Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: NJFnHAFO88iatxQ6aCSdcixd8IusfJNuQ6mV9KsCKbc=
Subject key identifier: 1F:5E:46:91:83:27:BD:1F:FC:96:29:E2:A8:3B:F2:96:6B:44:CF:24
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 38F3E8388A9F840EDD9645B94D67DA402A6E4E32
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 07:01:34 +0000
ROA not before: Tue 21 Apr 2026 06:56:34 +0000
ROA not after: Tue 20 Apr 2027 07:01:34 +0000
asID: 38143
IP address blocks: 202.169.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f3:e8:38:8a:9f:84:0e:dd:96:45:b9:4d:67:da:40:2a:6e:4e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 06:56:34 2026 GMT
Not After : Apr 20 07:01:34 2027 GMT
Subject: CN=1F5E46918327BD1FFC9629E2A83BF2966B44CF24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:21:26:66:c7:fb:6a:6c:de:55:92:f9:77:
43:13:67:6b:d9:a7:4d:8f:4b:a4:87:41:63:a1:2b:
b1:51:14:88:68:49:62:b2:3e:18:c9:fc:a3:46:4f:
18:c5:a4:7b:d5:99:ef:9b:e5:35:20:b5:b2:45:08:
23:df:a1:9a:f2:3d:8a:51:4c:c7:32:17:71:4a:f3:
84:12:7f:78:40:4f:e7:8a:5a:f1:53:1c:65:77:82:
62:1b:42:b7:41:57:de:81:c8:39:a6:9b:85:28:d4:
23:dc:c1:f3:a8:c8:13:4a:12:5c:1c:91:87:d4:0f:
e3:9a:72:04:94:92:4a:8a:e2:33:20:0a:65:8e:f7:
cd:f9:53:d1:64:db:1e:9a:3c:b2:e6:51:31:bb:1b:
ed:81:22:a0:8e:07:b6:bd:4c:e2:63:4a:2c:29:8a:
c7:ec:b9:b8:71:1f:01:51:bb:e6:18:90:6b:a3:c3:
f5:de:7a:24:b2:c0:f2:c0:37:42:57:68:60:bf:f1:
0a:6e:06:e9:c1:51:25:56:73:d3:cc:89:5d:0e:09:
38:c2:69:90:f0:9b:14:ce:5c:4c:2b:db:d1:58:79:
2b:9d:8f:d3:ae:57:2f:a9:2b:f7:42:54:84:09:5f:
f7:e1:88:26:94:0d:a0:f0:20:47:a5:3f:0b:f4:b3:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:46:91:83:27:BD:1F:FC:96:29:E2:A8:3B:F2:96:6B:44:CF:24
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.240.0/24
Signature Algorithm: sha256WithRSAEncryption
06:40:7e:cb:45:90:73:dc:7e:d6:b8:ee:ed:5e:2a:80:59:39:
aa:cd:51:5e:1e:58:cc:39:0b:f6:38:9f:6f:69:64:88:01:3f:
39:bf:05:d6:c8:ec:59:9f:2c:97:19:5d:19:08:a6:b6:94:a1:
d8:1e:bf:99:04:62:55:e2:2b:34:ff:1d:d0:a6:f8:40:d3:03:
cb:2f:d8:20:18:f6:3e:99:4d:46:24:b0:36:f1:1f:63:d2:97:
ae:97:7b:b1:2f:e3:6b:c1:fc:92:ed:27:b8:95:0d:ae:2f:ac:
c4:2d:98:de:d3:b9:72:a8:4e:4d:5e:1f:9f:ac:51:ce:91:b4:
fc:b9:d6:81:84:73:9e:5c:ab:2d:de:bd:59:e3:7a:e7:12:d8:
6e:b1:fa:a0:59:7e:b3:1f:34:09:77:af:aa:b0:e8:41:52:d0:
22:46:6f:5a:e1:08:4a:c3:5e:84:5d:ec:11:54:81:69:c9:52:
bb:a1:4c:ff:e4:61:22:2f:c7:a1:9a:b0:63:2f:03:ed:c1:06:
c0:d0:77:bf:c5:9d:f2:b0:6f:90:e3:db:cf:f7:44:06:17:74:
3c:dd:37:49:91:f2:75:1c:e3:c7:aa:60:d5:a0:eb:67:ca:08:
a7:3a:70:b4:01:f4:38:fb:fd:24:cc:41:40:6f:82:39:6c:83:
b1:cc:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:41 2026 by rpki-client