Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37302e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: zpol3O4PWVTW85j8BU84T760sn3T8EXc651QdBfZDJM=
Subject key identifier: 9B:34:7F:57:7E:34:54:BC:E7:B8:A6:99:66:B4:69:41:33:8C:89:F4
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 4CFE080990C2D7EC4B66EB926104EC6753971E4C
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:50 +0000
ROA not before: Sat 18 Apr 2026 11:57:50 +0000
ROA not after: Sat 17 Apr 2027 12:02:50 +0000
asID: 17671
IP address blocks: 202.47.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:08:09:90:c2:d7:ec:4b:66:eb:92:61:04:ec:67:53:97:1e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:50 2026 GMT
Not After : Apr 17 12:02:50 2027 GMT
Subject: CN=9B347F577E3454BCE7B8A69966B46941338C89F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:be:41:a3:85:f6:25:04:47:85:67:b1:ad:
70:13:9d:eb:33:b8:66:40:70:ec:1f:f0:c8:c3:e2:
66:34:68:c4:fd:fb:5d:83:64:27:db:84:94:55:9f:
f2:2e:b8:92:01:f0:d3:9c:0a:0a:e1:ca:21:5f:b8:
1b:70:71:08:2c:5b:fb:ad:62:e9:ed:74:d0:71:c8:
2f:16:e3:f8:e1:0d:c5:77:c9:d1:b4:27:68:47:71:
aa:c0:e3:69:74:b8:e5:f4:01:bb:f1:0d:66:6e:a6:
1f:64:3f:ed:f2:a4:bb:4f:8d:2d:92:8c:db:e8:2b:
67:a4:fc:e9:5a:1c:eb:03:0c:7b:0a:2b:3d:0a:93:
b9:5a:88:d1:59:5a:99:b7:79:68:68:f5:13:f4:6c:
4a:1d:4e:64:f6:6f:71:80:bb:75:a7:5e:33:67:cc:
53:e4:eb:83:a0:45:1d:90:50:1d:4b:28:d8:d6:13:
d0:22:a4:b8:63:4e:98:da:eb:8d:e0:47:cb:cb:41:
93:12:07:d5:1d:10:e9:11:4c:e3:ae:e9:34:77:a0:
2a:01:c0:e7:df:cf:6e:12:6c:75:85:cb:b9:9a:5c:
9a:45:d3:5b:ee:af:20:71:d8:89:04:37:84:6b:15:
d6:88:ba:e2:7b:b4:bc:0b:5a:1a:bc:b5:f0:bc:1e:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:7F:57:7E:34:54:BC:E7:B8:A6:99:66:B4:69:41:33:8C:89:F4
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ca:af:61:d1:39:b6:cc:ca:da:b1:c2:9d:00:c9:38:6d:58:
54:27:ad:d4:af:fb:ec:62:25:03:70:19:49:75:a2:92:14:4a:
9b:96:53:44:4f:83:b5:44:7a:b5:ba:2b:69:16:74:3d:c0:8e:
ff:e3:bd:e8:1b:86:f6:b9:f6:4f:64:e5:c3:9d:74:6c:4d:4a:
12:76:40:83:61:fd:11:7e:9a:f7:16:64:92:e0:ce:d6:00:dd:
30:ae:d2:e7:43:b0:e0:0b:f1:bd:18:c0:55:d7:bf:9c:64:9c:
bd:eb:b1:ad:aa:27:15:13:0d:d3:29:11:c3:a6:33:b0:3c:a4:
40:8f:5e:28:4d:4d:ea:24:99:ab:bc:f9:f2:9d:5c:1c:2e:bc:
11:73:f5:b8:17:06:c7:eb:15:8a:e5:46:63:11:04:26:95:05:
5f:bc:cf:e3:cb:52:32:73:74:98:af:9f:c6:c8:17:0b:95:b8:
fc:92:c0:2c:71:09:8a:5a:ea:92:4c:30:58:94:c7:7c:e8:06:
e4:f6:43:5c:5e:8c:1f:c7:d9:4e:42:c8:98:f2:0f:61:24:cb:
ad:e9:77:57:70:18:d6:02:d6:f2:a5:f1:d5:1e:e1:31:de:ff:
95:d6:09:41:b1:bb:af:d9:0e:20:81:ef:62:3c:2a:f2:5e:55:
d8:46:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:08 2026 by rpki-client