Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32342d3234203d3e203633353031.roa
File: 36312e31342e3235302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: IhQxDvI8wXlKkD8vvWJQV4KVo9Tq6V9WzpxtbPLShZQ=
Subject key identifier: 1B:6C:F2:8D:A9:3E:60:F6:AF:15:9C:16:34:FF:0F:2A:66:F2:F1:BB
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 3D0F7B9AB5B947BF500CF474888C64B33A5CEC2D
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 18:00:02 +0000
ROA not before: Sun 26 Apr 2026 17:55:02 +0000
ROA not after: Sun 25 Apr 2027 18:00:02 +0000
asID: 63501
IP address blocks: 61.14.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0f:7b:9a:b5:b9:47:bf:50:0c:f4:74:88:8c:64:b3:3a:5c:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 17:55:02 2026 GMT
Not After : Apr 25 18:00:02 2027 GMT
Subject: CN=1B6CF28DA93E60F6AF159C1634FF0F2A66F2F1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:52:98:58:e5:83:87:64:fc:ee:76:62:a6:
11:d7:e4:54:80:a0:23:c0:11:07:1f:e0:1a:33:80:
12:50:cb:eb:20:34:04:10:1b:24:11:9f:41:21:b8:
f5:65:41:f6:53:67:cb:fc:04:30:88:d8:58:8e:51:
df:c4:cb:fc:67:7b:05:02:de:e5:a1:3b:df:74:cf:
33:91:ed:8e:a1:e2:3d:13:d2:4f:38:22:73:e2:42:
27:e7:f1:bd:2d:4f:81:21:c9:d3:73:19:97:d4:76:
61:41:72:b3:08:9e:92:30:a2:4d:5e:af:78:b9:a9:
64:97:2d:66:4c:6c:6b:40:a0:c9:d7:98:88:56:b9:
72:02:28:78:0f:df:71:f2:68:a1:e3:62:6c:cf:c5:
68:1a:cd:b5:ac:9f:d4:f7:19:f8:4b:40:e7:dd:49:
a8:02:c0:5a:7f:02:05:2f:44:56:a9:53:a1:7e:27:
44:dd:a0:b4:ca:7d:80:73:e5:8c:fd:ab:7d:2c:7c:
e0:af:36:fd:44:a3:29:22:a4:67:fd:37:83:c3:b8:
2b:60:3a:5a:26:59:08:46:d7:e9:15:71:a6:0e:94:
72:00:8a:1f:94:25:7c:65:9a:72:4e:fd:5b:db:10:
0c:1e:fc:e5:88:98:3b:b3:7b:31:31:c5:99:82:3b:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:F2:8D:A9:3E:60:F6:AF:15:9C:16:34:FF:0F:2A:66:F2:F1:BB
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:9a:b2:e1:d1:e5:7f:4a:1a:30:e5:3c:6a:9d:19:7c:e6:03:
a8:28:69:f9:d3:99:ca:25:68:ad:91:61:69:22:8e:58:91:b5:
ce:81:8d:a9:ca:97:65:df:b3:0a:91:b5:64:02:94:42:8d:bb:
69:cd:d6:22:85:be:a0:7e:36:17:9f:2d:f7:84:aa:6d:9f:05:
34:43:52:8c:58:c7:06:d8:09:6f:c6:8d:72:06:e6:36:a0:40:
c9:3f:90:0d:8f:6f:81:40:f5:2c:ba:77:d0:9f:c5:9d:1f:5c:
37:a3:44:29:96:d5:89:73:c8:cd:e4:db:6d:fe:0e:e9:93:14:
a2:63:50:b6:d8:88:95:dc:57:b1:af:35:02:b0:df:98:cc:26:
08:93:77:6d:ee:30:0f:a6:57:58:b2:c9:e3:6d:85:98:2f:45:
be:d3:04:b9:ba:3c:d9:38:c7:90:8a:d9:4d:aa:94:c2:5b:ea:
32:a4:19:10:09:d5:06:1d:fd:e7:f9:ca:34:e2:f8:8a:a8:56:
3c:4c:29:8b:cf:2f:08:7b:de:1d:6f:2d:1c:81:a2:d8:af:9f:
0e:87:00:88:e3:2f:21:16:9e:4f:d9:dd:f6:6c:20:56:b5:be:
8b:1c:ac:ed:68:ac:be:40:8a:0f:75:cd:6f:b9:cb:c8:e8:b3:
fb:11:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:31 2026 by rpki-client