e:40:84:9f:20:8f:e0:17:b9:8f:94:a9:c4:
53:3a:e9:f0:b2:e0:ad:84:df:31:3a:e7:8d:28:c6:22:d2:df:
61:6f:67:4b:19:0d:5a:6e:2c:88:d4:14:a8:72:5f:5b:91:c6:
1e:10:62:2c:93:cb:cf:d3:b5:ec:4d:97:7d:e9:18:22:71:69:
6e:8c:db:ae:fe:ba:50:56:a5:c3:48:7b:5d:ae:c8:57:69:ef:
37:fe:11:96:9a:2f:88:09:86:55:c1:e8:7e:2e:55:0d:68:13:
a4:05:6d:34:4d:9e:6c:a8:b9:bf:7f:f7:72:48:f0:9b:93:25:
76:7b:42:da
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgITd2yY/XJosarqoRNukpx0CD1G9jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhEMEM5MDQwN0NDRDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1
NjRBQjI1MB4XDTI2MDQxODExNTc1MloXDTI3MDQxNzEyMDI1MlowMzExMC8GA1UE
AxMoNUI2RUMwQTRDMEI1NzZFRTMzMDc1NUI4QTA4RUUyNjlDQUU4MDU3RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN/F8i/9TN2//ZtDBSDXunBKvWzl
Td8Nhp32v4UgdB3JB+yrHL6uYvLNa4HPYQmcTfrYVPxxph2yr7AWcKS0LbFuaI7w
JD4H7cl4GTVOMR/WuWLg7qKgkYnDmXKlokfmthAnX6r2vHR5ANg3lQHbJqBUytlo
Oo0tW5ZEoxrmai0QNgyWvC6vxlsknVVPQ14AmOa7Q5awhW7IyQYmfPLGGrbTCtjV
j1S2tIV/Q6T6m8HeO4XBRPBnMBDp5h9Pz+Dr1nlubbIkIaGgjg0uZcsiCAMzabkq
N00k1n7L3a/UVqpWgPMq56I6VdTmtULsHFp6MZyhiD0ws8rEJAJlN+VN4wECAwEA
AaOCAjAwggIsMB0GA1UdDgQWBBRbbsCkwLV27jMHVbigjuJpyugFfjAfBgNVHSME
GDAWgBTQyQQHzNU3F9/qIdUaiSHyBWSrJTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhj
ZWJmMTE2LWZlMmEtNDkxYi1hYWM4LTIyMGVhZDBiNTRlMi8wL0QwQzkwNDA3Q0NE
NTM3MTdERkVBMjFENTFBODkyMUYyMDU2NEFCMjUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi9EMEM5MDQwN0NDRDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRB
QjI1LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNlYmYxMTYtZmUyYS00OTFiLWFh
YzgtMjIwZWFkMGI1NGUyLzAvMzIzMDMyMmUzNDM3MmUzNjM0MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovQDANBgkqhkiG9w0B
AQsFAAOCAQEAVa52y7w7eNCxNgVAwd8Vosgf2r1uWlRi1DzqSXvx3qzJdzRmPFOB
Xsh5AO40ztkwy32TLt469F2TfFS3FpawGbuJ1PXolowSz3qQ/sKJujX2dQ86KRyT
GqTiABEqHImMGrVzHui5JQrvNQ3amS9j3Zb6lcSnpOiiK2cjuIImyBAVJLE+QISf
II/gF7mPlKnEUzrp8LLgrYTfMTrnjSjGItLfYW9nSxkNWm4siNQUqHJfW5HGHhBi
LJPLz9O17E2XfekYInFpbozbrv66UFalw0h7Xa7IV2nvN/4RlpoviAmGVcHofi5V
DWgTpAVtNE2ebKi5v3/3ckjwm5MldntC2g==
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:08 2026 by rpki-client