Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37322e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37322e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: uGexLun5AY1rPVlEn99ZWqsh5nQ8k2rkdmQ0+5UsaGQ=
Subject key identifier: 73:9F:E7:07:CA:CF:BA:F5:DE:53:EC:FF:20:B1:2A:98:32:AD:B2:6A
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 5E0C31394FD5E9E46B830DA85E5523A15AEBE99E
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37322e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:52 +0000
ROA not before: Sat 18 Apr 2026 11:57:52 +0000
ROA not after: Sat 17 Apr 2027 12:02:52 +0000
asID: 17671
IP address blocks: 202.47.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0c:31:39:4f:d5:e9:e4:6b:83:0d:a8:5e:55:23:a1:5a:eb:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:52 2026 GMT
Not After : Apr 17 12:02:52 2027 GMT
Subject: CN=739FE707CACFBAF5DE53ECFF20B12A9832ADB26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:0b:50:b5:40:4b:1b:21:51:46:04:18:f5:
65:e5:a0:ab:65:73:f4:b8:d4:5d:d6:8c:2d:bb:2e:
41:d4:fa:7c:49:54:f2:9f:91:45:04:84:2c:9f:8d:
a6:b1:a8:0f:af:e2:71:9e:fb:82:0d:d3:d5:8c:3e:
e8:af:dc:ad:2d:78:b9:a7:ba:8c:42:de:e3:a5:a6:
f5:71:65:5d:41:91:dd:e7:14:8c:a0:99:a9:94:7b:
f7:47:e0:05:30:af:00:79:6a:43:1d:20:94:16:de:
a9:b9:d3:b6:be:40:c2:44:cd:22:fb:de:12:a9:d8:
ce:b2:60:f5:b2:a6:7c:01:41:1e:01:e6:11:ef:48:
25:f5:47:51:d3:bf:9b:a2:c6:2b:de:36:14:5e:2b:
22:ba:9a:ee:d6:0b:9d:5f:11:e3:1b:27:d0:8d:08:
5b:0c:a8:79:8f:23:4c:8b:6e:27:4a:8e:bc:f9:76:
f9:eb:d5:59:16:8b:77:45:4c:30:d0:bd:bf:bc:8c:
4e:10:92:52:7e:56:78:bb:27:30:52:bc:9f:a6:63:
e1:14:b3:77:b8:6d:2a:8d:44:14:a4:cb:c3:e8:8c:
9f:7c:68:e6:87:62:f3:ff:9e:90:39:f0:51:22:8d:
5d:35:2b:9a:a7:f7:4a:c8:cb:85:7a:69:ed:06:ef:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:E7:07:CA:CF:BA:F5:DE:53:EC:FF:20:B1:2A:98:32:AD:B2:6A
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37322e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.72.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e7:4c:7d:1e:2d:5b:e3:6a:ae:29:d4:fb:db:8f:de:a8:d8:
28:8f:0f:56:b9:a3:6f:23:d6:78:b7:a4:f8:91:b7:17:99:18:
01:36:f8:cb:f4:0b:d0:e0:25:8e:7e:5e:28:db:32:3c:94:98:
e0:85:38:68:20:0f:3d:cf:dc:27:6f:fb:af:28:09:9c:cd:72:
1d:fa:04:da:90:49:59:4b:b1:48:5d:64:51:e7:b9:b0:5a:ba:
20:a3:af:60:e3:0a:72:43:e6:1c:c0:79:c7:03:0a:14:2e:26:
9a:6f:26:c2:75:f0:19:fd:4e:3e:d0:82:4c:43:21:8f:31:65:
f7:88:6a:cd:88:49:7b:ef:d3:de:e9:8c:c1:82:ee:7d:66:d7:
a7:64:e6:1e:08:f8:fa:f2:71:9c:85:50:fb:e8:52:38:5d:13:
2f:74:8f:2c:d4:7b:69:b6:49:61:9b:74:42:3a:e8:0b:c7:80:
25:bb:c9:d2:03:7f:9e:ee:24:e3:74:36:5a:58:f7:eb:82:a2:
2c:a3:38:f8:70:87:59:2a:31:ae:02:77:56:35:c6:ee:17:b6:
dc:76:eb:61:98:e5:54:f1:ef:e3:73:5b:a6:04:d3:b2:2d:0c:
9f:49:a0:cc:9a:a8:88:e8:c5:f8:22:be:c2:82:4c:93:d3:70:
2f:2b:13:8a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXgwxOU/V6eRrgw2oXlUjoVrr6Z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNjA0MTgxMTU3NTJaFw0yNzA0MTcxMjAyNTJaMDMxMTAvBgNV
BAMTKDczOUZFNzA3Q0FDRkJBRjVERTUzRUNGRjIwQjEyQTk4MzJBREIyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDAtQtUBLGyFRRgQY9WXloKtl
c/S41F3WjC27LkHU+nxJVPKfkUUEhCyfjaaxqA+v4nGe+4IN09WMPuiv3K0teLmn
uoxC3uOlpvVxZV1Bkd3nFIygmamUe/dH4AUwrwB5akMdIJQW3qm507a+QMJEzSL7
3hKp2M6yYPWypnwBQR4B5hHvSCX1R1HTv5uixiveNhReKyK6mu7WC51fEeMbJ9CN
CFsMqHmPI0yLbidKjrz5dvnr1VkWi3dFTDDQvb+8jE4QklJ+Vni7JzBSvJ+mY+EU
s3e4bSqNRBSky8PojJ98aOaHYvP/npA58FEijV01K5qn90rIy4V6ae0G73VbAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUc5/nB8rPuvXeU+z/ILEqmDKtsmowHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0gwDQYJKoZIhvcN
AQELBQADggEBAGDnTH0eLVvjaq4p1Pvbj96o2CiPD1a5o28j1ni3pPiRtxeZGAE2
+Mv0C9DgJY5+XijbMjyUmOCFOGggDz3P3Cdv+68oCZzNch36BNqQSVlLsUhdZFHn
ubBauiCjr2DjCnJD5hzAeccDChQuJppvJsJ18Bn9Tj7QgkxDIY8xZfeIas2ISXvv
097pjMGC7n1m16dk5h4I+PrycZyFUPvoUjhdEy90jyzUe2m2SWGbdEI66AvHgCW7
ydIDf57uJON0NlpY9+uCoiyjOPhwh1kqMa4Cd1Y1xu4Xttx262GY5VTx7+NzW6YE
07ItDJ9JoMyaqIjoxfgivsKCTJPTcC8rE4o=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:17 2026 by rpki-client