Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234392e302f32342d3234203d3e203633353031.roa
File: 36312e31342e3234392e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: fhQP3rj3f3uA+5K567SBErJHhXwrk7AsDwnmvMJxsC8=
Subject key identifier: C7:95:18:9C:A4:62:5D:5B:02:5D:67:5D:8C:16:28:F9:3B:61:5C:5B
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 666C2EFDF1C5159A397BFD5F795F53D2791F05F0
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234392e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 17:02:45 +0000
ROA not before: Sun 26 Apr 2026 16:57:45 +0000
ROA not after: Sun 25 Apr 2027 17:02:45 +0000
asID: 63501
IP address blocks: 61.14.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6c:2e:fd:f1:c5:15:9a:39:7b:fd:5f:79:5f:53:d2:79:1f:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 16:57:45 2026 GMT
Not After : Apr 25 17:02:45 2027 GMT
Subject: CN=C795189CA4625D5B025D675D8C1628F93B615C5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:92:72:7f:4b:c6:a2:4b:d4:37:ca:62:af:
f5:2f:e3:c6:3d:d3:f5:ac:74:3f:2c:12:50:74:0a:
a5:ee:d9:ff:6c:a6:a3:c2:4c:11:c1:61:31:4e:ea:
8c:c5:d5:f0:ff:b7:c5:c2:1d:64:a8:d7:22:f0:a0:
36:4a:67:63:52:e1:37:0f:fe:0b:49:e3:6f:87:73:
be:a7:ae:8f:12:da:6a:07:d6:78:a6:f3:57:28:02:
56:f5:ee:10:be:71:1c:a6:a4:dd:6d:10:8f:cf:57:
44:72:0b:07:12:e7:6b:78:17:ef:13:f0:5a:5d:31:
4b:00:c7:89:ee:2a:66:12:8f:cf:7c:41:ab:8a:76:
57:c2:a0:76:d8:2f:b1:85:3c:a9:40:13:63:37:4c:
d6:e0:14:25:5d:76:84:f2:ba:44:e2:ef:91:5e:ff:
d6:fc:bf:c0:9e:0f:c0:22:9b:fb:4d:b8:0e:27:60:
9c:74:d7:a7:8e:fe:39:b9:68:7b:a4:56:2f:d4:f7:
55:2c:9e:9b:c3:0b:16:cf:34:22:8e:30:b9:82:4a:
87:d5:25:22:ed:d5:44:ba:e3:30:24:ac:bc:86:3a:
a8:3f:02:56:0e:d4:70:ce:ae:44:b6:27:d3:54:bc:
54:2c:64:c9:79:e6:54:2c:24:1c:b1:bf:43:5a:4e:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:18:9C:A4:62:5D:5B:02:5D:67:5D:8C:16:28:F9:3B:61:5C:5B
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234392e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.249.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ec:fa:16:2e:39:14:ae:04:c8:1f:73:3e:5b:0d:3e:94:55:
37:62:60:9f:a0:e1:d0:84:56:35:37:93:ec:62:22:4d:23:70:
6a:e7:1a:96:25:84:ba:a5:0a:75:f7:a4:9e:41:75:87:75:9a:
2f:ed:a0:65:20:88:22:88:aa:88:d7:f8:eb:75:20:c4:12:a8:
21:6a:7e:7f:f1:72:26:55:b2:da:10:85:3a:a5:86:0f:67:ae:
40:48:87:90:55:19:13:dc:b0:3b:02:a6:20:76:52:82:bb:6a:
95:ba:9a:66:72:68:e8:24:2d:1e:3d:75:9b:b2:00:d2:0b:5c:
10:e3:66:66:a1:51:27:87:86:f2:0f:b8:41:0a:ed:81:51:59:
4e:12:55:ef:79:8b:8e:01:6f:c5:87:05:fd:52:a3:a6:c9:53:
ee:2b:7b:39:5e:17:9f:70:77:9d:c7:5b:ac:32:66:fa:13:e0:
84:d1:56:4a:08:51:d0:9f:b9:65:79:7d:a2:7f:03:8d:7e:7d:
0f:9f:32:10:fb:1a:3f:5d:80:c9:0c:14:80:75:be:b3:b0:3f:
e1:ad:d9:e9:a3:0a:09:73:a0:d1:6e:0e:16:e9:d9:e1:77:76:
78:76:99:ef:b4:57:fb:b2:b9:af:03:92:0f:09:b5:d9:48:f2:
1b:05:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:37 2026 by rpki-client