Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37362e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: 19pkZrauU3GR8f5i3a7oFTpY5cQqRGgnN7MCz3tjQXI=
Subject key identifier: 48:BC:6D:B8:5A:3A:2C:DA:73:15:E7:33:55:7E:FD:B4:C2:74:84:C8
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 6B64CF9B2A91B03E8E82C630AC7DDD37EF613AAD
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 202.47.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:64:cf:9b:2a:91:b0:3e:8e:82:c6:30:ac:7d:dd:37:ef:61:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=48BC6DB85A3A2CDA7315E733557EFDB4C27484C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:64:d5:40:4a:52:27:bb:21:a4:01:66:d6:
4b:38:7d:0e:0a:ee:5b:95:59:0f:63:9a:71:82:8c:
a5:60:10:11:64:7f:6b:b9:a8:d5:3d:9e:4e:8d:87:
4e:63:99:06:29:0d:42:d4:06:ff:98:31:27:d3:25:
28:32:c1:1b:5f:33:47:85:da:5c:63:04:20:32:ec:
2d:8b:76:03:9e:f6:32:b9:2e:a2:78:ac:77:2c:99:
80:4c:83:5d:d7:da:cf:26:11:12:49:cf:00:e5:b3:
85:c3:7d:d3:bd:aa:b0:69:6f:80:e6:a8:a5:ff:88:
68:c9:ce:d5:0b:2c:09:be:78:ee:3a:c2:9e:3a:8c:
f5:74:0e:76:52:9f:eb:e3:ca:ba:72:71:3f:e2:76:
74:c7:cd:0f:a1:eb:7f:55:98:04:41:ec:0b:32:80:
74:5e:6f:d7:e5:dc:ca:c0:fb:1b:15:9d:02:ab:54:
70:db:24:07:9b:5a:27:8c:4e:15:72:12:fc:a3:39:
d5:af:6a:b3:17:67:8d:f9:07:69:b8:5d:ca:2e:01:
6a:c8:b3:9f:83:96:e9:92:30:38:61:dc:04:74:33:
63:64:88:fb:1b:b9:d9:2f:1f:13:cf:ee:f8:6e:e9:
d6:41:51:0b:a0:0d:47:d0:24:70:91:35:d3:d8:b0:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:6D:B8:5A:3A:2C:DA:73:15:E7:33:55:7E:FD:B4:C2:74:84:C8
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.76.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:91:d2:a9:a6:d3:0c:0e:77:52:32:58:cf:73:30:ba:b8:0d:
82:71:31:38:7d:8a:32:80:f9:9d:3e:c7:c4:aa:d3:a6:8c:aa:
56:ac:4e:a8:f0:bb:91:ca:6d:d5:b0:05:fd:c7:ec:f3:c2:0b:
c9:f6:b7:93:0a:ce:d4:21:bc:2c:eb:7e:11:22:37:bb:0b:cb:
b5:22:29:9d:18:2d:ec:b4:da:08:a2:e5:14:e6:37:e2:d4:67:
3b:80:fc:3d:dc:dd:79:d4:7d:69:bf:da:d0:61:85:f4:9d:a3:
b7:a7:23:18:4d:03:f0:58:a4:44:ba:a1:82:1e:76:c3:1e:bb:
b3:9c:3f:f2:21:18:e5:61:7d:7f:a8:6a:b0:0c:ba:f3:48:fe:
87:54:03:03:76:73:a3:3f:8a:60:e9:cb:76:09:e5:03:40:c8:
d8:52:c7:73:5f:29:02:ad:fd:25:61:a6:2a:3f:ad:3d:a1:6d:
99:df:58:71:56:ff:6f:22:a7:c0:0d:1d:e3:a9:ff:c1:ee:3b:
2b:e8:0a:92:7c:d6:e2:02:b5:d0:9e:d0:cf:f3:a9:e1:6f:1b:
a9:fe:00:a4:64:c4:16:fb:47:b6:03:60:97:29:c5:f0:a4:76:
75:25:e9:39:fd:99:d0:53:ba:9f:6e:4d:8a:46:8f:3c:e8:91:
18:d3:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:18 2026 by rpki-client