Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: BvasBM/kpfQ5GntvxmFTSK1NqGzRBF/X+5pKH5ro1ww=
Subject key identifier: 49:5A:60:28:5C:2A:DC:B7:3E:45:52:98:6B:B6:42:D8:86:5D:DF:28
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 72118D86F5FED7D296E010C7A664C0DD48FD7FBA
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 06:00:00 +0000
ROA not before: Tue 21 Apr 2026 05:55:00 +0000
ROA not after: Tue 20 Apr 2027 06:00:00 +0000
asID: 38143
IP address blocks: 202.169.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:11:8d:86:f5:fe:d7:d2:96:e0:10:c7:a6:64:c0:dd:48:fd:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 05:55:00 2026 GMT
Not After : Apr 20 06:00:00 2027 GMT
Subject: CN=495A60285C2ADCB73E4552986BB642D8865DDF28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:7b:be:80:41:51:29:cf:cb:c0:45:eb:f9:
dc:a3:1b:96:64:91:da:ef:c6:25:76:9e:a6:64:cb:
21:1f:81:43:4d:81:63:17:0c:3f:a6:e2:37:a0:71:
64:2a:4c:c9:69:03:36:fb:0c:f1:44:bf:7f:dd:8d:
e0:e0:24:ec:70:4d:66:a5:cb:44:df:28:32:fa:eb:
d8:5c:b7:3f:92:ef:9b:a5:2d:98:49:9d:52:bd:5b:
a7:7c:c5:f1:4a:b6:18:8c:17:41:eb:70:70:d8:65:
c3:85:4c:c0:ca:e7:46:7c:62:fc:e8:8c:49:a4:75:
ae:06:cf:41:c7:e6:51:7a:a3:2c:18:08:64:42:1e:
1d:33:2d:2c:ea:3e:21:ad:1d:bd:f2:36:e9:41:0d:
a7:27:e7:09:38:0a:54:10:65:84:a1:13:83:55:cc:
c6:97:0c:b3:a9:53:6a:ae:eb:41:7e:93:77:6c:bd:
51:62:fe:e3:a6:e2:a7:ed:58:87:db:9c:9b:86:19:
17:7b:8c:da:6c:38:09:63:f3:0e:5a:92:6d:4c:0a:
da:64:d2:1e:cc:56:24:aa:bf:ce:4f:79:be:10:7c:
5e:7f:91:6e:70:66:4f:b2:c4:ed:9a:1f:80:c3:eb:
db:46:0e:74:00:a3:5c:ca:01:d6:6a:32:b1:d7:9a:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5A:60:28:5C:2A:DC:B7:3E:45:52:98:6B:B6:42:D8:86:5D:DF:28
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.242.0/24
Signature Algorithm: sha256WithRSAEncryption
69:20:be:9a:ca:20:c1:02:2f:7e:b4:66:69:34:fe:73:5f:ea:
29:5a:1c:b1:b8:5e:cb:f0:3c:40:69:09:58:97:20:84:58:3a:
9e:d4:08:e4:90:67:04:35:4f:dd:bb:37:8d:91:a2:6e:39:c2:
0b:11:5d:f8:fd:22:eb:30:03:91:9f:9f:e9:31:26:41:a8:6d:
ce:f7:91:e6:14:a4:59:eb:a9:47:ad:58:2e:8e:be:93:c0:23:
77:35:7e:ce:15:1f:e5:3e:c4:56:4d:6c:4f:6e:23:12:93:20:
ed:c7:4c:0e:60:1e:5d:28:4b:d3:13:b5:cf:b5:ba:57:b2:45:
55:cb:2e:fb:32:8d:31:42:bf:96:b8:81:19:ff:04:64:56:17:
01:32:d4:59:ad:a8:56:0b:71:18:c0:45:24:ae:51:b7:b3:1f:
1f:8a:a7:ae:03:c6:5d:ff:7a:35:89:86:ae:18:12:90:a2:d2:
69:cc:03:00:4b:c1:d9:f0:80:04:eb:57:3f:98:35:65:7b:0b:
27:58:ea:29:2a:38:da:07:4c:d6:05:c4:37:a3:99:6f:3e:dd:
82:b7:49:5b:89:fb:e6:e4:c2:8b:3a:e3:df:b1:22:d2:6e:2d:
0f:b1:2e:4d:d2:de:1b:ca:80:25:cf:f6:ad:ae:b8:74:64:9d:
da:dc:57:83
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUchGNhvX+19KW4BDHpmTA3Uj9f7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC
MUNFMDMyNTAeFw0yNjA0MjEwNTU1MDBaFw0yNzA0MjAwNjAwMDBaMDMxMTAvBgNV
BAMTKDQ5NUE2MDI4NUMyQURDQjczRTQ1NTI5ODZCQjY0MkQ4ODY1RERGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGHu+gEFRKc/LwEXr+dyjG5Zk
kdrvxiV2nqZkyyEfgUNNgWMXDD+m4jegcWQqTMlpAzb7DPFEv3/djeDgJOxwTWal
y0TfKDL669hctz+S75ulLZhJnVK9W6d8xfFKthiMF0HrcHDYZcOFTMDK50Z8Yvzo
jEmkda4Gz0HH5lF6oywYCGRCHh0zLSzqPiGtHb3yNulBDacn5wk4ClQQZYShE4NV
zMaXDLOpU2qu60F+k3dsvVFi/uOm4qftWIfbnJuGGRd7jNpsOAlj8w5akm1MCtpk
0h7MViSqv85Peb4QfF5/kW5wZk+yxO2aH4DD69tGDnQAo1zKAdZqMrHXmnjfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSVpgKFwq3Lc+RVKYa7ZC2IZd3ygwHwYDVR0j
BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG
Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF
MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i
OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqnyMA0GCSqG
SIb3DQEBCwUAA4IBAQBpIL6ayiDBAi9+tGZpNP5zX+opWhyxuF7L8DxAaQlYlyCE
WDqe1AjkkGcENU/duzeNkaJuOcILEV34/SLrMAORn5/pMSZBqG3O95HmFKRZ66lH
rVgujr6TwCN3NX7OFR/lPsRWTWxPbiMSkyDtx0wOYB5dKEvTE7XPtbpXskVVyy77
Mo0xQr+WuIEZ/wRkVhcBMtRZrahWC3EYwEUkrlG3sx8fiqeuA8Zd/3o1iYauGBKQ
otJpzAMAS8HZ8IAE61c/mDVlewsnWOopKjjaB0zWBcQ3o5lvPt2Ct0lbifvm5MKL
OuPfsSLSbi0PsS5N0t4byoAlz/atrrh0ZJ3a3FeD
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:42 2026 by rpki-client