Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          2juUZJbp09zPMYdoXeTNTFOdi8lgbfQCtQTw/0w/KOA=
Subject key identifier:   37:8E:45:FC:CE:16:CF:B2:B7:35:09:9C:43:9E:C4:6C:88:B8:49:60
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       343006CC8404A3BA517C5F1693ABFC669106814F
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Tue 28 Apr 2026 17:00:00 +0000
ROA not before:           Tue 28 Apr 2026 16:55:00 +0000
ROA not after:            Tue 27 Apr 2027 17:00:00 +0000
asID:                     133798
IP address blocks:        2402:5680:9190::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:30:06:cc:84:04:a3:ba:51:7c:5f:16:93:ab:fc:66:91:06:81:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Apr 28 16:55:00 2026 GMT
            Not After : Apr 27 17:00:00 2027 GMT
        Subject: CN=378E45FCCE16CFB2B735099C439EC46C88B84960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:32:bd:f1:a7:c3:76:fc:a6:94:72:13:84:
                    14:08:9d:4c:01:ce:aa:65:f1:92:3b:2b:1c:5a:51:
                    8d:19:49:a4:c0:b1:ee:79:8b:55:72:99:2e:7c:19:
                    55:4c:b1:22:77:7e:4a:84:1b:56:80:5a:50:a3:fc:
                    e5:0c:b0:3e:0c:36:73:43:24:d3:e5:08:6a:df:fc:
                    43:f8:b1:b5:6d:aa:f9:90:1a:44:15:23:be:6b:14:
                    5f:ab:bc:b8:ac:27:6d:e6:f9:f6:07:71:26:e6:43:
                    99:fb:db:72:13:9d:00:33:50:67:b2:4c:96:8a:03:
                    cc:c2:a4:1d:65:2d:ac:30:1c:92:e5:97:10:2b:e8:
                    d4:32:c7:b2:e0:ce:6c:78:a3:19:63:29:31:ef:13:
                    f6:92:8b:5d:c9:cb:f3:b7:fc:a9:61:b5:64:a6:04:
                    c2:9c:ac:06:ca:45:17:3c:99:56:5c:f2:d1:60:99:
                    56:8b:67:e2:dd:eb:3a:84:f0:aa:81:b8:40:20:ca:
                    20:35:c1:4f:13:0e:63:5e:6d:ce:aa:89:2d:2b:b3:
                    3e:d3:e8:09:28:f4:08:ed:c8:20:68:db:0c:84:bd:
                    17:8b:c3:13:1c:20:32:23:8d:da:9c:79:52:32:d8:
                    bd:c3:c1:4a:22:38:29:5d:c7:1b:aa:3d:11:e3:ff:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:45:FC:CE:16:CF:B2:B7:35:09:9C:43:9E:C4:6C:88:B8:49:60
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9190::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:cb:6f:e9:01:18:56:14:bb:52:b6:4a:64:bd:ab:5f:b1:6d:
         6d:c4:4f:d2:a6:04:4a:2e:fd:d7:f2:4a:43:a1:59:75:6d:f1:
         24:af:da:33:46:e9:c8:cb:b3:32:0e:f5:a6:a1:83:1a:23:ed:
         89:d5:8a:31:ca:fa:9f:19:ac:7b:f5:34:69:fb:23:dd:ae:2b:
         1a:8f:04:e0:37:67:ff:d4:cf:29:cc:99:b1:99:6e:2d:36:be:
         29:ab:8e:66:b6:12:dc:19:d7:f1:75:a5:9f:e6:6c:ec:c9:8f:
         c1:ac:a9:31:bf:6c:a8:a7:3c:d7:84:bf:7d:42:aa:48:85:8c:
         69:b4:c4:e0:ca:0a:73:ef:f5:45:9b:1b:63:97:28:65:9a:16:
         3e:5a:d2:62:02:ce:39:39:b2:5f:e9:32:cc:fc:41:3c:23:82:
         f0:84:94:e6:74:05:19:2a:ec:df:65:a5:f6:eb:3f:e4:22:d7:
         a8:b9:26:6a:6b:d6:20:8d:5b:e0:ef:3c:3a:dd:fb:f9:4d:31:
         08:ec:75:7a:82:8f:b4:15:9d:d2:80:26:3a:67:db:b6:0d:c8:
         67:be:30:fb:ab:67:51:17:ba:74:af:55:6c:95:76:c4:ae:ad:
         0b:9b:b7:8c:0b:6b:df:76:a9:fc:fa:f1:c5:9f:28:2d:2a:e7:
         ad:7a:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:25 2026 by rpki-client