Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: P7Ghx0KbylwHThW9kRrkdW1jGbCoZDWXir9JxXwc5fo=
Subject key identifier: 00:E3:6D:BC:06:38:FC:0C:BF:5F:33:04:35:C2:CD:0D:EF:19:A4:3F
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 14375E1DB34B26C7703E9B20160BF8EF9C2A0659
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa
Signing time: Tue 21 Apr 2026 08:01:48 +0000
ROA not before: Tue 21 Apr 2026 07:56:48 +0000
ROA not after: Tue 20 Apr 2027 08:01:48 +0000
asID: 38143
IP address blocks: 202.169.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:37:5e:1d:b3:4b:26:c7:70:3e:9b:20:16:0b:f8:ef:9c:2a:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Apr 21 07:56:48 2026 GMT
Not After : Apr 20 08:01:48 2027 GMT
Subject: CN=00E36DBC0638FC0CBF5F330435C2CD0DEF19A43F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:2b:b3:f3:0b:59:22:d2:87:3e:35:e7:07:
f3:14:30:c7:08:56:ad:89:4a:55:c5:e9:4a:e5:ef:
59:e2:aa:02:67:da:81:eb:7e:2c:da:36:02:0f:b9:
9c:0a:9f:c4:89:e0:c4:49:af:bc:0c:d6:50:7a:c4:
80:fd:2d:88:87:97:2a:a5:b5:6b:01:90:d1:0d:08:
bd:7e:3d:63:7f:a6:5a:e5:bc:3e:df:76:d7:59:55:
5e:7e:47:dd:65:06:10:16:76:d8:3c:c9:b8:73:d9:
4e:3b:f2:d1:cf:86:9a:ae:d5:1e:64:2b:45:21:3e:
72:1c:4c:19:c5:12:d8:e3:92:41:03:df:5a:cf:47:
27:5d:2e:42:2a:d2:42:42:5f:e7:27:36:b6:66:83:
b2:8c:6a:9e:76:f6:aa:cb:f4:31:0f:a8:77:49:bc:
b9:24:ac:96:6f:b0:a7:f9:3c:02:87:da:c7:56:b9:
20:19:83:0c:39:8e:b4:60:77:72:f1:93:26:63:61:
e9:f7:80:e9:c5:62:d3:35:99:4f:e5:c7:4d:41:90:
e7:1b:5b:d8:a1:0e:72:b4:60:85:92:c0:5e:cb:76:
bb:3b:61:9c:27:65:6b:0d:b0:20:bc:fb:66:21:0c:
2c:3e:b0:ff:da:7e:92:16:5e:87:72:0e:e3:96:f1:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:6D:BC:06:38:FC:0C:BF:5F:33:04:35:C2:CD:0D:EF:19:A4:3F
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.254.0/24
Signature Algorithm: sha256WithRSAEncryption
85:55:e5:23:a4:48:a6:46:3f:ca:be:58:e9:04:2b:db:85:ef:
ad:af:62:52:ce:49:a5:96:13:9a:a0:22:60:4a:dc:d5:7b:6a:
f0:12:74:7b:d4:42:33:a7:38:c9:38:c5:ac:d8:2f:cc:a6:25:
9c:32:ed:43:52:98:ef:dd:6c:df:a6:d6:c7:86:89:2d:b6:c5:
56:e2:d5:5b:64:ee:34:09:02:45:92:5a:c3:f3:01:f4:31:fe:
fe:3a:d7:d9:e7:f8:b4:c9:b2:90:b2:6a:be:12:7d:02:35:59:
8c:1c:15:37:b4:c8:49:91:f6:c3:32:16:8f:85:ea:4f:8c:29:
f6:0b:cf:08:7b:f1:87:38:da:57:a6:56:b6:b5:f7:a4:28:d9:
76:8d:0a:15:4c:0c:ad:d5:60:5f:48:24:4a:cd:df:3f:36:f0:
24:81:2f:90:b5:0c:a8:69:75:00:c1:2d:e0:f8:d0:d2:81:2d:
f5:98:28:eb:88:cd:b3:ed:94:a8:98:15:57:a8:35:12:60:24:
9e:1c:99:58:b9:24:0b:0f:33:5e:3d:1e:fc:03:33:2b:c3:d1:
1c:4a:e6:fc:e9:b3:36:4c:d2:13:83:01:88:eb:d8:98:44:34:
2f:9c:32:f6:3c:e0:dc:f1:70:eb:27:ee:37:31:3c:0a:6e:b9:
35:1b:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:40 2026 by rpki-client