Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
File: 36312e31342e3235312e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: jyHRmpGgBPuvPgrnPuKe4Re8QqEersNhYTIEUuI8MtM=
Subject key identifier: C8:46:A7:CB:E3:00:C7:04:EA:F4:EE:DA:29:CD:2E:99:64:06:FB:82
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 220DC8EBE74221A5AB3D02A51BE61EB0EF90B9A0
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 19:00:02 +0000
ROA not before: Sun 26 Apr 2026 18:55:02 +0000
ROA not after: Sun 25 Apr 2027 19:00:02 +0000
asID: 63501
IP address blocks: 61.14.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0d:c8:eb:e7:42:21:a5:ab:3d:02:a5:1b:e6:1e:b0:ef:90:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 18:55:02 2026 GMT
Not After : Apr 25 19:00:02 2027 GMT
Subject: CN=C846A7CBE300C704EAF4EEDA29CD2E996406FB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:d1:a7:b4:56:df:b3:df:e9:62:6b:74:60:
e8:35:47:1d:35:87:15:30:93:d1:07:2b:a6:3b:94:
fe:53:af:f9:0c:aa:15:2c:56:1b:18:9c:d9:09:5b:
ee:01:fd:04:f3:79:56:17:1b:1d:02:7b:f0:cb:6a:
85:50:a9:a4:6f:08:69:5e:b7:95:15:69:17:5a:01:
0a:03:e6:76:c8:e6:89:10:09:00:de:08:a4:27:30:
d0:20:6a:01:1f:4b:71:05:3f:a2:3d:a9:98:1f:e4:
8f:30:c8:19:4e:90:48:65:88:74:09:50:12:2b:b7:
6d:a8:00:22:64:e9:62:17:f9:33:0b:10:be:4a:7c:
84:25:28:3e:d4:32:49:af:27:a4:89:62:47:0b:15:
17:a6:58:10:c8:bc:7b:7e:6d:fb:f2:b0:6f:1d:b8:
62:6d:c4:3b:40:43:ec:88:f5:3c:5c:53:83:a5:6e:
2e:b3:47:be:65:28:60:1f:65:54:fb:84:15:ca:05:
8d:11:7f:0b:3e:81:d8:b3:8e:73:f9:b5:54:05:5e:
8b:c3:81:9f:06:40:eb:11:8a:1c:ee:b1:28:fc:29:
9d:f3:6a:de:a3:4a:92:6a:cd:18:ec:14:eb:78:b6:
06:a4:b0:37:57:26:03:9d:a2:a3:8c:b2:d4:9b:13:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:A7:CB:E3:00:C7:04:EA:F4:EE:DA:29:CD:2E:99:64:06:FB:82
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.251.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a5:7e:43:bd:5c:ea:ab:ca:6d:8f:62:8e:36:1c:13:9b:ff:
a3:c2:02:62:ce:b8:6c:6f:8f:bd:b9:3a:da:b5:62:20:ba:62:
4f:ed:42:9c:d6:a2:c5:06:24:04:f4:c9:03:a0:54:37:60:dd:
08:6f:bb:36:ed:01:df:56:bd:e5:bf:f9:60:63:e5:b2:87:ff:
33:2c:bc:5f:1d:a7:f4:ed:a5:2b:fc:b3:9f:0a:50:0a:96:c5:
de:28:d5:46:1f:fb:d5:17:0a:81:75:e6:e3:d7:11:2d:c2:47:
8c:2c:40:d5:a2:7d:a3:89:c9:bf:97:b6:e7:24:d9:0b:f5:55:
9b:93:a3:d2:89:c7:71:d8:8a:9e:22:1c:ba:35:eb:94:d5:b8:
48:ae:70:aa:89:cd:43:0b:f0:b7:3f:65:d4:71:bf:f6:c3:ea:
87:38:af:6a:24:b7:ca:68:17:fe:11:c3:6a:08:22:d9:ce:6b:
52:a6:63:3f:b7:3c:6b:5a:04:c2:c8:8d:47:bc:62:8e:07:c8:
9b:1b:52:a4:bb:a3:73:ef:58:3d:93:9c:f2:3f:cb:b8:e4:d5:
0c:a3:60:ef:83:03:c8:b7:73:4e:11:d6:a3:c1:62:b6:3d:59:
d1:df:b2:6e:42:a6:6b:48:5a:a1:dc:46:f0:2d:d6:09:0d:7c:
df:be:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:00 2026 by rpki-client