Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: M6El4ufXpfngPbTiEC5xFzYu2sWsxSJRNm8EHyO3TUY=
Subject key identifier: C2:25:AD:F4:4A:BA:91:4B:8E:48:3A:22:C2:94:0D:5A:02:05:67:06
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 75DCCAD5F698DE2DD0D7A7AB279313417804C5B1
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 08:01:48 +0000
ROA not before: Tue 21 Apr 2026 07:56:48 +0000
ROA not after: Tue 20 Apr 2027 08:01:48 +0000
asID: 38143
IP address blocks: 202.169.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:dc:ca:d5:f6:98:de:2d:d0:d7:a7:ab:27:93:13:41:78:04:c5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 07:56:48 2026 GMT
Not After : Apr 20 08:01:48 2027 GMT
Subject: CN=C225ADF44ABA914B8E483A22C2940D5A02056706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:85:2a:a9:37:27:b9:33:7e:9d:ee:87:aa:
2c:5c:df:54:57:b3:48:31:33:99:ed:8a:13:a7:f5:
31:1e:e9:de:89:bd:27:65:a9:4a:d5:80:6f:bf:13:
19:e2:77:53:86:a1:fb:8d:cd:bb:3b:59:6d:48:36:
4f:3a:1d:c8:fb:a1:47:c2:1f:f6:8c:f2:71:27:4f:
d4:20:82:dd:bc:d4:c7:7c:e0:6c:3e:e4:34:b4:42:
25:3f:87:58:f1:7f:8d:43:e5:e9:df:34:dd:21:75:
9f:90:e3:70:5a:1e:14:c8:ca:f8:31:47:e3:20:15:
0e:39:36:7e:47:e5:ea:82:09:21:51:e0:55:f1:8d:
8e:45:6e:0b:ac:31:05:ba:e0:a8:68:d8:39:06:e3:
20:2f:62:40:d6:0d:a6:40:60:bc:b6:a0:01:14:90:
0b:10:e7:43:79:0a:c3:56:af:b0:22:97:f9:82:29:
9f:94:ca:04:9e:e6:1a:7f:aa:1d:2e:26:08:a2:f8:
df:a0:fe:91:53:f6:5f:28:a1:59:6d:0d:73:71:0b:
28:1e:6f:d8:53:3a:ae:da:12:c2:b7:5f:89:14:77:
5f:03:f0:5f:c7:04:ec:78:17:15:a5:8e:a3:cb:b6:
11:3f:ab:60:ca:9f:ea:b6:ce:23:4a:ce:bb:b2:4f:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:25:AD:F4:4A:BA:91:4B:8E:48:3A:22:C2:94:0D:5A:02:05:67:06
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.252.0/24
Signature Algorithm: sha256WithRSAEncryption
10:18:79:67:fc:b3:3e:9d:95:8f:e7:49:c9:98:e9:89:d7:12:
e5:0e:44:63:bf:b0:c0:fd:56:b6:2e:8a:68:e8:96:c9:0c:85:
5f:e7:20:82:05:d2:83:a3:c2:dc:fd:b1:a2:0d:3d:55:46:37:
35:8c:40:12:3a:64:25:6e:14:46:d1:df:92:6f:b6:4e:f7:d5:
0b:fa:32:b5:58:5d:c5:9c:a4:ed:14:a1:a6:26:e9:3d:22:25:
b3:f8:7e:b5:0f:c2:cf:36:25:28:14:43:11:a9:e8:eb:41:58:
e1:c0:90:f5:bc:c9:71:0e:5e:71:54:0d:e4:a3:7b:38:ae:59:
a4:aa:e7:37:0b:83:d4:84:0a:03:78:b1:8b:ec:31:58:1e:b5:
c5:f2:96:d9:97:cd:42:24:49:22:ef:41:d0:c1:ab:09:09:af:
00:26:3f:99:b5:d0:3f:ef:f7:d7:b9:b2:c0:c3:7a:93:ad:94:
77:10:e8:48:e0:71:f4:8e:db:10:7f:10:47:37:38:8a:40:b0:
71:dc:a2:a1:ae:3a:57:37:b5:c8:4c:a8:71:89:57:ef:ec:11:
b4:ad:f5:69:2d:1c:ae:c6:32:57:10:41:ec:35:1f:3a:a5:fe:
2e:66:01:cc:73:f3:30:ce:4d:1a:ed:90:17:27:70:82:13:09:
05:4e:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:41 2026 by rpki-client