Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37392e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37392e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: uWF+ipDFeVTxr5fkHu/vNOViY9kSjxl22IDBL0wFim0=
Subject key identifier: 47:AE:C1:3B:9D:5E:02:CF:5E:D8:45:E8:DE:D3:91:33:9C:26:31:7B
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 18280A050EC10BC9E7D53EE6C5D2A26F4CB43CAB
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37392e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 202.47.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:28:0a:05:0e:c1:0b:c9:e7:d5:3e:e6:c5:d2:a2:6f:4c:b4:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=47AEC13B9D5E02CF5ED845E8DED391339C26317B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:89:3d:3e:49:f5:fc:1e:73:68:5e:39:7b:f0:
30:18:4f:fc:0c:e7:dd:9e:38:cf:9e:38:24:3c:66:
96:25:f5:34:a4:7f:b7:ac:0c:c8:a5:44:e5:3f:aa:
7c:f8:1c:57:48:dd:9f:ff:ec:a2:a1:b7:0b:35:be:
02:c7:00:19:be:62:63:47:af:9f:43:f2:cc:88:e8:
f7:f0:ea:d2:a6:a5:aa:f7:b7:bf:0e:17:77:d5:49:
bc:e6:74:da:26:20:e1:50:c1:13:6d:ce:e0:86:b8:
4a:eb:0b:7c:39:c3:1b:a7:23:f2:b5:a6:6a:17:fa:
d5:5b:a8:40:b2:3d:93:71:31:96:a1:7b:c3:b6:7a:
fb:77:74:b4:fa:99:53:19:63:66:23:e6:53:d0:b1:
ba:34:09:92:5f:21:ab:2a:15:1e:95:43:13:63:f4:
80:d3:e1:67:cb:45:34:e6:e3:1b:87:43:6c:e6:6c:
88:19:e7:b2:b9:e8:15:92:a4:6d:68:8d:e8:46:44:
0f:92:21:44:7d:ee:51:7f:cb:b0:a7:47:97:7d:99:
49:4a:91:5b:d8:42:f4:b4:c0:50:6f:3a:3c:7a:3e:
ef:6e:4e:e1:1f:45:13:50:3c:c4:1b:66:a4:3f:27:
d7:f4:ef:b6:88:29:17:2c:51:86:d5:a3:96:a4:e7:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:C1:3B:9D:5E:02:CF:5E:D8:45:E8:DE:D3:91:33:9C:26:31:7B
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37392e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.79.0/24
Signature Algorithm: sha256WithRSAEncryption
05:08:e5:cc:32:36:9b:e0:de:a1:cc:2c:d5:5a:42:17:70:7b:
f4:59:70:a1:82:99:e4:8b:53:24:65:d6:e1:95:37:d2:ce:6d:
28:2c:19:6f:da:d2:10:63:0d:4f:28:85:64:9e:e4:c9:49:3c:
54:ff:ba:86:e3:70:ba:47:54:bd:c2:82:4c:c3:36:c1:77:c0:
81:87:85:67:79:90:3f:6e:2a:09:13:c8:84:73:d7:c7:bf:a7:
b8:68:f2:1d:03:1c:3b:b4:5a:34:69:95:1a:cc:51:d0:ee:c9:
60:22:29:d1:90:62:e6:ed:82:ee:63:d2:0b:0b:e8:95:9c:dd:
83:7c:48:33:34:4e:0c:c6:ca:12:fd:1a:6b:01:85:8c:90:a1:
41:9e:cd:a1:1f:a6:5c:9a:eb:d1:8c:4e:36:84:58:81:25:b8:
3a:f2:6e:51:1c:b6:51:0d:ce:05:ed:5b:3a:e6:60:d4:96:a2:
c2:74:b3:2b:f2:72:e9:22:db:e5:bf:1f:2d:a6:2c:c5:63:b8:
66:3c:38:ba:50:39:1f:25:26:50:ee:47:98:94:3f:9c:5a:6c:
b8:11:13:49:52:7f:65:60:b9:f7:eb:33:32:cc:cb:ba:28:e5:
be:b8:34:ee:c9:90:86:9c:15:17:46:1c:b7:20:8c:d5:97:f4:
01:8c:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:17 2026 by rpki-client