Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          LcMcDEYk1quMfJpmbkDDj7PMG1ORAjVnV8bDAT9Q0FE=
Subject key identifier:   01:AB:7D:FC:24:A7:85:84:F8:E4:56:23:24:96:02:6E:A5:49:38:50
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       53B6AB37D8105E0C29BDFBE352714403E2B09730
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Thu 23 Apr 2026 05:00:00 +0000
ROA not before:           Thu 23 Apr 2026 04:55:00 +0000
ROA not after:            Thu 22 Apr 2027 05:00:00 +0000
asID:                     133798
IP address blocks:        2402:5680:8f30::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b6:ab:37:d8:10:5e:0c:29:bd:fb:e3:52:71:44:03:e2:b0:97:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Apr 23 04:55:00 2026 GMT
            Not After : Apr 22 05:00:00 2027 GMT
        Subject: CN=01AB7DFC24A78584F8E456232496026EA5493850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:86:1d:43:3a:72:ac:bb:44:e7:e9:02:15:
                    52:4b:42:a5:3c:1d:a2:f1:77:be:ed:f5:70:d8:63:
                    e8:39:a8:7d:21:bf:9f:ac:2e:0a:76:3c:8c:b1:9d:
                    86:dd:59:82:63:1e:ec:73:12:af:d0:90:ae:a4:46:
                    4a:03:d8:ce:4f:73:61:22:7a:62:5d:e5:d3:55:df:
                    75:0b:da:91:3d:63:16:2a:41:cb:32:c6:5d:4e:19:
                    a1:d3:1e:7d:31:3b:bc:29:2c:98:a8:ef:b9:04:6c:
                    47:ac:ff:fc:68:fc:c1:09:c6:b5:24:80:ee:93:43:
                    d2:f9:e2:00:cb:62:25:63:96:0d:85:6e:6e:0f:32:
                    ec:63:23:c0:2a:77:86:69:a7:1c:4b:3f:f1:49:68:
                    09:35:a0:9f:e6:c5:ac:75:fb:c5:7b:6d:46:ca:ff:
                    34:f4:67:ec:e5:f5:77:09:6c:75:6d:f7:d4:e6:26:
                    a2:50:36:35:35:5b:a5:3e:4a:a6:44:09:44:f9:90:
                    01:d5:0e:c4:21:ee:bd:38:16:4d:d1:a2:a3:b4:b2:
                    8a:ef:94:27:88:16:7c:bf:7d:e8:f9:e7:73:63:c5:
                    c4:6d:63:da:83:4d:03:7a:91:93:9f:34:2e:9a:77:
                    41:7f:ec:b2:4b:a5:e0:49:3f:1c:51:79:1c:cd:ef:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:7D:FC:24:A7:85:84:F8:E4:56:23:24:96:02:6E:A5:49:38:50
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8f30::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:8d:91:9e:5d:2b:b5:b5:59:aa:2c:5e:57:92:b4:99:bf:
         b2:5a:fe:16:30:dd:c3:66:a3:3b:1e:aa:23:ba:53:2c:4d:46:
         4b:55:36:99:08:af:35:b6:e1:c8:d5:f2:d3:b9:f4:a3:6b:5a:
         d6:71:20:1f:45:58:db:c9:6a:d8:12:24:5c:4d:f7:bc:16:8d:
         63:2c:eb:23:89:f6:89:d6:2f:03:42:1d:06:fa:7c:76:e3:c3:
         77:92:6e:6c:a9:9a:8a:2f:22:c7:34:e2:e7:08:6a:60:25:c5:
         5c:00:a2:44:02:5c:95:24:97:d2:21:81:0e:aa:d6:25:79:fd:
         c0:7a:4c:d1:56:39:46:1e:78:3c:fe:7a:cc:4b:2f:24:ce:43:
         29:40:e5:31:6c:c0:29:19:75:1d:ed:e6:a7:b0:95:cc:a6:31:
         be:eb:40:63:b7:95:95:78:fe:f3:f9:80:66:0c:d5:6e:db:64:
         f3:d7:47:97:eb:e6:91:89:f5:b0:b6:5e:e7:47:3f:64:23:e6:
         7e:f6:2e:f8:2d:83:51:17:1e:80:c6:ff:66:44:96:ff:6d:2a:
         3b:da:98:88:43:96:7b:05:da:e6:45:6e:84:98:c7:04:57:e2:
         fb:82:cb:7a:85:e2:1e:5f:3f:29:ea:49:68:81:e7:35:b1:f6:
         56:ff:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:20 2026 by rpki-client