Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36382e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e36382e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: /tO8Tt802SCLvzMzpA3jdJsBe36KZ7XNlyO93DIWuX4=
Subject key identifier: EE:71:DB:5E:88:16:DC:0E:B9:67:C6:7E:1B:A5:A0:46:24:5C:82:08
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 3942EC8BA183B5B57B52E612F53C569ACF8A1565
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36382e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:52 +0000
ROA not before: Sat 18 Apr 2026 11:57:52 +0000
ROA not after: Sat 17 Apr 2027 12:02:52 +0000
asID: 17671
IP address blocks: 202.47.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:42:ec:8b:a1:83:b5:b5:7b:52:e6:12:f5:3c:56:9a:cf:8a:15:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:52 2026 GMT
Not After : Apr 17 12:02:52 2027 GMT
Subject: CN=EE71DB5E8816DC0EB967C67E1BA5A046245C8208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:4b:1e:83:2e:32:cf:c5:d8:b7:c4:e2:49:
a4:53:71:79:fa:0c:9d:96:28:48:e5:ae:61:4f:68:
e0:b9:5c:26:4c:90:e7:3b:37:64:9b:30:9b:c0:2f:
6d:3c:8e:17:f3:f0:93:c3:1f:0e:a4:46:d3:90:81:
d7:18:de:11:26:36:67:10:1a:40:0e:a7:61:79:b5:
34:b8:d6:19:77:6e:43:92:da:0a:1e:3d:17:10:81:
aa:64:d6:2e:18:fc:f2:bb:b8:23:f5:e4:ca:fe:c6:
95:bd:7a:f5:5e:5b:fa:52:8d:0b:46:e9:a1:ac:3f:
46:6e:05:1a:27:58:13:63:5e:a5:cb:cd:cb:97:1a:
9e:c3:7d:c7:37:35:f8:ea:e8:70:e9:0a:59:a5:bc:
45:18:d7:78:c4:42:15:52:fa:6b:18:05:d4:e1:57:
1c:26:25:0c:59:5c:b9:ba:45:5e:70:34:ce:80:09:
ba:0c:21:3e:2e:8e:92:7c:53:41:df:0a:78:fb:7d:
63:b6:ee:cc:e5:53:b4:d9:71:ff:36:9c:ff:5c:8a:
da:7c:ac:35:65:d4:03:10:8b:ea:f9:a0:df:94:14:
56:38:2c:3f:16:6d:a5:e6:a3:47:71:c7:90:c3:f8:
cc:c9:7d:67:41:d3:06:03:17:42:ef:70:c3:08:db:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:71:DB:5E:88:16:DC:0E:B9:67:C6:7E:1B:A5:A0:46:24:5C:82:08
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36382e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.68.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0d:9d:98:bc:56:84:ed:e1:13:9b:7d:53:83:56:38:71:29:
35:2a:c4:a1:5f:92:9d:b2:92:e9:b5:4a:bb:c4:f5:5a:6a:13:
40:ed:6b:7b:4d:a2:c8:28:ed:82:e9:d5:f7:c6:79:b1:5f:8a:
8c:64:e0:9d:b9:23:33:1c:8d:88:4e:68:75:74:65:03:9a:7c:
95:2d:b0:04:2a:4e:eb:7d:b1:e9:05:e0:61:85:13:3a:1f:93:
3c:f0:f8:77:bf:72:38:e1:2d:62:26:43:c5:1d:69:7b:00:fc:
7d:41:65:ae:a0:94:12:ba:cc:07:68:ac:f5:f0:0b:38:5d:d6:
62:bb:64:00:43:d3:4e:65:bb:51:38:43:09:58:f4:4f:53:00:
d6:29:90:a8:89:cc:ae:dc:1b:fd:2d:9f:78:9b:de:32:c4:a2:
9b:eb:c2:17:e7:a9:8d:16:5e:46:10:c8:a1:93:c8:ef:33:09:
c6:cb:ef:bd:30:7e:3d:2c:fc:e8:5c:ef:c1:03:55:2a:88:50:
01:f7:d7:f8:6b:92:ab:0a:c0:ba:7d:c2:0e:8f:9a:cc:48:52:
d1:72:8a:a7:8d:fd:f0:91:38:35:1b:70:1f:73:f6:12:e4:7c:
55:49:ab:4e:5c:81:ab:58:f1:e7:49:5d:97:28:cf:4e:99:a1:
0f:5e:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:18 2026 by rpki-client