Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231372e302f32342d3234203d3e203137363731.roa
File: 3230322e35382e3231372e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: X5X8nOoeI/Ko/Dg6sfJN5nk+cZuR7D2oYD+IxI/UQB4=
Subject key identifier: 69:30:2F:C4:66:5E:24:77:76:F6:56:4A:70:D7:30:81:38:A8:99:F2
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 2E5AA25D24A4D6635E8BBDDFF8702A89208C6C92
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231372e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:52 +0000
ROA not before: Sat 18 Apr 2026 11:57:52 +0000
ROA not after: Sat 17 Apr 2027 12:02:52 +0000
asID: 17671
IP address blocks: 202.58.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5a:a2:5d:24:a4:d6:63:5e:8b:bd:df:f8:70:2a:89:20:8c:6c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:52 2026 GMT
Not After : Apr 17 12:02:52 2027 GMT
Subject: CN=69302FC4665E247776F6564A70D7308138A899F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:49:67:63:bf:58:ed:da:1c:f1:a2:72:3c:
ee:9b:ff:3a:12:a0:c6:5c:f5:4c:c8:be:b8:5e:6a:
0d:dc:2d:3a:23:d4:d1:34:93:79:17:b7:54:e1:bf:
e5:b4:30:eb:72:49:f4:3e:e9:41:3e:1f:d8:68:62:
cd:86:46:5c:70:42:04:87:b1:33:e4:ac:83:34:b6:
c3:ca:09:f3:e1:88:10:2f:3c:60:9d:5d:b8:d5:f5:
f2:ed:3f:9b:63:61:34:e0:e1:26:56:c1:92:41:b3:
94:32:84:78:52:d3:75:dc:0e:ec:15:2c:c9:3d:57:
a3:8b:3d:dd:13:91:f9:d2:b8:c8:8d:cd:1e:b6:71:
92:9b:be:6e:43:c5:9f:fb:22:42:a2:43:14:c3:c5:
3e:7a:e7:8e:81:a2:51:ad:f5:43:93:6b:c3:87:90:
b3:5c:42:94:f4:2f:f9:9c:1e:07:61:42:fc:0a:b1:
83:84:9d:55:6f:07:8f:fe:32:ba:e8:b8:6b:c8:e0:
7a:7c:56:af:98:2d:1e:fb:bc:60:e3:e1:50:36:ca:
d6:29:c0:c5:6e:c5:c6:a6:ba:07:d2:dd:0f:be:3b:
c4:f8:5d:89:fe:2b:5b:9a:ae:b5:90:ed:92:b6:26:
ea:ef:23:89:56:82:b9:5c:bb:b8:65:99:80:a7:c4:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:2F:C4:66:5E:24:77:76:F6:56:4A:70:D7:30:81:38:A8:99:F2
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231372e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.58.217.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:bb:ac:a5:8c:e3:29:a6:f4:bb:05:d0:89:cb:5d:34:40:c6:
2b:e8:27:5a:7d:25:22:21:d4:63:f6:36:c6:bb:e1:1d:d6:44:
69:4d:79:76:a2:39:65:83:65:87:39:dd:fe:75:c7:9d:4f:06:
9b:d8:42:53:a3:b6:05:3e:cf:46:20:f1:44:e7:d4:e2:62:4d:
21:75:10:2c:77:59:70:2e:1a:a9:3a:04:b1:54:d0:c0:7d:ef:
80:4b:f6:9f:d0:14:e3:c5:89:57:5f:2a:43:ad:d1:cc:c7:4c:
8b:a0:81:0e:9e:fc:56:42:f9:3e:4b:55:a6:f1:90:f8:9a:53:
fa:64:1f:27:c5:ce:36:32:24:b9:74:1d:05:84:30:fd:60:14:
c0:82:b6:52:12:69:75:33:08:0d:4c:9e:7b:ab:42:3a:5f:54:
64:53:42:e7:6e:c1:48:2c:46:76:71:86:2b:50:72:05:96:a8:
21:f5:f9:08:56:03:a3:28:10:e9:81:82:22:e3:1c:ce:d2:b9:
94:b0:8e:1c:dc:9b:03:7e:b2:70:d4:e6:f9:1e:c4:dd:7e:32:
dd:5c:9a:34:4b:bc:63:3f:91:7e:d2:f4:19:30:f6:0f:fe:9a:
2c:f1:85:7c:f3:d0:ba:79:dc:17:2d:4d:ab:98:0a:27:7d:5d:
4e:cf:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:16 2026 by rpki-client