Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37382e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: AGF13xz66p4YW+yQjvcSnpb1n+OY8/dSEPlQ9nMLzTQ=
Subject key identifier: C1:99:3E:DE:88:55:B5:33:99:47:CB:76:D4:E3:E8:6F:D4:9B:AA:40
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 31150EA7F49ED3134A081B7B41F907FB8BE76F47
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:49 +0000
ROA not before: Sat 18 Apr 2026 11:57:49 +0000
ROA not after: Sat 17 Apr 2027 12:02:49 +0000
asID: 17671
IP address blocks: 202.47.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:15:0e:a7:f4:9e:d3:13:4a:08:1b:7b:41:f9:07:fb:8b:e7:6f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:49 2026 GMT
Not After : Apr 17 12:02:49 2027 GMT
Subject: CN=C1993EDE8855B5339947CB76D4E3E86FD49BAA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:af:dd:31:26:d2:7d:6c:cf:f7:c0:05:2f:
22:b6:d2:20:ce:1c:49:f5:a9:0c:db:94:00:5c:26:
5c:47:cc:4b:75:1d:09:ef:0f:91:eb:8b:77:c3:84:
9d:d6:51:95:4e:6d:fb:4a:b9:01:4e:63:9a:27:8b:
dc:50:04:64:20:3d:86:76:60:c4:21:55:f5:b1:e9:
03:3e:9f:15:b6:c8:26:34:c7:f1:ae:3d:0c:44:67:
aa:a5:6d:d4:83:84:12:f3:72:6e:75:1e:32:73:1a:
21:e3:6a:85:e7:f6:da:bd:a4:bb:1a:7d:82:b2:3d:
b0:80:c6:66:e3:03:38:68:1b:1d:f4:76:90:2d:5a:
15:af:e5:7f:4a:31:54:59:9a:a1:b3:7b:eb:59:40:
87:68:68:c2:8f:69:76:5b:f9:bb:40:87:b0:d0:32:
4e:e9:49:33:e1:b2:83:7f:44:dd:76:af:e7:c1:12:
d0:d0:ed:15:63:d3:24:86:86:c0:23:22:ab:4e:71:
9b:47:5c:a9:4a:44:cd:5e:5c:d0:49:b1:34:14:84:
7e:03:2b:03:97:26:74:b0:5b:d9:5e:da:b3:42:a4:
d6:53:9c:8b:7e:7a:aa:87:9c:9d:64:9a:4c:13:61:
56:74:41:63:7a:93:2e:c3:0f:35:b2:70:71:0c:6b:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:3E:DE:88:55:B5:33:99:47:CB:76:D4:E3:E8:6F:D4:9B:AA:40
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.78.0/24
Signature Algorithm: sha256WithRSAEncryption
30:33:d1:bc:fc:6e:25:08:f5:64:a3:32:4d:81:bc:fa:fb:d6:
37:9c:5b:37:af:64:8b:e1:31:20:87:a4:c2:bc:4e:ff:35:c6:
34:0a:41:6a:14:77:c0:cd:0c:91:5e:d5:13:01:30:0b:66:0d:
3b:0e:1b:6d:d3:d6:39:ce:67:70:f6:42:41:94:4c:38:34:f7:
97:74:1c:ad:a4:ae:ee:5a:f0:4f:ec:18:a3:14:37:52:3b:29:
ed:51:f4:96:76:da:8d:2c:4f:21:de:4c:dd:20:02:9d:ca:40:
c6:16:d8:d1:85:1c:89:c6:0b:ca:13:d0:9a:1f:43:96:ac:74:
67:03:30:0b:0d:e0:ae:dc:94:9b:43:ca:71:58:50:a2:bc:cd:
2e:9b:40:f6:f1:28:4d:81:36:ae:31:3f:aa:63:2b:56:10:82:
dd:de:66:1e:a6:44:1a:20:8e:6e:84:f6:22:a8:87:54:e6:2b:
07:6a:fa:88:e1:03:e6:f5:6d:b2:e5:04:0a:42:5d:b7:6e:2e:
13:0d:c1:25:8c:90:e1:e6:a1:8d:e1:c8:35:d6:33:25:2b:3a:
85:ec:1f:94:1e:fd:f5:39:51:67:94:76:1f:0a:9c:83:21:a0:
71:79:4c:a6:69:84:30:f2:85:c9:b1:c7:be:b8:ce:f3:0d:80:
ec:5d:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:17 2026 by rpki-client