Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
File: 36312e31342e3234382e302f32322d3232203d3e203633353031.roa (raw, json)
Hash identifier: Ti3SlFmFmA0gmMzFwTPD0fRuu5uscmIOBu/MEppITOs=
Subject key identifier: D7:89:A6:A7:F1:CC:ED:1A:C3:E3:07:F4:46:47:F1:44:AF:74:F2:E6
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 5E684667727F5D0405B98B00BA4CAECFF2DE6BBF
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 18:00:02 +0000
ROA not before: Sun 26 Apr 2026 17:55:02 +0000
ROA not after: Sun 25 Apr 2027 18:00:02 +0000
asID: 63501
IP address blocks: 61.14.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:68:46:67:72:7f:5d:04:05:b9:8b:00:ba:4c:ae:cf:f2:de:6b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 17:55:02 2026 GMT
Not After : Apr 25 18:00:02 2027 GMT
Subject: CN=D789A6A7F1CCED1AC3E307F44647F144AF74F2E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:9d:ef:ca:ba:af:c5:31:b2:02:fb:37:0b:
f6:a4:12:fe:57:f0:79:9d:4a:b2:66:3c:99:d5:9e:
de:e5:8c:37:d3:3a:77:a3:93:00:c2:42:a7:bb:7c:
e8:e5:e9:e6:54:31:b8:ae:f0:e1:11:de:83:87:db:
34:65:07:b9:60:c6:3f:ea:19:a9:68:86:67:e1:79:
e8:72:86:2b:8f:61:2c:a7:c0:33:7e:ef:07:90:01:
1f:6d:8e:a7:43:4e:77:a6:58:11:22:0c:fb:23:c0:
ab:9a:3f:3f:c3:f2:e9:87:d8:cf:a6:ca:b3:20:cb:
64:c1:7a:3e:70:c9:55:78:e2:99:98:1c:71:d2:7e:
6e:df:fe:47:14:4c:70:5d:39:b2:85:d4:7e:fb:62:
2e:90:35:86:df:71:e8:ad:a8:22:c6:4d:c9:82:f9:
b3:77:e7:d5:99:65:e1:ae:3b:f3:dd:e1:63:1b:e2:
f6:87:ca:15:db:b4:a9:c6:4a:8c:35:48:ec:f3:9a:
0e:2f:ce:1e:da:58:98:90:32:45:b6:f5:93:fe:6d:
e1:b8:51:a4:10:64:9a:32:c1:45:f9:79:9c:e8:cc:
14:e7:83:bf:10:4f:13:1e:25:57:64:df:63:2b:e1:
2e:16:45:fd:4c:3b:8b:31:eb:c6:39:c3:64:83:55:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:A6:A7:F1:CC:ED:1A:C3:E3:07:F4:46:47:F1:44:AF:74:F2:E6
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.248.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:cc:f0:a9:ea:9d:49:b8:de:ec:c8:64:78:0b:49:dc:e5:b1:
0f:2f:79:33:87:32:29:d5:d8:3f:9e:a5:2f:92:d1:2c:96:6a:
e3:1c:f7:ac:fc:3e:f5:31:3c:09:82:d4:6a:60:06:d0:24:79:
b8:90:19:6f:0b:c5:8f:a2:46:85:ee:cb:2e:e9:98:43:cb:55:
67:58:36:67:b5:37:0a:a3:1c:58:5c:ce:b2:32:ee:d0:30:b2:
75:b0:f4:4d:8f:09:7f:89:67:23:27:65:df:77:4b:70:6b:43:
2e:58:fb:ba:e9:f1:f4:01:c6:13:69:01:b7:20:06:ff:58:b2:
47:00:b6:a7:a1:87:fe:94:40:1f:88:d6:26:e0:33:a7:55:c2:
e1:d9:09:dc:13:f9:97:36:e9:93:95:82:8a:2f:7d:9c:4a:12:
1d:34:cb:11:e3:80:e9:32:10:7d:d6:68:68:eb:8c:8f:cc:35:
9a:99:0d:fd:58:25:ff:ae:92:48:48:4f:5d:4b:bf:53:64:e6:
79:e9:9a:c9:e3:46:65:d6:ba:b8:b4:5d:61:1e:1c:0b:a5:6c:
f6:4d:a9:e5:90:39:f3:55:e6:ae:08:d0:5a:96:99:39:60:c9:
0d:46:fc:38:48:b0:9a:40:53:5e:fd:83:69:71:42:2d:ce:ab:
d2:96:a4:df
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXmhGZ3J/XQQFuYsAukyuz/Lea78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNjA0MjYxNzU1MDJaFw0yNzA0MjUxODAwMDJaMDMxMTAvBgNV
BAMTKEQ3ODlBNkE3RjFDQ0VEMUFDM0UzMDdGNDQ2NDdGMTQ0QUY3NEYyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrt53vyrqvxTGyAvs3C/akEv5X
8HmdSrJmPJnVnt7ljDfTOnejkwDCQqe7fOjl6eZUMbiu8OER3oOH2zRlB7lgxj/q
GalohmfheehyhiuPYSynwDN+7weQAR9tjqdDTnemWBEiDPsjwKuaPz/D8umH2M+m
yrMgy2TBej5wyVV44pmYHHHSfm7f/kcUTHBdObKF1H77Yi6QNYbfceitqCLGTcmC
+bN359WZZeGuO/Pd4WMb4vaHyhXbtKnGSow1SOzzmg4vzh7aWJiQMkW29ZP+beG4
UaQQZJoywUX5eZzozBTng78QTxMeJVdk32Mr4S4WRf1MO4sx68Y5w2SDVQjdAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU14mmp/HM7RrD4wf0RkfxRK908uYwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzM2MzEyZTMxMzQyZTMyMzQzODJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9DvgwDQYJKoZIhvcN
AQELBQADggEBANbM8KnqnUm43uzIZHgLSdzlsQ8veTOHMinV2D+epS+S0SyWauMc
96z8PvUxPAmC1GpgBtAkebiQGW8LxY+iRoXuyy7pmEPLVWdYNme1NwqjHFhczrIy
7tAwsnWw9E2PCX+JZyMnZd93S3BrQy5Y+7rp8fQBxhNpAbcgBv9YskcAtqehh/6U
QB+I1ibgM6dVwuHZCdwT+Zc26ZOVgoovfZxKEh00yxHjgOkyEH3WaGjrjI/MNZqZ
Df1YJf+ukkhIT11Lv1Nk5nnpmsnjRmXWuri0XWEeHAulbPZNqeWQOfNV5q4I0FqW
mTlgyQ1G/DhIsJpAU179g2lxQi3Oq9KWpN8=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:50 2026 by rpki-client