Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38372e302f32342d3234203d3e203338373533.roa
File: 3131392e3131302e38372e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: COW+DAz1NJSlndzNI9dDpe09/XkMO8A3ta3UqnxIDJM=
Subject key identifier: 72:B1:A2:F2:8E:B4:3A:E3:FF:70:CE:1E:73:E0:46:C8:53:68:62:99
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 2AAA0AA1AFDC1C02CA68F90CD2B68F0D73A554FB
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38372e302f32342d3234203d3e203338373533.roa
Signing time: Tue 21 Apr 2026 03:00:01 +0000
ROA not before: Tue 21 Apr 2026 02:55:01 +0000
ROA not after: Tue 20 Apr 2027 03:00:01 +0000
asID: 38753
IP address blocks: 119.110.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:aa:0a:a1:af:dc:1c:02:ca:68:f9:0c:d2:b6:8f:0d:73:a5:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Apr 21 02:55:01 2026 GMT
Not After : Apr 20 03:00:01 2027 GMT
Subject: CN=72B1A2F28EB43AE3FF70CE1E73E046C853686299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:de:2d:cf:58:93:59:e7:4b:d3:b3:d0:f6:
50:eb:20:e8:6a:74:8d:39:5e:6a:94:88:50:a3:49:
4f:50:15:0e:f3:b8:82:55:ad:30:6a:22:ae:a1:ee:
64:fe:65:58:d2:11:d2:d7:0f:68:7f:7e:4d:cd:d7:
17:5b:fb:d5:e3:56:3f:c3:11:cc:aa:a1:da:41:3f:
b8:6f:5d:0c:01:fc:72:41:26:4d:03:ee:9b:fc:0e:
5b:7f:38:3e:e4:71:e4:ad:45:27:bd:ca:f4:09:53:
d8:f6:6e:68:21:87:fb:d3:b5:06:47:f1:56:ed:e7:
3b:be:95:26:b9:62:ab:5e:01:a5:bc:6e:c6:18:65:
10:2d:03:a0:03:87:61:44:86:d5:8d:ac:4f:23:ee:
dc:65:50:a5:14:f6:57:d4:ff:db:35:65:6a:c5:21:
d6:8d:ad:28:89:41:b7:83:d4:93:d5:c3:6e:a6:2a:
50:d9:60:8d:ee:d1:ab:9f:69:43:9f:b5:83:1f:af:
3a:84:fd:a9:90:85:70:bd:9e:72:7d:6a:08:05:ee:
ff:0c:4b:00:2f:95:ff:66:c9:e5:d8:ff:82:75:b2:
ef:3c:71:dc:a1:79:e1:b1:a4:bc:75:12:fa:f4:34:
de:b1:57:f0:4c:b4:aa:d0:e5:2b:24:d1:f1:ef:8a:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:A2:F2:8E:B4:3A:E3:FF:70:CE:1E:73:E0:46:C8:53:68:62:99
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38372e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.87.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9f:d7:60:19:57:90:61:81:a5:b1:2c:b0:45:ec:09:24:0a:
16:94:f3:72:08:80:c6:bb:69:ff:32:3c:3a:c7:33:85:12:b6:
19:02:92:58:6b:6d:cc:e9:c3:94:9b:f0:ef:59:b5:d8:97:c8:
5b:0e:c4:a8:51:cc:ff:d0:e9:9e:9c:21:04:84:a3:d4:b3:4d:
12:41:41:17:1b:ba:71:26:b3:07:b8:66:1e:98:f8:1a:be:3f:
6a:84:28:1f:f6:e9:71:dc:15:22:f4:8d:20:4b:dd:24:03:69:
82:2d:31:2f:de:70:65:87:1b:81:8d:2c:e4:c0:89:b5:08:45:
ee:f8:85:c5:ba:58:bb:c9:59:39:83:d3:16:d0:9c:a7:42:4b:
f5:5a:bd:aa:e9:73:b8:2a:c3:9e:02:b2:0b:39:b7:08:c6:2b:
5f:03:86:68:73:94:2d:0e:54:a2:85:6b:02:d5:84:47:29:de:
cd:73:1d:09:ba:a7:e8:72:01:7d:eb:ba:f3:6a:0d:f8:65:76:
c6:18:36:43:d7:6a:63:af:a0:0d:00:1b:cd:0a:d1:5f:cf:f8:
9e:40:76:a3:9e:1d:4f:d4:98:2f:9b:f8:0e:e5:14:b0:2a:2d:
8b:7d:d1:f3:78:69:05:c2:de:f2:4f:c7:e3:f5:59:37:b7:f8:
eb:25:91:45
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKqoKoa/cHALKaPkM0raPDXOlVPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNjA0MjEwMjU1MDFaFw0yNzA0MjAwMzAwMDFaMDMxMTAvBgNV
BAMTKDcyQjFBMkYyOEVCNDNBRTNGRjcwQ0UxRTczRTA0NkM4NTM2ODYyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXt4tz1iTWedL07PQ9lDrIOhq
dI05XmqUiFCjSU9QFQ7zuIJVrTBqIq6h7mT+ZVjSEdLXD2h/fk3N1xdb+9XjVj/D
EcyqodpBP7hvXQwB/HJBJk0D7pv8Dlt/OD7kceStRSe9yvQJU9j2bmghh/vTtQZH
8Vbt5zu+lSa5YqteAaW8bsYYZRAtA6ADh2FEhtWNrE8j7txlUKUU9lfU/9s1ZWrF
IdaNrSiJQbeD1JPVw26mKlDZYI3u0aufaUOftYMfrzqE/amQhXC9nnJ9aggF7v8M
SwAvlf9myeXY/4J1su88cdyheeGxpLx1Evr0NN6xV/BMtKrQ5Ssk0fHvipO3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcrGi8o60OuP/cM4ec+BGyFNoYpkwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHduVzANBgkqhkiG
9w0BAQsFAAOCAQEAZJ/XYBlXkGGBpbEssEXsCSQKFpTzcgiAxrtp/zI8OsczhRK2
GQKSWGttzOnDlJvw71m12JfIWw7EqFHM/9DpnpwhBISj1LNNEkFBFxu6cSazB7hm
Hpj4Gr4/aoQoH/bpcdwVIvSNIEvdJANpgi0xL95wZYcbgY0s5MCJtQhF7viFxbpY
u8lZOYPTFtCcp0JL9Vq9qulzuCrDngKyCzm3CMYrXwOGaHOULQ5UooVrAtWERyne
zXMdCbqn6HIBfeu682oN+GV2xhg2Q9dqY6+gDQAbzQrRX8/4nkB2o54dT9SYL5v4
DuUUsCoti33R83hpBcLe8k/H4/VZN7f46yWRRQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:26:00 2026 by rpki-client