Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37342e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37342e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: f2rveleSvYXXO7Gwf8lj0C1x2vhaWA4174zBTplj7Qo=
Subject key identifier: 48:44:C8:25:FB:28:CC:DF:FF:CC:AC:0B:37:96:96:1E:6D:C2:90:F3
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 7C4651E340FF764B356983F354B51158BD700A0D
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37342e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:47 +0000
ROA not before: Sat 18 Apr 2026 11:57:47 +0000
ROA not after: Sat 17 Apr 2027 12:02:47 +0000
asID: 17671
IP address blocks: 202.47.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:46:51:e3:40:ff:76:4b:35:69:83:f3:54:b5:11:58:bd:70:0a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:47 2026 GMT
Not After : Apr 17 12:02:47 2027 GMT
Subject: CN=4844C825FB28CCDFFFCCAC0B3796961E6DC290F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:96:5d:c5:81:f9:42:31:26:e2:f8:2e:0b:ab:
17:c0:c4:31:9c:7f:31:96:48:6c:f3:12:8a:81:b9:
ba:d8:2f:db:01:45:bb:e3:64:e1:71:3a:53:39:bc:
50:ae:c5:7e:fc:14:a2:09:7e:ac:ba:23:56:dc:a0:
3f:8c:ed:2d:6f:95:22:69:f1:0a:18:7b:f9:71:e8:
66:76:63:e7:a9:4e:45:50:63:00:15:db:ef:eb:68:
e8:37:80:32:03:d0:57:f2:29:27:71:05:17:72:c0:
5f:d8:10:3b:35:36:8f:04:9a:91:62:7a:39:1a:7d:
63:e5:46:ba:af:8f:4b:e3:58:73:32:60:13:0f:78:
45:b1:2a:23:4b:6f:7b:62:fb:98:8b:72:80:c8:22:
ff:d5:54:24:7b:93:f2:22:03:7e:57:6c:b8:f8:5a:
04:11:d0:d0:5f:8e:ce:a5:de:b7:65:c7:ad:b7:b0:
d5:d4:49:5f:4f:88:90:a3:02:37:62:5d:e2:99:05:
58:79:93:f0:fd:e3:b1:df:bb:bf:57:c5:ad:88:7a:
d6:66:1f:15:5e:91:16:c9:b9:e6:b8:53:f9:18:19:
15:5e:d2:e1:26:47:13:f9:99:51:d3:14:0e:13:f0:
1e:3e:c5:f4:30:f0:f6:07:6e:5a:28:ab:5b:26:a7:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:C8:25:FB:28:CC:DF:FF:CC:AC:0B:37:96:96:1E:6D:C2:90:F3
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37342e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d3:e6:a2:a7:84:3c:3c:aa:54:0a:18:55:16:22:d7:c2:1c:
22:f7:cd:79:ba:3e:5e:64:8b:23:87:94:3f:3a:11:33:7c:73:
c7:58:c7:d3:a9:55:71:d0:e3:e0:e8:14:0e:6d:84:5c:f7:83:
cd:82:b5:84:22:a6:b7:90:aa:4a:cc:20:71:22:98:50:41:1f:
3d:53:bf:bb:df:78:f5:ac:65:05:fb:41:a0:eb:31:ee:58:4c:
1d:2b:f9:79:c8:c6:d0:a1:74:cf:2e:ac:11:2e:17:ca:7c:79:
28:f9:eb:9c:c8:66:f8:ac:02:56:d9:5d:c7:66:37:62:9f:22:
32:5a:ab:72:ee:c7:85:ab:05:42:cc:82:93:8a:6e:8e:4e:aa:
4f:79:b7:86:a9:4e:3e:5f:1b:fb:4f:2e:d3:ab:9f:3a:11:12:
64:99:ea:ec:01:31:9e:57:9f:68:27:bf:bb:c7:d9:eb:2e:31:
47:8a:b7:d7:97:7c:ed:58:bc:75:ae:ea:20:31:ab:22:eb:65:
3c:0b:e9:e7:2a:5b:71:1f:14:f6:4c:df:e6:4b:f5:cb:2e:a0:
bb:d5:83:16:89:7e:4a:33:bd:b5:3d:29:c9:33:6d:de:14:30:
aa:9a:e6:6f:c7:bb:8b:7a:94:65:4b:81:9f:8e:81:06:6a:28:
5e:a0:86:08
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUfEZR40D/dks1aYPzVLURWL1wCg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNjA0MTgxMTU3NDdaFw0yNzA0MTcxMjAyNDdaMDMxMTAvBgNV
BAMTKDQ4NDRDODI1RkIyOENDREZGRkNDQUMwQjM3OTY5NjFFNkRDMjkwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ll3FgflCMSbi+C4LqxfAxDGc
fzGWSGzzEoqBubrYL9sBRbvjZOFxOlM5vFCuxX78FKIJfqy6I1bcoD+M7S1vlSJp
8QoYe/lx6GZ2Y+epTkVQYwAV2+/raOg3gDID0FfyKSdxBRdywF/YEDs1No8EmpFi
ejkafWPlRrqvj0vjWHMyYBMPeEWxKiNLb3ti+5iLcoDIIv/VVCR7k/IiA35XbLj4
WgQR0NBfjs6l3rdlx623sNXUSV9PiJCjAjdiXeKZBVh5k/D947Hfu79Xxa2IetZm
HxVekRbJuea4U/kYGRVe0uEmRxP5mVHTFA4T8B4+xfQw8PYHblooq1smp87LAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUSETIJfsozN//zKwLN5aWHm3CkPMwHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0owDQYJKoZIhvcN
AQELBQADggEBAI3T5qKnhDw8qlQKGFUWItfCHCL3zXm6Pl5kiyOHlD86ETN8c8dY
x9OpVXHQ4+DoFA5thFz3g82CtYQipreQqkrMIHEimFBBHz1Tv7vfePWsZQX7QaDr
Me5YTB0r+XnIxtChdM8urBEuF8p8eSj565zIZvisAlbZXcdmN2KfIjJaq3Lux4Wr
BULMgpOKbo5Oqk95t4apTj5fG/tPLtOrnzoREmSZ6uwBMZ5Xn2gnv7vH2esuMUeK
t9eXfO1YvHWu6iAxqyLrZTwL6ecqW3EfFPZM3+ZL9csuoLvVgxaJfkozvbU9Kckz
bd4UMKqa5m/Hu4t6lGVLgZ+OgQZqKF6ghgg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:08 2026 by rpki-client