Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa
File: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (raw, json)
Hash identifier: 9Zpz6FM8PImwP0neXcp+e+8rfrjkS4ue8zcbL2CjFhA=
Subject key identifier: 68:8D:09:96:F4:18:51:B2:EE:F6:4D:07:08:12:E6:CC:B4:4C:59:00
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 65E818AAC45211AB01E7F9600EE8C33C95DB3B23
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 11:00:00 +0000
ROA not before: Tue 21 Apr 2026 10:55:00 +0000
ROA not after: Tue 20 Apr 2027 11:00:00 +0000
asID: 38143
IP address blocks: 202.169.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e8:18:aa:c4:52:11:ab:01:e7:f9:60:0e:e8:c3:3c:95:db:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 10:55:00 2026 GMT
Not After : Apr 20 11:00:00 2027 GMT
Subject: CN=688D0996F41851B2EEF64D070812E6CCB44C5900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:35:81:94:a2:60:05:cf:41:7e:d1:3c:e8:
52:2f:a5:07:c3:3a:7a:10:fa:fa:88:2c:18:ba:6e:
cc:85:44:a2:6c:03:ce:9a:a1:c0:cf:c4:8e:84:18:
e7:ff:53:f5:3e:2e:b7:15:a5:94:1b:d6:7d:14:e7:
02:ab:65:4f:1e:1d:6d:85:84:d4:ce:b5:a8:fc:47:
00:99:b4:65:2f:43:1c:d1:8b:a4:35:d2:07:4e:62:
36:26:96:4b:9c:f8:90:96:9a:53:aa:43:dd:fa:48:
16:cd:27:39:6a:31:e0:4c:a1:df:39:de:cc:e0:46:
92:93:3d:1d:00:72:1b:04:7e:a0:99:0b:46:6d:f7:
ab:df:01:4a:fb:88:56:65:00:d6:87:99:eb:bd:8a:
7b:77:39:50:a2:9f:0e:64:d3:8e:85:3d:a6:bd:26:
52:d2:84:67:20:73:72:3e:8f:7f:d8:b4:16:2b:d9:
92:4d:05:30:de:9f:ae:e8:a2:13:78:3c:19:a6:42:
60:cf:24:82:63:54:e2:af:78:2b:38:8f:98:ea:69:
a8:76:be:eb:43:6a:ff:c7:b2:64:41:d6:02:ca:23:
2e:eb:bc:c8:fa:eb:e4:75:68:43:43:7d:bb:de:4b:
22:f4:3e:de:40:d2:eb:49:53:17:5e:f3:a2:97:03:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:09:96:F4:18:51:B2:EE:F6:4D:07:08:12:E6:CC:B4:4C:59:00
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.254.0/23
Signature Algorithm: sha256WithRSAEncryption
91:e7:67:76:cd:27:0f:1e:0f:66:1e:ca:84:f1:06:8c:ac:76:
a4:ed:f3:85:d7:1b:ef:ef:d0:27:75:0d:c8:eb:f0:d3:94:e7:
7f:f6:e6:f3:c2:70:8f:dd:46:d6:30:8a:30:b2:06:84:fd:09:
fc:97:d0:2c:2d:69:e3:cd:cc:4c:25:97:3d:b1:8d:ab:7b:68:
ad:10:0d:5f:3c:b7:48:52:ca:d5:d9:0a:4c:c0:58:4c:3e:53:
97:9b:46:0b:6c:cc:19:37:22:39:46:15:2d:0d:e7:04:ff:d7:
f9:ad:12:53:02:18:bc:d7:88:dc:6c:20:be:f8:d0:2e:01:1b:
3d:f0:bc:5e:fe:81:e0:12:7f:8a:3d:9d:2d:d5:22:ae:ff:be:
b4:cd:ce:3c:36:a5:ed:ad:23:71:9c:d9:64:ad:50:5a:05:16:
1c:24:0c:59:0e:1d:3d:3c:af:11:5b:b3:c7:21:07:ad:82:d8:
42:6f:ba:df:d5:7d:b2:60:26:9d:8f:98:e2:59:22:72:f9:91:
0b:9a:d7:1e:19:f1:31:f6:34:5f:31:bd:76:a5:30:6f:75:1e:
30:3a:9a:77:a2:73:fe:fe:25:67:00:90:cc:6d:f3:b1:e0:d9:
db:4f:46:92:10:00:5e:08:84:aa:09:60:10:59:dc:55:7c:71:
59:e2:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:41 2026 by rpki-client