Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32342d3234203d3e203338373533.roa
File: 3131392e3131302e38322e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: ByakWWzly7duU2BrZBcFU0Nj2JGBsVtRSE2NDGmvNgQ=
Subject key identifier: BB:B0:DD:4D:0E:BA:8C:AA:8F:E0:0E:DD:90:4C:A9:86:4D:29:DD:FA
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 660A4A1AFFB1AF81743E268E7D21E846F7EE8A2B
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32342d3234203d3e203338373533.roa
Signing time: Tue 21 Apr 2026 03:00:01 +0000
ROA not before: Tue 21 Apr 2026 02:55:01 +0000
ROA not after: Tue 20 Apr 2027 03:00:01 +0000
asID: 38753
IP address blocks: 119.110.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0a:4a:1a:ff:b1:af:81:74:3e:26:8e:7d:21:e8:46:f7:ee:8a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Apr 21 02:55:01 2026 GMT
Not After : Apr 20 03:00:01 2027 GMT
Subject: CN=BBB0DD4D0EBA8CAA8FE00EDD904CA9864D29DDFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:a0:c9:d6:e0:61:a3:7f:88:01:c2:17:62:
e6:46:d0:80:2b:7c:73:57:b9:74:f5:1f:7b:d8:53:
73:29:22:d1:a9:ee:93:31:9e:a8:82:f5:53:19:3a:
8b:5b:da:f6:2d:eb:65:59:26:90:9a:26:45:cc:b7:
39:c4:c0:be:36:b8:ca:c3:f6:1c:f5:1c:62:18:45:
1d:80:82:d9:63:70:e2:97:78:10:22:0f:a3:de:9e:
f7:a9:92:28:c3:95:b2:7c:34:44:ad:fc:01:ca:f7:
20:fe:d1:13:67:86:1a:aa:46:2b:db:aa:58:13:77:
21:27:28:d4:bf:47:62:75:d7:27:99:0e:27:cd:72:
5e:9d:11:d2:58:a4:96:f0:60:fc:50:bd:5f:51:8b:
60:30:a8:76:35:ac:6b:21:03:fd:a0:21:bc:ab:a1:
77:11:32:ec:b2:27:56:d8:e5:c7:d3:1d:4f:b3:17:
ed:a7:45:1d:2e:ae:49:c4:e1:56:c3:c9:6e:51:67:
b4:e3:77:4a:61:56:23:80:89:49:57:63:26:08:8d:
58:18:8d:32:5e:6a:8e:18:66:32:77:46:53:de:b7:
b9:66:3b:80:0f:86:9e:23:cd:e9:2d:4f:2c:f3:65:
dc:9b:d4:01:ef:a9:d5:6d:17:51:88:50:1f:17:34:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B0:DD:4D:0E:BA:8C:AA:8F:E0:0E:DD:90:4C:A9:86:4D:29:DD:FA
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cb:1d:ab:f0:36:d5:c8:79:1d:cd:78:13:b6:95:61:ea:7c:
79:b3:b6:21:f6:22:2b:04:cd:b0:dc:f7:ac:18:ae:91:76:7f:
5a:99:de:cb:8a:ef:8f:09:ac:47:ce:f4:b1:27:1c:88:df:d7:
66:ff:6c:90:34:26:c8:fc:6a:c4:87:65:c0:ea:d0:d7:87:d7:
90:02:d8:e5:90:46:91:03:ee:be:a1:a0:f9:8a:7e:1b:ae:26:
2f:49:08:0d:21:14:5e:6d:35:e9:00:84:91:92:16:94:9e:da:
7c:be:bf:e7:f3:68:29:f6:5d:6a:e0:11:ad:09:c5:5f:14:70:
71:2f:05:ff:49:5c:25:1f:f3:07:6e:14:21:af:78:d0:33:e1:
46:cc:8c:4d:a2:54:f2:c2:59:46:3d:6b:fb:79:08:d6:d5:8f:
2a:6c:b2:a2:55:98:60:44:17:67:ae:74:91:79:06:1c:01:ea:
09:ba:f6:71:95:44:5f:d7:34:03:92:a7:a3:9e:30:1a:03:49:
fc:d0:de:d9:49:2b:a4:2b:b0:69:cc:89:c4:1b:2a:35:f1:59:
12:b8:ff:a6:22:37:04:18:44:8e:30:fe:6d:3f:a5:5d:9d:be:
e3:54:8f:f6:7c:4e:99:92:78:03:bf:cf:9e:f4:a2:39:29:1e:
23:bd:d9:17
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZgpKGv+xr4F0PiaOfSHoRvfuiiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNjA0MjEwMjU1MDFaFw0yNzA0MjAwMzAwMDFaMDMxMTAvBgNV
BAMTKEJCQjBERDREMEVCQThDQUE4RkUwMEVERDkwNENBOTg2NEQyOURERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2qDJ1uBho3+IAcIXYuZG0IAr
fHNXuXT1H3vYU3MpItGp7pMxnqiC9VMZOotb2vYt62VZJpCaJkXMtznEwL42uMrD
9hz1HGIYRR2AgtljcOKXeBAiD6PenvepkijDlbJ8NESt/AHK9yD+0RNnhhqqRivb
qlgTdyEnKNS/R2J11yeZDifNcl6dEdJYpJbwYPxQvV9Ri2AwqHY1rGshA/2gIbyr
oXcRMuyyJ1bY5cfTHU+zF+2nRR0urknE4VbDyW5RZ7Tjd0phViOAiUlXYyYIjVgY
jTJeao4YZjJ3RlPet7lmO4APhp4jzektTyzzZdyb1AHvqdVtF1GIUB8XNL4/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUu7DdTQ66jKqP4A7dkEyphk0p3fowHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHduUjANBgkqhkiG
9w0BAQsFAAOCAQEAGssdq/A21ch5Hc14E7aVYep8ebO2IfYiKwTNsNz3rBiukXZ/
Wpney4rvjwmsR870sScciN/XZv9skDQmyPxqxIdlwOrQ14fXkALY5ZBGkQPuvqGg
+Yp+G64mL0kIDSEUXm016QCEkZIWlJ7afL6/5/NoKfZdauARrQnFXxRwcS8F/0lc
JR/zB24UIa940DPhRsyMTaJU8sJZRj1r+3kI1tWPKmyyolWYYEQXZ650kXkGHAHq
Cbr2cZVEX9c0A5Kno54wGgNJ/NDe2UkrpCuwacyJxBsqNfFZErj/piI3BBhEjjD+
bT+lXZ2+41SP9nxOmZJ4A7/PnvSiOSkeI73ZFw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:39 2026 by rpki-client