Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e392e302f32342d3234203d3e203137363731.roa
File: 3230322e35322e392e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: wWuFTwQzz1vS0gl4PiK5ddWkqSyDMi0Axl9pODxMNQw=
Subject key identifier: AA:A7:D3:2B:3E:AC:85:70:4B:41:F5:1B:09:6B:8A:24:6E:93:42:28
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 5EE43D2CF48C7000AD813AC74A4F500877281570
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e392e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:51 +0000
ROA not before: Sat 18 Apr 2026 11:57:51 +0000
ROA not after: Sat 17 Apr 2027 12:02:51 +0000
asID: 17671
IP address blocks: 202.52.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e4:3d:2c:f4:8c:70:00:ad:81:3a:c7:4a:4f:50:08:77:28:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:51 2026 GMT
Not After : Apr 17 12:02:51 2027 GMT
Subject: CN=AAA7D32B3EAC85704B41F51B096B8A246E934228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:62:d3:5c:b4:7d:b7:f5:67:da:a0:f6:38:
f1:65:e8:a9:92:d6:ea:ca:94:75:5d:5c:05:6f:00:
ad:7e:55:8e:4d:ea:af:c3:d9:5a:18:be:54:b1:30:
7f:a9:33:a6:31:1e:6a:43:b0:70:c1:5e:02:f4:bf:
12:ad:1e:1b:7c:ac:bf:21:1e:40:76:aa:f3:9e:bd:
54:bd:90:4f:27:89:f5:91:c2:5e:f4:e7:39:71:cb:
61:91:5c:f7:93:54:cf:6f:ea:a6:a4:4e:49:a6:cb:
79:17:81:90:24:58:1d:cd:ba:cc:42:e4:91:18:02:
57:91:33:38:da:54:6a:09:09:0b:a2:d5:a5:02:16:
0a:b5:57:bd:a1:19:92:79:00:6c:81:7e:05:fc:8c:
54:78:39:d7:d2:27:a0:ce:dd:23:0f:81:5a:8e:ef:
3c:b4:e5:56:ad:f9:31:c3:2f:53:e9:c4:ec:f0:8e:
7d:96:73:6c:91:fd:c9:27:81:1c:c9:70:e5:b4:74:
fd:68:32:c8:da:df:15:2f:cb:f2:0f:af:1c:d8:d3:
c7:36:51:c3:8c:4a:a2:8b:8f:15:2f:1d:82:32:25:
23:46:b7:6a:a1:c1:6c:ba:f8:a6:45:e8:f5:2a:15:
c1:6c:0e:0f:37:23:d6:e9:ff:00:bb:4e:50:6b:66:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A7:D3:2B:3E:AC:85:70:4B:41:F5:1B:09:6B:8A:24:6E:93:42:28
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e392e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:28:d1:76:4d:4d:de:97:9a:8c:e2:d8:09:e5:29:06:fd:56:
24:9c:85:bf:4f:f5:23:86:5c:03:5a:8d:0d:77:3a:51:25:1b:
35:88:45:39:2b:36:7c:9f:f8:c0:dd:01:3a:05:9c:e2:e2:c4:
e5:58:e0:da:cd:e5:e1:09:ee:55:78:d5:8e:50:46:57:8a:db:
9e:9b:22:80:3a:b1:e0:12:e8:7a:e1:60:d5:68:4e:49:87:b7:
52:32:85:76:60:4a:78:ae:94:3b:52:b7:22:67:fa:be:f3:ac:
b7:5b:87:03:49:01:10:20:46:61:c4:5c:09:24:51:ba:46:cf:
ad:1a:17:c6:59:1f:7e:6f:1b:17:78:4b:48:e2:7c:e0:d1:94:
35:f8:b3:b1:bc:6d:5a:cc:f9:9f:47:45:7e:b5:35:2b:e1:68:
61:4b:da:f5:f7:06:8e:c9:ac:4a:76:b8:a0:75:07:77:50:d3:
ac:a4:88:0a:ea:1a:f3:a9:1f:0e:ff:bc:74:e8:46:ab:60:7d:
bb:66:80:24:b5:4e:b3:7b:e7:52:b3:ea:13:28:05:e1:6e:de:
4b:8b:d9:e3:1b:b0:61:d9:bc:dc:e5:df:71:95:55:1b:3a:19:
e6:de:fd:52:eb:15:7f:d7:33:5f:03:0c:17:6c:de:ab:c1:1e:
3e:b2:bb:27
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUXuQ9LPSMcACtgTrHSk9QCHcoFXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNjA0MTgxMTU3NTFaFw0yNzA0MTcxMjAyNTFaMDMxMTAvBgNV
BAMTKEFBQTdEMzJCM0VBQzg1NzA0QjQxRjUxQjA5NkI4QTI0NkU5MzQyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzL2LTXLR9t/Vn2qD2OPFl6KmS
1urKlHVdXAVvAK1+VY5N6q/D2VoYvlSxMH+pM6YxHmpDsHDBXgL0vxKtHht8rL8h
HkB2qvOevVS9kE8nifWRwl705zlxy2GRXPeTVM9v6qakTkmmy3kXgZAkWB3NusxC
5JEYAleRMzjaVGoJCQui1aUCFgq1V72hGZJ5AGyBfgX8jFR4OdfSJ6DO3SMPgVqO
7zy05Vat+THDL1PpxOzwjn2Wc2yR/ckngRzJcOW0dP1oMsja3xUvy/IPrxzY08c2
UcOMSqKLjxUvHYIyJSNGt2qhwWy6+KZF6PUqFcFsDg83I9bp/wC7TlBrZss3AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUqqfTKz6shXBLQfUbCWuKJG6TQigwHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNlYmYxMTYtZmUyYS00OTFiLWFh
YzgtMjIwZWFkMGI1NGUyLzAvMzIzMDMyMmUzNTMyMmUzOTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNAkwDQYJKoZIhvcNAQEL
BQADggEBALMo0XZNTd6Xmozi2AnlKQb9ViSchb9P9SOGXANajQ13OlElGzWIRTkr
Nnyf+MDdAToFnOLixOVY4NrN5eEJ7lV41Y5QRleK256bIoA6seAS6HrhYNVoTkmH
t1IyhXZgSniulDtStyJn+r7zrLdbhwNJARAgRmHEXAkkUbpGz60aF8ZZH35vGxd4
S0jifODRlDX4s7G8bVrM+Z9HRX61NSvhaGFL2vX3Bo7JrEp2uKB1B3dQ06ykiArq
GvOpHw7/vHToRqtgfbtmgCS1TrN751Kz6hMoBeFu3kuL2eMbsGHZvNzl33GVVRs6
Gebe/VLrFX/XM18DDBds3qvBHj6yuyc=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:17 2026 by rpki-client