Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: 71O8QhOgtK5lj8OhNfzCgNN7oN79yv/kS8Fv5WlXK+A=
Subject key identifier: CB:FF:A8:77:24:C2:39:1E:7A:37:F2:6C:A1:7B:EB:F5:62:7F:7F:CF
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 673CAAD1E0A4829DCB8FB8DBB35EC6E153C01967
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 08:01:48 +0000
ROA not before: Tue 21 Apr 2026 07:56:48 +0000
ROA not after: Tue 20 Apr 2027 08:01:48 +0000
asID: 38143
IP address blocks: 202.169.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3c:aa:d1:e0:a4:82:9d:cb:8f:b8:db:b3:5e:c6:e1:53:c0:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 07:56:48 2026 GMT
Not After : Apr 20 08:01:48 2027 GMT
Subject: CN=CBFFA87724C2391E7A37F26CA17BEBF5627F7FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:00:9d:75:ba:46:ec:62:2e:2b:0f:09:73:
e1:87:41:4e:d8:cd:cd:f5:ae:24:e8:d6:12:c2:b5:
d2:4c:48:8d:c9:1e:64:9c:10:74:9f:99:64:88:1f:
ff:dd:bb:df:62:b0:dc:c5:1a:bc:a3:e8:f2:51:a6:
38:30:7d:fa:17:6d:33:fc:49:83:45:0d:28:bd:86:
6a:b9:46:f3:67:3f:a0:e8:8e:99:cc:7e:bd:9c:06:
60:1b:9b:db:0f:0d:d0:50:5f:49:29:b4:b5:91:e9:
8e:8f:f9:dc:01:fe:31:6a:b8:4b:a5:41:ce:f9:e2:
7f:41:84:07:27:03:58:77:62:ab:ad:7a:e6:f3:ed:
a4:50:e3:47:eb:ad:27:6e:7b:27:4b:97:5a:95:cc:
0a:6f:33:67:35:1c:c1:e8:1a:60:9d:e0:e5:c3:ca:
b4:ea:ab:99:12:97:db:ad:ea:ca:8b:bf:5d:1f:0a:
a1:74:0a:f1:0d:56:c0:8d:6b:d6:e1:be:63:a6:70:
7b:a9:2f:d1:dc:f3:3e:5a:ef:37:e4:72:77:35:b6:
07:f7:a4:75:e4:91:db:ac:ea:06:8e:40:e3:ac:72:
4b:31:ba:11:70:0c:9f:b6:ae:69:83:cf:24:61:7b:
9b:3b:60:84:76:13:0d:3c:6c:de:a1:ee:0c:b3:04:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:A8:77:24:C2:39:1E:7A:37:F2:6C:A1:7B:EB:F5:62:7F:7F:CF
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
82:70:94:e8:f8:e8:40:09:d2:cc:40:62:94:79:60:89:3c:75:
b0:18:b7:89:6e:47:bd:f4:b9:dc:b5:f3:40:97:bc:ad:78:75:
64:0c:9d:72:95:ae:87:32:3c:9d:70:82:7d:56:37:8c:63:24:
9b:0f:98:31:a0:ac:1b:a3:bb:46:f4:4e:18:71:0a:7c:85:1c:
c0:85:75:3d:98:3e:a2:61:6e:0e:2d:af:cb:e8:6b:8f:1b:e0:
6d:f7:83:d6:97:35:e1:3d:70:cb:8e:55:66:74:ed:3c:ba:da:
09:b5:69:da:75:ea:07:62:53:e1:89:a9:9e:3c:96:c2:01:09:
e0:3d:28:37:a2:a2:c5:0e:ca:b1:60:66:2f:0f:a6:36:3e:2d:
df:ab:44:f9:00:f3:24:ed:27:4b:56:0d:48:0d:63:25:0b:24:
a4:cb:91:e7:39:e6:ed:1c:12:c0:85:38:a8:29:d7:af:cb:38:
d6:33:3b:a7:9f:2a:b9:72:c9:32:c8:40:05:a5:a6:1d:13:95:
0d:af:4e:79:b4:11:d2:25:54:9b:b2:20:f1:2c:6d:ef:4d:1d:
37:50:7f:3b:c3:9a:e8:04:cc:59:62:3e:b7:c5:03:38:d6:bf:
98:bd:3e:4a:94:93:07:f1:9f:21:1b:20:25:83:c6:e4:b9:7a:
09:a2:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:40 2026 by rpki-client