Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: jI6xGCeDEKtQmkpsdZJ7euIbpOvVUQoL5bSIzmAmW1k=
Subject key identifier: B5:89:D9:AA:8A:31:FB:33:B0:DF:A8:EE:63:25:72:4D:D4:D6:6C:67
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 094F73A7E1126B943BF50182CAE0F7BBA5751856
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 08:01:48 +0000
ROA not before: Tue 21 Apr 2026 07:56:48 +0000
ROA not after: Tue 20 Apr 2027 08:01:48 +0000
asID: 38143
IP address blocks: 202.169.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4f:73:a7:e1:12:6b:94:3b:f5:01:82:ca:e0:f7:bb:a5:75:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 07:56:48 2026 GMT
Not After : Apr 20 08:01:48 2027 GMT
Subject: CN=B589D9AA8A31FB33B0DFA8EE6325724DD4D66C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:57:fe:e4:6e:d9:45:5b:c7:f7:a6:49:ea:
cd:96:7c:18:b1:4e:a4:0f:76:c7:4a:c1:3a:1f:11:
5c:c6:93:50:aa:af:9e:90:c6:9f:f2:7a:0e:aa:02:
16:a6:47:eb:8f:84:48:61:4e:12:b9:0b:ac:de:0d:
94:46:ab:89:f6:e4:74:8c:7f:ee:29:de:d7:21:62:
db:e1:49:7b:d8:a7:d5:7b:18:68:5d:4c:61:c5:81:
9c:0d:ee:1a:27:44:a1:fc:b4:9b:a5:53:6e:f4:32:
ba:61:74:77:8b:c0:96:18:d5:0b:b5:0e:72:94:e4:
dc:2a:fe:33:5d:dc:d3:92:6d:9f:6e:16:87:eb:99:
23:f0:77:09:bd:c0:d4:5a:96:9e:56:a6:9e:c4:50:
ab:35:42:f6:d4:09:68:72:8f:0f:8a:30:1f:7b:10:
84:07:2d:80:84:e5:9d:ea:9b:e8:59:fc:d4:f1:bb:
fc:2d:64:d0:6b:2b:94:ba:66:8b:3c:70:8d:af:4f:
77:8c:c8:ea:f9:44:f7:d4:28:2d:78:32:70:34:1e:
2e:88:a0:2e:a1:67:58:a8:c4:f7:60:0a:f6:96:f6:
64:a7:ab:66:68:66:df:5a:17:47:47:f3:17:d2:87:
d3:e5:1d:91:ef:88:49:71:92:cf:68:04:67:6a:9e:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:89:D9:AA:8A:31:FB:33:B0:DF:A8:EE:63:25:72:4D:D4:D6:6C:67
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.243.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5a:54:68:d0:92:5d:57:b8:aa:80:c9:15:f4:ce:bb:d0:28:
e6:35:6a:c5:e1:6b:80:b1:fb:45:6d:65:b2:64:78:74:0c:ef:
b4:5d:4b:5e:0f:25:8a:df:48:3f:ed:53:31:3b:40:b0:1d:4f:
d5:8f:1e:2e:2a:c6:3f:20:0f:f3:b4:03:90:87:db:b6:0f:86:
03:05:58:16:5b:6d:90:a3:55:e4:8a:bc:85:4e:25:e3:e6:6d:
8b:6f:f8:4b:76:7d:e9:08:66:2a:37:98:b6:43:34:8e:9f:ce:
4a:c3:c2:1e:e5:65:55:7d:e9:d5:93:ce:92:cb:46:ee:21:e3:
e1:46:e7:71:15:a1:5c:ea:22:a1:f9:ae:5c:eb:c6:fa:a7:7a:
27:d7:11:e0:5a:bc:f9:0f:ef:c6:ce:95:bb:58:61:b4:c8:fa:
e9:f5:58:e6:f1:79:87:f3:c9:38:b5:08:10:af:59:b0:69:da:
c2:a4:0c:dc:c2:bc:7f:45:96:35:c4:1a:b4:13:03:8c:9e:98:
57:7c:83:f7:85:ec:e8:4c:d4:ae:9e:2e:aa:83:f1:f8:18:a8:
60:d4:8c:ba:cc:aa:d3:8d:54:52:67:8b:50:77:18:24:28:60:
0d:41:d6:46:f1:61:97:6e:54:53:80:0f:a2:1e:9f:0d:a3:4c:
7d:cd:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:41 2026 by rpki-client