Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32342d3234203d3e203633353031.roa
File: 36312e31342e3234382e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: sdLlr3ZojS4bTn2TkcWLVTY2lVwCuaksYr9LFOM1qN4=
Subject key identifier: 55:5E:66:3F:41:ED:C7:AA:D2:DD:A7:C2:0A:6E:E3:A1:A6:CD:30:A8
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 56FC094BC173F312A54F952F832B1288FB85F5F8
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 19:00:02 +0000
ROA not before: Sun 26 Apr 2026 18:55:02 +0000
ROA not after: Sun 25 Apr 2027 19:00:02 +0000
asID: 63501
IP address blocks: 61.14.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fc:09:4b:c1:73:f3:12:a5:4f:95:2f:83:2b:12:88:fb:85:f5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 18:55:02 2026 GMT
Not After : Apr 25 19:00:02 2027 GMT
Subject: CN=555E663F41EDC7AAD2DDA7C20A6EE3A1A6CD30A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:89:20:d9:43:45:67:13:44:14:4e:1a:80:
a6:a8:02:09:62:83:54:7d:31:7b:4f:28:4e:b1:ad:
dd:ce:66:ac:ea:55:a4:9a:7a:89:ac:2d:65:97:91:
3f:2e:98:0c:f8:1c:83:6c:3e:3c:01:84:9c:b0:10:
7c:1a:c3:5d:78:18:a3:15:00:e7:6b:78:d2:5c:58:
86:ce:30:19:46:25:dc:79:6c:a3:f5:f1:e7:81:40:
7d:d6:d1:7b:42:72:38:00:e1:39:14:76:bf:54:be:
15:9e:e2:fa:58:e0:50:d2:f2:80:19:6c:88:66:5f:
33:7a:dc:37:95:d5:32:65:f5:91:d0:5e:18:94:c7:
30:83:9f:1f:d9:1c:ce:6f:7c:dd:3f:2e:cf:91:9c:
36:bd:b9:42:42:42:f6:90:a2:81:4f:70:b7:92:db:
ca:78:2b:7e:a6:54:b3:fe:6d:0f:eb:2e:eb:aa:90:
0c:4b:3f:43:6b:24:ee:6a:05:1e:90:6b:91:31:9f:
82:c5:b0:c0:d9:71:47:78:9a:37:f0:27:8f:ed:45:
b2:3b:3c:9d:12:0b:aa:33:a3:de:73:bc:32:44:2d:
11:ad:ea:af:c6:b2:b6:f2:6b:26:d8:6a:a3:ef:09:
a3:e4:25:a2:26:fc:92:e5:a3:fc:4a:1f:d8:e3:4b:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5E:66:3F:41:ED:C7:AA:D2:DD:A7:C2:0A:6E:E3:A1:A6:CD:30:A8
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:55:f4:33:58:e6:6c:4b:6a:d2:9c:f3:3c:c8:2f:4c:93:e8:
98:b9:01:9a:52:91:56:df:22:82:2d:59:a8:b0:06:cb:9c:a4:
b0:a3:c7:5b:89:5d:80:ca:63:ec:52:9f:d6:01:af:55:ae:bd:
9a:f6:71:bb:85:99:e6:d6:e1:eb:e3:93:78:37:8c:d7:c1:04:
0f:ff:e9:c5:73:c5:37:31:43:5a:83:8f:7b:df:43:a2:94:9c:
fe:61:d2:11:d1:0d:ab:d7:ae:c6:95:f1:2d:64:99:ec:e0:be:
0a:45:b2:df:74:94:31:af:03:f6:34:70:9f:76:4c:83:19:79:
1f:3c:1b:82:8e:5d:55:c3:2d:78:b3:4d:ee:fc:42:b9:bd:78:
9a:6e:09:23:dd:b2:3c:fd:93:63:83:1a:11:56:1c:80:be:a9:
c5:78:86:a0:a8:f7:37:ac:9e:a7:22:3c:d5:5d:a0:7a:b4:74:
ea:7a:9c:f0:79:d1:7c:f1:42:77:b0:b2:dd:1f:40:66:84:2e:
09:ab:84:62:5c:54:09:64:77:2c:60:30:9e:cc:69:f2:e3:58:
4c:cd:0b:c3:b2:a7:95:da:c1:30:61:44:e2:dd:fc:b8:3e:76:
31:72:5e:47:b8:2b:50:b1:2e:6f:ce:b2:8a:56:ac:61:f3:07:
86:48:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:11 2026 by rpki-client