Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232322e302f32342d3234203d3e203137363731.roa
File: 3230322e35382e3232322e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: mB31tzb0dNj/BNnZXzCKGswrERpkYkHAfq4bluKTT+8=
Subject key identifier: 8B:13:B9:2F:2D:4F:40:41:5C:35:45:8E:15:00:9D:F3:10:F6:FA:2A
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 23A7553EB799FDA3C4807F55D8A77B8D0A90B331
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232322e302f32342d3234203d3e203137363731.roa
Signing time: Sat 18 Apr 2026 12:02:48 +0000
ROA not before: Sat 18 Apr 2026 11:57:48 +0000
ROA not after: Sat 17 Apr 2027 12:02:48 +0000
asID: 17671
IP address blocks: 202.58.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a7:55:3e:b7:99:fd:a3:c4:80:7f:55:d8:a7:7b:8d:0a:90:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 18 11:57:48 2026 GMT
Not After : Apr 17 12:02:48 2027 GMT
Subject: CN=8B13B92F2D4F40415C35458E15009DF310F6FA2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:ea:42:b2:f0:01:1e:91:6d:51:75:7a:78:
b8:45:67:ab:e2:2b:e1:a7:16:b3:fe:c6:8b:dc:c9:
1e:91:fb:6f:37:e8:d4:9e:7c:37:c1:e6:89:ca:0c:
46:3a:e2:c9:1c:bb:5e:a1:37:79:de:31:01:e2:e3:
77:7f:d2:62:87:aa:02:34:b0:9a:4f:8b:8a:fb:89:
eb:f0:08:38:e7:2e:a8:97:c2:bd:cf:a3:ab:3b:d5:
5c:6c:c2:5f:ee:97:b8:8e:7a:c1:d4:c4:3a:fd:8a:
c9:35:e3:ff:6b:45:df:13:e5:80:57:d1:da:f0:03:
92:c9:66:8c:81:9d:ca:37:5b:fb:50:1c:8f:ba:5f:
09:51:a4:ad:c2:42:a5:6e:e5:33:fe:b5:93:d9:30:
ba:e2:57:63:7d:74:eb:64:a6:03:09:f1:af:2a:b5:
fd:85:d1:f0:51:4f:bd:2f:0e:79:b8:de:4b:ba:b4:
a3:a0:a0:d6:77:7b:0a:87:72:76:2d:00:7e:08:2a:
e0:34:4d:fc:fa:10:5d:cf:3f:5b:52:a6:3b:12:87:
38:85:05:5a:85:ae:ca:44:ed:b0:cd:34:97:15:0f:
d2:c2:c2:fe:7c:d3:67:5c:c7:0c:07:62:39:5f:30:
a8:ac:cb:04:a0:50:dd:c6:54:d9:7b:a9:7c:66:f5:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:13:B9:2F:2D:4F:40:41:5C:35:45:8E:15:00:9D:F3:10:F6:FA:2A
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232322e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.58.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:69:0e:e4:0f:f2:84:41:9b:aa:fb:8e:98:35:4f:18:13:c9:
5d:6f:82:04:f8:69:d3:2d:fc:f1:f0:4e:95:c3:53:94:9f:d7:
e2:29:dd:c4:64:86:58:93:dd:92:68:42:2c:ae:36:25:0e:25:
4f:31:9c:b6:e5:90:7e:24:4f:41:d1:87:bc:98:6a:01:2a:92:
7d:6f:97:42:7e:c8:08:85:43:22:12:d4:e7:4c:32:e5:e9:35:
c9:84:75:23:db:3d:7b:a7:30:89:ee:6d:98:0c:84:bb:fb:46:
d6:93:48:b5:58:7f:1a:08:1e:c5:c4:47:31:1c:66:20:cd:94:
00:47:cb:42:4c:8c:02:07:39:20:34:83:53:78:34:ba:53:f2:
b3:2a:17:6f:fb:31:be:3a:bf:c3:05:5b:57:d1:1f:7b:57:ac:
54:77:1c:34:b7:59:0e:47:11:ea:8c:45:05:3b:38:5d:f2:29:
d9:cb:c7:f5:98:62:d3:14:91:f7:db:2a:0a:a9:6a:45:f9:f2:
79:93:1f:f0:e7:0f:a9:54:a5:2c:c5:ec:d2:d2:4a:9a:4c:a8:
b5:81:dd:25:f3:6f:ea:0d:ff:16:73:75:7e:5c:85:6f:7d:e6:
05:38:ec:6d:6c:09:85:b1:b9:32:ba:49:c7:00:ab:61:27:ab:
90:84:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:15 2026 by rpki-client