Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36352e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e36352e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: I090UJFvYMQkJDfX5X/v87YlYgyFWBMavSwbYloiL64=
Subject key identifier: E7:A2:E6:08:0D:0C:48:41:D7:09:42:97:90:9C:CF:2C:51:D9:7B:62
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 5235D3656C5020E96667C9B65839A757DFCDD197
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36352e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 202.47.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:35:d3:65:6c:50:20:e9:66:67:c9:b6:58:39:a7:57:df:cd:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=E7A2E6080D0C4841D7094297909CCF2C51D97B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:d9:87:4e:8a:68:23:eb:17:d9:a6:aa:bc:
df:a5:52:76:94:b8:d3:f0:86:d7:6b:b7:a1:3b:a2:
ce:92:44:2a:96:8b:16:cf:6e:d8:1b:7c:d9:ff:5b:
1c:39:d2:c7:82:24:b2:b6:1a:5d:35:a5:37:aa:4d:
a8:fd:9d:2f:9d:fa:72:bf:9c:71:31:51:46:f5:9f:
02:8d:de:76:d8:5d:cb:89:2c:90:56:42:6a:6a:7b:
94:5c:5c:2c:02:3a:44:4a:0e:03:9c:ea:84:b6:ad:
c8:e5:3f:bd:2e:9f:fc:c7:e7:63:11:d9:8f:47:c2:
0e:71:43:e6:e0:2e:b9:d1:e4:d7:7e:c1:29:ce:26:
ce:ba:3d:3a:91:c3:51:dd:d1:b9:8b:dd:d9:af:2b:
2f:fc:17:99:a3:64:01:f8:87:71:ba:a1:cc:ee:ad:
b4:f7:da:ab:94:50:1d:e5:ab:b7:b1:aa:4e:ef:4a:
e4:64:84:67:ca:fa:a7:39:ed:84:5b:a2:e6:d1:16:
80:8a:09:93:fa:83:1d:0b:79:71:95:44:6e:7c:2d:
a7:4e:76:d9:f7:15:ba:e5:aa:f0:27:eb:43:98:34:
d4:c0:ce:09:36:3c:26:d4:a6:40:0e:1d:64:28:e2:
32:a1:99:75:6f:ee:82:d2:35:51:9d:82:b4:33:98:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:E6:08:0D:0C:48:41:D7:09:42:97:90:9C:CF:2C:51:D9:7B:62
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36352e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.65.0/24
Signature Algorithm: sha256WithRSAEncryption
01:15:d5:0c:15:4a:d3:b1:56:e9:5d:2b:92:1e:46:9a:db:04:
e3:60:72:8a:33:11:a4:2f:32:9e:b5:90:65:00:85:a2:46:36:
38:48:da:8a:89:f3:5b:62:af:86:c2:94:f8:9a:a6:4d:ab:71:
65:92:b6:ea:bc:ff:45:66:3b:5e:64:88:67:b0:c5:f8:f6:9c:
7c:cf:cb:cf:95:a4:ca:39:6e:ce:30:99:5d:90:75:23:1c:17:
76:b0:15:55:de:1d:aa:2d:c7:60:3a:09:1b:cb:05:16:42:c7:
ec:21:83:f1:b7:65:d1:7c:c7:62:84:d6:d9:b7:8a:19:48:cf:
ea:0b:c6:d1:c0:af:a9:db:18:20:30:7e:88:69:f4:61:70:dd:
ee:d1:8c:26:71:9b:71:19:f6:41:69:17:d9:ed:17:81:c4:02:
58:a3:e9:c1:08:f8:cc:c4:81:31:96:14:fe:9b:79:89:c5:f1:
b6:48:9c:8c:79:b6:39:41:f8:a7:9c:c3:b3:ab:3d:3f:f0:58:
d4:7d:3f:a3:4f:6b:e8:55:ea:10:20:c3:9e:a4:d4:c8:be:09:
a4:58:57:52:39:ab:cd:7f:af:1c:e9:dc:8c:bc:5e:db:c9:70:
d7:55:a7:cb:46:8b:3f:26:3e:ae:93:cc:e0:27:07:b9:56:b0:
98:42:3e:b4
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUUjXTZWxQIOlmZ8m2WDmnV9/N0ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNjA0MTgxMTU3NDhaFw0yNzA0MTcxMjAyNDhaMDMxMTAvBgNV
BAMTKEU3QTJFNjA4MEQwQzQ4NDFENzA5NDI5NzkwOUNDRjJDNTFEOTdCNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIdmHTopoI+sX2aaqvN+lUnaU
uNPwhtdrt6E7os6SRCqWixbPbtgbfNn/Wxw50seCJLK2Gl01pTeqTaj9nS+d+nK/
nHExUUb1nwKN3nbYXcuJLJBWQmpqe5RcXCwCOkRKDgOc6oS2rcjlP70un/zH52MR
2Y9Hwg5xQ+bgLrnR5Nd+wSnOJs66PTqRw1Hd0bmL3dmvKy/8F5mjZAH4h3G6oczu
rbT32quUUB3lq7exqk7vSuRkhGfK+qc57YRboubRFoCKCZP6gx0LeXGVRG58LadO
dtn3FbrlqvAn60OYNNTAzgk2PCbUpkAOHWQo4jKhmXVv7oLSNVGdgrQzmMpjAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU56LmCA0MSEHXCUKXkJzPLFHZe2IwHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0EwDQYJKoZIhvcN
AQELBQADggEBAAEV1QwVStOxVuldK5IeRprbBONgcoozEaQvMp61kGUAhaJGNjhI
2oqJ81tir4bClPiapk2rcWWStuq8/0VmO15kiGewxfj2nHzPy8+VpMo5bs4wmV2Q
dSMcF3awFVXeHaotx2A6CRvLBRZCx+whg/G3ZdF8x2KE1tm3ihlIz+oLxtHAr6nb
GCAwfohp9GFw3e7RjCZxm3EZ9kFpF9ntF4HEAlij6cEI+MzEgTGWFP6beYnF8bZI
nIx5tjlB+Kecw7OrPT/wWNR9P6NPa+hV6hAgw56k1Mi+CaRYV1I5q81/rxzp3Iy8
XtvJcNdVp8tGiz8mPq6TzOAnB7lWsJhCPrQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:08 2026 by rpki-client