Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: nQKjRqBVY/SNeQpmHdkLQkw036g1ne/TWLqELDyFUAc=
Subject key identifier: DF:04:C3:B0:2F:A2:5E:73:43:3B:74:4E:0D:4B:EC:B8:D9:4B:F5:B2
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 336A15C6EE592E04F9DF1F7CBD065BE853B42FDB
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 08:01:49 +0000
ROA not before: Tue 21 Apr 2026 07:56:49 +0000
ROA not after: Tue 20 Apr 2027 08:01:49 +0000
asID: 38143
IP address blocks: 202.169.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6a:15:c6:ee:59:2e:04:f9:df:1f:7c:bd:06:5b:e8:53:b4:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 07:56:49 2026 GMT
Not After : Apr 20 08:01:49 2027 GMT
Subject: CN=DF04C3B02FA25E73433B744E0D4BECB8D94BF5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:81:07:da:96:d6:f2:9f:58:a8:8e:95:2f:
e4:75:c8:9b:4a:ee:d4:19:4e:9b:95:67:e1:61:6d:
b1:d2:f0:e0:70:f4:50:fb:d7:cf:7e:d7:ff:ca:97:
4a:69:ef:50:1a:71:23:1a:4d:0c:4e:89:8a:53:2b:
e0:31:6c:d5:4e:ab:84:65:5f:3f:87:5a:2b:17:2c:
cc:6a:db:2b:c2:69:86:55:cc:6c:67:de:02:b2:9a:
25:9b:68:cb:57:91:4c:c4:02:cf:5a:bf:51:90:4e:
40:0c:2d:a9:aa:3e:9e:be:3f:5e:3f:7d:ee:f8:e4:
f4:ea:26:4e:20:82:41:9e:db:bb:7d:58:2d:30:61:
5d:1f:8b:d2:52:10:8d:8a:07:6c:68:88:b4:b9:ab:
9c:bc:46:1b:37:08:3e:9d:b5:68:6f:98:e0:52:a1:
63:0e:59:7e:f9:10:fa:09:d1:0d:0f:b3:f0:6b:d7:
14:a8:1c:89:d8:9b:04:3a:62:8e:74:cb:60:1c:db:
60:61:ce:65:a7:00:df:25:92:77:5c:ca:6f:ae:48:
3a:b7:26:21:78:2e:a2:99:95:4f:38:86:4a:88:75:
2b:3b:7f:c9:d0:59:13:1b:ba:9c:f3:8c:62:0c:57:
b7:85:d0:d5:f1:75:27:9c:27:16:f8:36:90:9d:96:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:C3:B0:2F:A2:5E:73:43:3B:74:4E:0D:4B:EC:B8:D9:4B:F5:B2
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d4:a8:b7:49:35:ac:33:43:a7:8b:74:2c:09:11:4c:71:f3:
47:8c:b1:1c:ef:eb:fa:0f:ff:68:13:d4:0b:60:a4:40:da:2c:
06:b2:cd:71:ad:c3:4f:e3:95:55:c8:bc:eb:60:17:b1:95:dd:
91:9e:bb:59:2a:0a:3a:fc:f9:64:c6:ab:0f:4a:ac:e4:06:40:
16:43:f1:c4:c0:4a:08:c2:49:70:e3:77:b1:85:19:69:54:ae:
75:2c:35:6a:1e:72:16:c6:39:7b:1d:86:b9:79:dc:7d:71:02:
50:81:93:80:dd:72:eb:db:fa:99:ae:2c:d0:fe:fa:e6:2b:e0:
14:d2:8d:d9:54:99:35:82:94:23:75:bc:56:3e:03:f3:f8:f1:
dd:d3:b8:d1:fc:00:42:9a:66:54:19:9c:8f:da:c4:5d:dd:3a:
1c:a1:39:21:f2:9b:cf:cb:0c:1a:a3:6a:d8:4e:b6:0f:f4:f6:
14:92:86:45:32:b7:49:46:3e:00:80:2a:b1:94:c6:a4:41:46:
2a:03:9f:16:8a:59:e3:0a:99:d6:54:91:7b:5c:be:ea:cc:7b:
03:9c:0c:34:42:b7:84:d0:c2:d5:49:0b:b6:66:8d:40:c0:57:
aa:86:d3:6f:73:e2:5a:5c:15:75:e1:b9:74:c1:d0:25:bc:58:
ec:19:01:a9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM2oVxu5ZLgT53x98vQZb6FO0L9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC
MUNFMDMyNTAeFw0yNjA0MjEwNzU2NDlaFw0yNzA0MjAwODAxNDlaMDMxMTAvBgNV
BAMTKERGMDRDM0IwMkZBMjVFNzM0MzNCNzQ0RTBENEJFQ0I4RDk0QkY1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzoEH2pbW8p9YqI6VL+R1yJtK
7tQZTpuVZ+FhbbHS8OBw9FD7189+1//Kl0pp71AacSMaTQxOiYpTK+AxbNVOq4Rl
Xz+HWisXLMxq2yvCaYZVzGxn3gKymiWbaMtXkUzEAs9av1GQTkAMLamqPp6+P14/
fe745PTqJk4ggkGe27t9WC0wYV0fi9JSEI2KB2xoiLS5q5y8Rhs3CD6dtWhvmOBS
oWMOWX75EPoJ0Q0Ps/Br1xSoHInYmwQ6Yo50y2Ac22BhzmWnAN8lkndcym+uSDq3
JiF4LqKZlU84hkqIdSs7f8nQWRMbupzzjGIMV7eF0NXxdSecJxb4NpCdlglzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3wTDsC+iXnNDO3RODUvsuNlL9bIwHwYDVR0j
BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG
Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF
MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i
OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqn2MA0GCSqG
SIb3DQEBCwUAA4IBAQBr1Ki3STWsM0Oni3QsCRFMcfNHjLEc7+v6D/9oE9QLYKRA
2iwGss1xrcNP45VVyLzrYBexld2RnrtZKgo6/PlkxqsPSqzkBkAWQ/HEwEoIwklw
43exhRlpVK51LDVqHnIWxjl7HYa5edx9cQJQgZOA3XLr2/qZrizQ/vrmK+AU0o3Z
VJk1gpQjdbxWPgPz+PHd07jR/ABCmmZUGZyP2sRd3TocoTkh8pvPywwao2rYTrYP
9PYUkoZFMrdJRj4AgCqxlMakQUYqA58WilnjCpnWVJF7XL7qzHsDnAw0QreE0MLV
SQu2Zo1AwFeqhtNvc+JaXBV14bl0wdAlvFjsGQGp
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:40 2026 by rpki-client