Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37352e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: mX+XfkSE0LGLg3swBe2qdDOWu5Yh27XNPsH9vs5i9v8=
Subject key identifier: 50:5A:88:FA:51:B5:45:FE:2F:CF:0C:50:1E:DF:52:25:A3:A1:67:61
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 06CC195801BEBBB5CE12EAC194136000ED80139A
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:51 +0000
ROA not before: Sat 18 Apr 2026 11:57:51 +0000
ROA not after: Sat 17 Apr 2027 12:02:51 +0000
asID: 17671
IP address blocks: 202.47.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:cc:19:58:01:be:bb:b5:ce:12:ea:c1:94:13:60:00:ed:80:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:51 2026 GMT
Not After : Apr 17 12:02:51 2027 GMT
Subject: CN=505A88FA51B545FE2FCF0C501EDF5225A3A16761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:2c:45:c4:65:2d:32:c1:4e:5c:64:9d:33:
4f:0e:0b:76:9f:7f:91:0b:89:c8:f0:27:76:7b:1e:
ae:47:84:0d:12:eb:a8:36:bb:25:d0:3d:38:a9:ec:
04:56:e4:1c:a3:f0:44:72:1b:cd:36:d9:f1:90:45:
36:7a:0e:64:f1:66:4b:ed:c1:c4:cd:ff:16:cc:5f:
1d:ad:76:21:b0:78:2d:98:5e:00:b5:52:f8:59:5c:
f5:c0:68:9a:13:d2:13:16:3d:40:53:8d:2b:03:1b:
67:55:67:ac:9c:87:b8:64:36:ed:17:02:89:2b:4c:
fb:3c:4b:2c:f4:4b:90:80:9f:74:13:f1:31:f4:5d:
2b:b0:fc:f9:48:26:4e:54:d3:5f:06:b2:05:a2:70:
fd:af:8c:96:4e:ec:b5:7c:7f:a9:ab:09:48:4d:c7:
97:10:3d:f7:74:10:6b:94:de:ae:7a:7e:37:26:15:
bb:69:0f:c1:d4:d6:1c:d1:2d:57:97:f2:13:49:b3:
d6:f4:b1:3c:ec:35:37:da:48:ef:fe:ed:f3:6a:2b:
35:9f:49:5a:2a:be:d0:b1:b7:e0:3a:ad:63:70:26:
98:4f:6a:0f:d4:d4:fd:64:83:e3:1b:84:6c:0f:e2:
9a:1e:cb:cf:04:15:52:5f:13:b8:a2:99:44:a2:45:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:88:FA:51:B5:45:FE:2F:CF:0C:50:1E:DF:52:25:A3:A1:67:61
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.75.0/24
Signature Algorithm: sha256WithRSAEncryption
08:60:1e:1e:47:5e:9f:6d:69:4b:4b:45:12:46:2d:82:02:bf:
e7:18:27:fa:9b:f8:d4:8f:41:ae:a8:cc:78:00:52:37:d8:1a:
42:5b:a5:f1:00:d3:8e:a2:08:a6:33:fc:d2:85:ee:09:73:29:
37:c8:25:b2:74:19:93:e7:c0:d8:16:cb:aa:0b:e5:96:8b:8b:
1e:01:cb:3a:98:00:c0:04:c2:52:9f:ca:ed:8b:fc:53:cb:de:
a9:e9:da:b1:5b:9b:a9:b0:e4:3c:83:8c:d0:c5:97:84:ab:2b:
c0:1b:ed:ea:17:a9:72:fc:01:47:dc:4e:1b:f9:be:ef:fb:01:
22:8c:ac:af:54:91:52:d1:37:a6:4d:48:85:eb:89:a5:a1:a9:
a9:42:0e:a8:6c:29:1e:d2:d2:d1:2c:ae:db:1c:23:5c:e1:dc:
0e:1f:ed:a8:3e:b9:db:d3:03:2a:45:4f:9b:27:ac:54:9b:ec:
22:49:88:e8:d5:e6:d1:2a:15:97:c2:98:45:a5:a2:92:3e:52:
2a:fa:82:b4:36:2f:c8:39:d5:0e:28:dc:47:b1:22:a5:c1:fa:
41:a3:71:d7:de:ff:1c:e5:3a:80:40:be:74:c1:b5:9a:80:15:
a9:4c:f9:23:c8:5b:d2:2b:14:05:02:00:45:00:72:2b:fc:79:
bd:b8:d4:01
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUBswZWAG+u7XOEurBlBNgAO2AE5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNjA0MTgxMTU3NTFaFw0yNzA0MTcxMjAyNTFaMDMxMTAvBgNV
BAMTKDUwNUE4OEZBNTFCNTQ1RkUyRkNGMEM1MDFFREY1MjI1QTNBMTY3NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNyxFxGUtMsFOXGSdM08OC3af
f5ELicjwJ3Z7Hq5HhA0S66g2uyXQPTip7ARW5Byj8ERyG8022fGQRTZ6DmTxZkvt
wcTN/xbMXx2tdiGweC2YXgC1UvhZXPXAaJoT0hMWPUBTjSsDG2dVZ6ych7hkNu0X
AokrTPs8Syz0S5CAn3QT8TH0XSuw/PlIJk5U018GsgWicP2vjJZO7LV8f6mrCUhN
x5cQPfd0EGuU3q56fjcmFbtpD8HU1hzRLVeX8hNJs9b0sTzsNTfaSO/+7fNqKzWf
SVoqvtCxt+A6rWNwJphPag/U1P1kg+MbhGwP4poey88EFVJfE7iimUSiRSHxAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUUFqI+lG1Rf4vzwxQHt9SJaOhZ2EwHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0swDQYJKoZIhvcN
AQELBQADggEBAAhgHh5HXp9taUtLRRJGLYICv+cYJ/qb+NSPQa6ozHgAUjfYGkJb
pfEA046iCKYz/NKF7glzKTfIJbJ0GZPnwNgWy6oL5ZaLix4ByzqYAMAEwlKfyu2L
/FPL3qnp2rFbm6mw5DyDjNDFl4SrK8Ab7eoXqXL8AUfcThv5vu/7ASKMrK9UkVLR
N6ZNSIXriaWhqalCDqhsKR7S0tEsrtscI1zh3A4f7ag+udvTAypFT5snrFSb7CJJ
iOjV5tEqFZfCmEWlopI+Uir6grQ2L8g51Q4o3EexIqXB+kGjcdfe/xzlOoBAvnTB
tZqAFalM+SPIW9IrFAUCAEUAciv8eb241AE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:09 2026 by rpki-client