Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e372e302f32342d3234203d3e203338373533.roa
File: 32372e3133312e372e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: i1FnvTqXCdYTaK+wRM6IeWrsfH3iGBUrB1FrUGiiWA4=
Subject key identifier: B4:A7:1B:74:65:0E:99:DF:18:7D:ED:57:FC:14:66:C7:4A:D6:79:B6
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 1A3B484E11FF5210E4D2875B9EB138376994B077
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e372e302f32342d3234203d3e203338373533.roa
Signing time: Fri 24 Apr 2026 08:02:07 +0000
ROA not before: Fri 24 Apr 2026 07:57:07 +0000
ROA not after: Fri 23 Apr 2027 08:02:07 +0000
asID: 38753
IP address blocks: 27.131.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3b:48:4e:11:ff:52:10:e4:d2:87:5b:9e:b1:38:37:69:94:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Apr 24 07:57:07 2026 GMT
Not After : Apr 23 08:02:07 2027 GMT
Subject: CN=B4A71B74650E99DF187DED57FC1466C74AD679B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:0d:24:2c:ba:f0:e5:dd:a6:e4:d0:f7:ed:
f5:e2:73:b5:09:f0:ba:e7:67:21:2b:e2:68:d4:34:
01:ed:e2:5b:84:78:a5:e9:ca:80:b8:b7:62:14:21:
74:38:72:55:ff:66:cd:02:ac:da:0d:0a:74:28:29:
a6:30:94:98:f4:19:f5:66:e4:de:07:f4:20:75:f3:
d3:f7:94:6c:a9:17:8d:d3:c7:bf:ed:3a:3d:e0:ad:
a0:8a:b4:9a:d1:c4:da:a9:30:98:3e:9f:54:eb:0f:
3f:18:a0:e5:c5:1f:00:ef:cf:44:1d:a9:d2:3d:48:
aa:82:62:bc:e4:52:c9:21:bc:88:45:b1:b1:13:34:
25:e6:3c:5f:8f:90:29:0c:98:e9:b5:38:8b:c7:dc:
cc:fe:51:e5:b3:aa:41:44:31:bb:f2:67:7d:87:eb:
d6:6e:3d:9e:88:4b:5e:98:38:e5:e5:fe:cf:b6:d4:
b1:e5:9f:19:98:3a:fa:ac:15:f2:05:b6:31:dd:75:
91:ab:da:12:3a:03:2f:ee:67:f3:c6:5c:ef:6d:a5:
2a:8b:ce:53:58:95:94:0c:37:92:7b:65:1f:a2:f8:
13:8d:68:ce:9e:99:c5:18:2c:06:41:1c:dc:0c:77:
64:65:6d:71:28:b6:30:87:24:7d:79:8b:e5:e6:66:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:1B:74:65:0E:99:DF:18:7D:ED:57:FC:14:66:C7:4A:D6:79:B6
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e372e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.131.7.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f5:60:e4:e9:20:d3:5c:3d:d3:6a:d5:fc:52:07:b0:a0:dd:
a0:bf:35:89:96:77:a4:d7:65:7a:df:f1:af:e8:4b:31:8b:c5:
29:bf:bd:c9:02:75:30:62:86:a2:96:9e:72:a9:f6:87:7f:50:
ca:ab:31:60:74:63:1d:fa:91:70:20:aa:5b:50:61:8f:a1:59:
07:e2:81:88:f2:ca:7a:a8:c0:9b:84:e9:76:a9:80:96:9c:7c:
98:de:e4:76:a2:25:6a:d9:02:e4:c0:f3:2f:e8:4e:25:6b:74:
e4:93:a6:34:e2:b7:83:62:a6:7a:82:51:5f:c0:65:26:dd:87:
b5:77:d2:e9:12:b1:aa:9f:5a:02:01:d1:80:fc:87:f3:d2:b8:
6e:e9:6b:49:7f:dd:94:fb:3f:b5:96:6c:a3:5c:9c:ec:dd:4a:
77:bc:b8:4e:12:c1:87:16:29:45:30:ec:69:fe:69:f3:aa:4c:
d5:ef:74:99:44:4e:94:5c:8b:f9:26:41:68:26:0c:e8:aa:d8:
62:b5:fc:33:fd:11:80:42:b9:fa:af:65:ac:ed:2b:04:4a:83:
a2:6f:b4:a6:60:04:40:19:65:0f:6c:9f:c7:b2:f1:ef:e1:f7:
c5:d6:04:cd:47:fc:2e:2b:a0:4c:0a:0a:d2:c5:70:3e:f8:18:
c8:86:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:13 2026 by rpki-client