Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32332d3233203d3e203633353031.roa
File: 36312e31342e3234382e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier: vyB2g3/bNvXuX7TYfO+aMlI7UDDmi7QzjTnTmT7qHJc=
Subject key identifier: 43:61:2E:E4:D9:54:6B:3E:46:98:C3:AC:14:A6:6F:D7:E4:74:98:3B
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 54EA454CEC7263790E78DCDB9FC7E832CCE486F1
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32332d3233203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 19:00:02 +0000
ROA not before: Sun 26 Apr 2026 18:55:02 +0000
ROA not after: Sun 25 Apr 2027 19:00:02 +0000
asID: 63501
IP address blocks: 61.14.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ea:45:4c:ec:72:63:79:0e:78:dc:db:9f:c7:e8:32:cc:e4:86:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 18:55:02 2026 GMT
Not After : Apr 25 19:00:02 2027 GMT
Subject: CN=43612EE4D9546B3E4698C3AC14A66FD7E474983B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:b8:ba:a1:bd:99:64:86:35:87:94:f7:45:
ae:2c:46:68:4b:36:0f:c1:ae:63:8b:44:da:7b:9b:
8a:4c:ea:77:da:37:76:e4:9f:da:f3:e1:6d:d3:b0:
07:5c:0a:85:41:45:40:e4:5f:9c:c8:b3:83:c1:cb:
83:fc:7c:6d:cc:c2:80:31:0b:63:c3:3d:9b:14:49:
60:44:e2:26:4b:89:27:fc:d2:72:c4:d5:60:99:d8:
35:b6:00:ff:8d:2c:54:e5:5f:78:da:22:57:e2:8b:
37:68:66:92:f1:b7:f2:a4:c8:8f:b8:36:77:78:ee:
f7:09:d5:bd:ae:c6:27:f2:6b:e7:08:c4:d7:f2:5e:
16:50:28:2a:8e:8f:23:c9:29:7f:c2:e6:a4:95:21:
ff:4c:ec:b6:71:cb:5e:07:22:3b:23:b5:0d:8b:b6:
eb:3e:25:dd:73:7c:a4:af:8b:53:f6:e3:6f:27:21:
34:ec:f9:81:af:3b:6b:1b:5b:2e:33:4c:f8:01:3f:
42:83:ba:c7:fc:1e:cb:27:c3:af:40:46:d5:62:6c:
2e:43:02:6c:c9:07:45:f0:46:52:55:6b:e9:ee:0e:
58:3c:ac:08:00:b9:f2:73:29:2c:e5:fb:73:9f:4b:
6b:ed:0b:76:7e:47:47:a9:61:13:17:e3:36:6d:6d:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:2E:E4:D9:54:6B:3E:46:98:C3:AC:14:A6:6F:D7:E4:74:98:3B
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32332d3233203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.248.0/23
Signature Algorithm: sha256WithRSAEncryption
93:fc:86:8f:96:ac:f6:df:b9:3f:22:72:b6:2c:e2:cc:48:8b:
fa:02:ec:c5:7a:47:2c:fe:8d:b1:20:56:a3:f6:11:ee:29:5b:
8c:ca:d5:22:a8:b4:c9:ee:be:95:ea:81:15:76:2b:61:5e:b8:
3a:3b:d0:5c:6c:0f:88:46:8b:19:46:f9:c4:14:2d:70:15:6f:
ce:26:4f:0d:ec:5a:88:2b:03:cc:20:11:76:b7:2f:03:10:8d:
dc:f5:3b:06:fe:bd:1e:df:0a:f8:36:de:2f:e6:1b:2f:55:b5:
fc:46:e0:fc:95:76:03:9c:63:14:39:91:2a:96:ce:2d:45:61:
69:37:3b:7e:4e:3c:f5:7c:66:2d:0a:4b:75:71:2f:77:e0:0c:
f4:8c:ef:b9:d4:17:12:97:8b:ed:98:e5:2d:d9:cd:54:56:4b:
f1:d2:40:fb:54:9a:a2:be:9c:16:47:74:bb:92:19:61:88:d3:
a6:68:f0:23:ad:fe:ff:41:8a:f9:b7:e4:72:09:87:ef:fa:21:
47:b4:6b:3f:bb:57:a1:8e:ee:b8:ca:40:17:3c:22:b4:65:2e:
81:61:12:bf:b6:05:68:61:a8:a1:c5:da:d5:9e:fd:1b:1c:22:
47:86:8d:fe:48:65:7a:63:ee:07:66:7a:0a:74:d8:08:b6:95:
67:d7:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:34 2026 by rpki-client