Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231362e302f32312d3234203d3e203137363731.roa
File: 3230322e35382e3231362e302f32312d3234203d3e203137363731.roa (raw, json)
Hash identifier: kVCdIV9EyGZn2yUDC26mugRgk1Cf4bzNz8Ch/1U8bHY=
Subject key identifier: 15:60:61:85:C0:84:38:F7:C6:1C:09:66:9C:07:EA:A6:14:D2:75:A2
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 2B139395A03116992DB6656F4E95A3DA5CC71725
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231362e302f32312d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:51 +0000
ROA not before: Sat 18 Apr 2026 11:57:51 +0000
ROA not after: Sat 17 Apr 2027 12:02:51 +0000
asID: 17671
IP address blocks: 202.58.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:13:93:95:a0:31:16:99:2d:b6:65:6f:4e:95:a3:da:5c:c7:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:51 2026 GMT
Not After : Apr 17 12:02:51 2027 GMT
Subject: CN=15606185C08438F7C61C09669C07EAA614D275A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:16:5f:c8:90:bb:a0:16:c2:37:69:c3:f8:
86:17:dc:69:56:87:ee:cc:ae:17:ac:46:95:0e:ab:
3d:3e:db:9a:78:e2:9b:4f:03:7d:fd:c3:23:b3:58:
a4:a0:ab:c7:2a:02:f7:53:e1:e6:63:dc:45:06:0d:
34:67:d1:75:29:f6:34:a1:da:b4:44:4d:a0:49:2a:
d9:b7:fa:8d:1c:88:29:4b:69:b7:70:73:2e:ca:d6:
e7:0c:ca:8a:d4:b5:29:a1:0a:83:2f:80:5c:40:bd:
e7:ce:22:17:c5:29:6b:dc:91:11:2b:9c:01:27:4f:
68:c9:e5:44:21:f2:c1:a1:0c:84:85:27:1a:a0:2a:
22:64:d7:f7:18:72:40:87:47:4e:3c:04:f4:67:2a:
d8:73:9d:25:1d:29:e0:83:a6:be:d7:1e:0c:79:4f:
88:f4:de:af:c3:73:36:fd:50:88:27:06:47:63:f3:
07:a1:65:9e:58:ff:f4:e7:8f:b5:d1:52:34:f8:43:
3c:8c:8d:37:34:c2:1b:3a:85:3c:ab:3b:0d:55:c3:
b6:6e:5f:aa:ba:90:23:9f:be:ac:5c:d8:0e:90:d5:
ec:26:9c:9b:40:a7:36:23:64:c2:a3:18:73:62:05:
15:a3:5a:9e:5c:74:dd:7a:9d:dd:c1:c5:8f:06:57:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:61:85:C0:84:38:F7:C6:1C:09:66:9C:07:EA:A6:14:D2:75:A2
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231362e302f32312d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.58.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:16:e0:70:79:b5:35:a1:51:5a:78:06:1a:9a:3c:2e:d0:54:
2a:5a:bb:5d:63:1f:7c:b6:d2:ff:8a:25:18:d4:d2:06:23:4b:
f8:d9:f6:b1:48:7e:a6:65:4d:ae:bf:b2:fe:6e:5b:7d:d9:bb:
1f:db:74:6a:2c:d3:c2:f0:5f:14:6b:4b:f4:c3:2c:01:6e:48:
b6:a1:fb:2b:58:79:e4:65:4a:d3:7a:d7:5a:f3:03:84:51:c1:
ee:db:93:6e:e4:d3:40:24:6c:05:a2:8c:9e:5a:ef:e8:3b:ae:
9a:c2:e4:b6:36:a5:46:e3:e5:04:e5:e1:d7:7a:e2:96:56:ae:
e0:b3:60:66:be:0b:67:30:a7:83:4d:3d:f0:58:29:53:c8:24:
1b:e9:71:56:7e:0d:a9:0d:10:84:1f:7d:f4:28:81:99:41:d1:
44:a0:9a:e5:b9:07:b8:f0:fe:51:c2:c5:2e:42:2d:60:ee:73:
ba:d7:c1:9e:9a:d0:21:9a:38:f7:21:f6:31:92:e0:7a:e9:41:
ea:05:13:a9:d9:61:70:1c:f8:42:6e:0e:3e:64:0f:26:9b:b2:
f5:ba:2b:cb:6a:c2:49:4c:08:82:9f:aa:95:e7:bb:f4:20:83:
bb:66:ef:54:ca:6d:21:81:2f:ad:9c:7f:57:47:9e:b7:5f:03:
74:89:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:16 2026 by rpki-client