Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          rpn9P4rBuloHoDb3bDL7AVq3mdp2hp5lGwDdXFtMGeI=
Subject key identifier:   E5:8F:0E:84:5B:8F:DA:05:8E:C3:41:B0:73:4B:2B:6F:A0:12:60:9E
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       6925CC507DC0D7D2664D74306E2F141E01277DB0
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Tue 28 Apr 2026 17:00:00 +0000
ROA not before:           Tue 28 Apr 2026 16:55:00 +0000
ROA not after:            Tue 27 Apr 2027 17:00:00 +0000
asID:                     133798
IP address blocks:        2402:5680:9180::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:25:cc:50:7d:c0:d7:d2:66:4d:74:30:6e:2f:14:1e:01:27:7d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Apr 28 16:55:00 2026 GMT
            Not After : Apr 27 17:00:00 2027 GMT
        Subject: CN=E58F0E845B8FDA058EC341B0734B2B6FA012609E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:b0:a1:80:09:9b:69:88:78:f2:2e:e5:3f:
                    a9:33:07:ed:df:18:c9:86:c9:7c:0f:40:34:bc:78:
                    bf:92:7b:71:49:04:42:85:4f:bd:36:36:d9:ed:41:
                    f1:92:24:24:90:90:22:59:92:02:a0:14:0a:95:ff:
                    f4:1b:6a:bd:68:55:c1:cb:cb:c6:ef:3a:52:cb:9a:
                    d0:b6:28:38:6d:51:97:a3:52:6a:da:2d:e1:46:fe:
                    ca:11:45:71:45:f3:39:e9:8f:22:16:1c:87:af:c1:
                    0e:43:0e:92:a0:27:d4:ec:7a:08:88:0b:38:73:da:
                    51:9e:96:b2:79:ba:bc:15:7f:18:ce:c9:ba:ea:84:
                    9c:10:be:55:f3:84:f5:ec:c0:a9:a5:73:23:69:99:
                    03:70:24:c1:9b:ef:d3:3f:46:bd:6d:f4:23:50:36:
                    50:93:d2:dc:ab:4f:20:8e:3c:ff:f0:91:8b:7a:c3:
                    57:f6:44:95:fb:25:03:52:35:14:11:08:44:24:6c:
                    42:76:e2:6d:52:77:4b:f3:ed:6a:f5:0e:67:55:18:
                    a0:21:1a:d6:ce:6d:1a:e2:4b:f1:cb:26:f4:91:b8:
                    f4:85:36:88:94:78:93:e0:00:3d:ae:de:25:06:18:
                    d4:7d:5b:87:ec:2e:4c:fa:74:46:b2:74:85:ec:63:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:0E:84:5B:8F:DA:05:8E:C3:41:B0:73:4B:2B:6F:A0:12:60:9E
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9180::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:db:b5:1c:98:3b:90:f3:98:6d:b9:44:9f:3b:a6:d6:bd:99:
         a0:14:8d:66:d3:81:b5:f7:84:8b:47:4b:a9:26:e0:8e:ea:be:
         60:b2:06:ad:a0:89:ab:77:3e:55:b6:57:59:8a:69:59:c3:af:
         41:b9:55:89:bc:84:42:1d:93:6c:3a:f9:b4:5e:d6:0c:3b:ec:
         fd:a7:c2:e5:4b:c9:8f:dd:58:fd:e6:d3:90:70:fb:8a:08:ee:
         45:25:55:dd:0e:8e:63:f6:6b:3a:11:4d:84:cd:b5:17:08:a7:
         a7:b8:28:fd:01:3d:cc:2a:51:5b:36:9b:3d:b5:43:9a:8b:06:
         c4:e2:c5:d3:47:73:16:72:db:a3:86:62:3c:14:e9:15:9c:18:
         0c:ce:c6:7b:ba:71:73:2a:d9:04:00:f9:4d:29:4c:48:6e:dd:
         a4:77:a9:46:11:99:b3:97:4e:ab:b9:e3:10:69:58:64:08:5a:
         d7:20:6d:42:aa:86:a1:e5:9f:23:20:c8:df:21:62:cc:7a:74:
         bd:29:cf:70:1e:db:be:05:22:6d:f5:fc:92:a4:ff:15:4c:39:
         b3:5a:70:9f:1d:c2:bc:8f:fa:05:83:bc:a8:5a:e8:af:b3:f5:
         1e:8e:e8:c7:cb:08:6f:6f:be:fe:79:17:a2:ae:43:6b:fe:4d:
         d1:20:4e:72
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaSXMUH3A19JmTXQwbi8UHgEnfbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNjA0MjgxNjU1MDBaFw0yNzA0MjcxNzAwMDBaMDMxMTAvBgNV
BAMTKEU1OEYwRTg0NUI4RkRBMDU4RUMzNDFCMDczNEIyQjZGQTAxMjYwOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7o7ChgAmbaYh48i7lP6kzB+3f
GMmGyXwPQDS8eL+Se3FJBEKFT702NtntQfGSJCSQkCJZkgKgFAqV//Qbar1oVcHL
y8bvOlLLmtC2KDhtUZejUmraLeFG/soRRXFF8znpjyIWHIevwQ5DDpKgJ9TsegiI
Czhz2lGelrJ5urwVfxjOybrqhJwQvlXzhPXswKmlcyNpmQNwJMGb79M/Rr1t9CNQ
NlCT0tyrTyCOPP/wkYt6w1f2RJX7JQNSNRQRCEQkbEJ24m1Sd0vz7Wr1DmdVGKAh
GtbObRriS/HLJvSRuPSFNoiUeJPgAD2u3iUGGNR9W4fsLkz6dEaydIXsYyzFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU5Y8OhFuP2gWOw0Gwc0srb6ASYJ4wHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzMTM4MzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAkYAwDQYJKoZIhvcNAQELBQADggEBAEXbtRyYO5DzmG25RJ87pta9maAUjWbT
gbX3hItHS6km4I7qvmCyBq2giat3PlW2V1mKaVnDr0G5VYm8hEIdk2w6+bRe1gw7
7P2nwuVLyY/dWP3m05Bw+4oI7kUlVd0OjmP2azoRTYTNtRcIp6e4KP0BPcwqUVs2
mz21Q5qLBsTixdNHcxZy26OGYjwU6RWcGAzOxnu6cXMq2QQA+U0pTEhu3aR3qUYR
mbOXTqu54xBpWGQIWtcgbUKqhqHlnyMgyN8hYsx6dL0pz3Ae274FIm31/JKk/xVM
ObNacJ8dwryP+gWDvKha6K+z9R6O6MfLCG9vvv55F6KuQ2v+TdEgTnI=
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:26 2026 by rpki-client