Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
File: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier: yGEWu2l0Oq3LtaiTebeZqKHmzIsxdm59uCJ+s35x+F8=
Subject key identifier: 9A:96:9B:A5:53:59:3D:13:AF:5C:22:54:61:A9:E0:65:4C:90:E3:5E
Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial: 4B6C33972BCC7B04E55E9D1A52A41777AD2FADEC
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
Signing time: Wed 29 Apr 2026 02:00:01 +0000
ROA not before: Wed 29 Apr 2026 01:55:01 +0000
ROA not after: Wed 28 Apr 2027 02:00:01 +0000
asID: 46049
IP address blocks: 182.255.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6c:33:97:2b:cc:7b:04:e5:5e:9d:1a:52:a4:17:77:ad:2f:ad:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Validity
Not Before: Apr 29 01:55:01 2026 GMT
Not After : Apr 28 02:00:01 2027 GMT
Subject: CN=9A969BA553593D13AF5C225461A9E0654C90E35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:f1:e3:51:28:56:9a:3c:a7:13:9a:7a:f0:
d6:8a:e0:ce:1f:f0:12:15:2d:e8:19:9c:0f:27:ce:
44:31:8e:a9:e4:d3:0a:64:cc:aa:15:89:7f:b2:84:
4d:51:9e:dd:1d:b0:e3:1d:b8:67:7f:4b:37:15:76:
9a:45:af:aa:bd:9a:3c:2c:d1:5e:3d:6f:e7:bc:b9:
7e:b1:ed:d8:bc:bd:20:08:da:47:e3:ec:a0:7a:83:
dc:cc:02:ec:4f:0e:5b:fc:ec:37:63:be:31:ed:28:
82:d0:b4:87:b5:ba:cd:1b:8d:fd:67:be:ef:e0:ed:
ef:95:56:1a:06:e5:81:e0:72:8f:bc:fe:f4:36:87:
3b:84:df:26:ab:21:69:d5:d3:04:d8:d6:a8:07:cb:
c1:fb:a6:74:f6:23:6e:4c:dd:04:1f:53:8e:8d:bc:
d6:0b:ec:c1:7f:bf:46:2b:3a:cb:1f:17:17:a1:29:
a9:fa:ac:f6:77:48:75:2b:2a:44:6b:27:60:99:42:
cf:0b:3a:9b:39:73:38:75:a4:59:6f:94:c3:6f:54:
c7:df:79:b3:28:6e:02:a1:da:48:ff:90:40:d1:41:
6b:e3:00:a1:26:37:60:b1:65:26:8c:71:a1:f3:98:
51:2d:b6:bf:1b:4f:7f:f2:34:b9:b9:4c:32:9d:41:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:9B:A5:53:59:3D:13:AF:5C:22:54:61:A9:E0:65:4C:90:E3:5E
X509v3 Authority Key Identifier:
keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6b:60:66:09:b8:38:e4:f8:b2:0f:9f:40:a6:12:d1:a4:64:
30:33:ba:0a:99:5c:2b:67:67:bb:57:f0:65:9b:31:65:15:b7:
9a:45:c7:72:70:29:57:e9:d7:d2:66:bf:30:12:1d:ce:46:81:
df:e1:8c:0f:02:ff:19:06:b7:7f:4b:65:3b:83:23:d6:13:95:
0e:60:f1:af:8b:fd:bc:96:be:05:c7:dc:d8:e8:4d:b9:38:ca:
bb:e4:01:c6:a5:ad:01:06:97:da:3a:0e:f7:10:12:9d:77:1d:
9c:5c:12:c2:89:d4:57:4a:fb:ac:92:c3:62:00:bf:9e:b0:5e:
1c:ed:5b:fb:44:e5:bc:02:42:8f:56:50:22:0c:bd:ea:11:22:
c5:37:73:86:bf:4b:5e:df:7d:89:b1:68:81:6d:df:fc:b4:27:
c8:f6:dc:d9:a8:bf:22:b7:21:36:c6:88:bc:27:58:eb:50:ef:
08:3c:fd:70:d6:4d:fe:eb:04:20:f5:b4:25:db:00:74:b8:50:
28:78:d4:bd:2e:c1:8b:07:fa:9a:d5:10:1b:06:f2:98:b3:1c:
62:28:b4:15:47:96:77:e0:29:fe:fb:9d:f2:b2:36:bf:cd:02:
88:42:63:55:f4:1e:ae:97:54:d8:96:2e:dd:13:b2:1d:3c:3c:
57:4a:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:43 2026 by rpki-client