Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
File: 36312e31342e3235302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier: /N6sI9OxbjLl3A2GGzhQPKfZYLw+K0LJ7WB9h+hgtJk=
Subject key identifier: 86:D4:48:51:4F:61:36:A6:82:4C:C6:59:63:F8:40:FA:87:93:30:34
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 48AF13EB47B59587DC540626ABFCAE3AAFCFF607
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 18:00:02 +0000
ROA not before: Sun 26 Apr 2026 17:55:02 +0000
ROA not after: Sun 25 Apr 2027 18:00:02 +0000
asID: 63501
IP address blocks: 61.14.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:af:13:eb:47:b5:95:87:dc:54:06:26:ab:fc:ae:3a:af:cf:f6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 17:55:02 2026 GMT
Not After : Apr 25 18:00:02 2027 GMT
Subject: CN=86D448514F6136A6824CC65963F840FA87933034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:06:d6:c0:4d:69:2e:5e:10:4c:4c:bc:1c:
b1:16:ee:d8:fc:97:23:c5:80:06:33:34:44:1a:cd:
5e:d0:cb:7e:e1:43:30:47:7d:79:0b:43:56:fb:14:
0c:2f:d7:5e:db:1b:fb:b1:87:a7:26:7c:31:02:05:
b3:b4:15:3a:24:ae:37:cf:3e:81:fe:6a:9a:4d:d5:
5d:0c:5c:d3:3d:e2:6f:08:11:39:6e:05:6f:da:71:
0a:7e:51:72:b7:5b:54:f6:8a:75:fa:f4:98:df:f0:
11:61:c7:00:41:96:9e:23:13:ab:9f:66:36:2e:e2:
90:1e:09:8e:39:4e:06:2d:7b:b4:53:e6:b3:ed:2b:
44:6e:d4:a6:fa:f4:ac:17:67:09:0b:a3:1e:e6:10:
81:18:b0:d6:a2:c2:dd:7a:9f:db:c4:29:37:cd:4e:
a2:da:bd:88:d6:99:e9:63:ef:f8:81:17:c1:f9:c4:
91:8a:ac:fb:e1:28:d1:99:8a:a8:ca:9a:2f:05:70:
f9:23:e0:ec:64:85:e8:d6:11:e2:ae:26:57:4c:47:
fa:29:eb:91:0c:7c:c2:2b:43:83:f2:34:3d:ac:76:
23:aa:b7:bd:7d:ec:e4:83:2f:34:d0:4e:13:72:46:
5c:44:e1:d2:5b:35:39:30:0f:b0:cf:ac:fb:81:9d:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D4:48:51:4F:61:36:A6:82:4C:C6:59:63:F8:40:FA:87:93:30:34
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.250.0/23
Signature Algorithm: sha256WithRSAEncryption
54:44:0d:af:84:ee:9e:b5:c7:d8:bd:1b:5c:05:53:1a:3b:b3:
9c:9c:50:fc:6e:fd:3f:5d:b9:b1:7f:33:af:b7:41:31:29:d9:
a9:a4:7b:15:1f:97:d0:62:ba:3c:05:8e:68:26:31:1c:28:c6:
2e:24:96:a9:c7:b9:6d:ff:00:05:f8:b0:58:7c:10:69:91:09:
00:b6:d1:c9:c8:00:b3:ce:74:3f:49:0f:7f:5a:c2:ae:6d:6f:
c8:c1:4f:0c:9c:cf:9a:7e:b6:5a:ea:5c:c4:86:8f:07:be:59:
23:75:e6:d5:7e:31:44:ef:36:e9:fe:f9:14:77:f3:03:dc:48:
08:3b:34:cf:aa:f5:3f:4a:e9:f3:57:c3:f6:b8:b6:fb:87:99:
7f:d3:f5:a5:92:99:eb:d6:1d:68:b0:a8:a0:50:41:15:23:03:
bf:b2:22:7f:d9:1b:5d:fe:13:af:bb:dd:65:2b:6b:c5:04:81:
d3:d2:30:62:61:f7:fd:3a:bb:7e:8e:81:fe:2e:d5:c1:b5:9e:
f6:63:17:b2:2b:ac:4d:b4:de:61:4d:f1:90:f2:8e:e1:ad:5d:
1e:ab:cd:01:97:f4:93:9c:40:ee:f9:b8:89:ea:b4:07:27:e5:
dd:f8:2a:cc:50:c8:82:ea:ed:7e:44:0e:88:13:c3:d8:c5:08:
36:e5:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:06 2026 by rpki-client