Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393163303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393163303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: EA3I/AECxCb2Ce9WteGkYyFfcE9Kmc1UMNMK7KYIwGo=
Subject key identifier: BB:40:0E:82:C7:50:ED:33:F2:FA:C1:74:EC:48:20:00:AC:12:D7:65
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 7EA543A6B32A5FA6C7C6F0B0E76AC5B359175FE4
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393163303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Tue 28 Apr 2026 17:00:01 +0000
ROA not before: Tue 28 Apr 2026 16:55:01 +0000
ROA not after: Tue 27 Apr 2027 17:00:01 +0000
asID: 133798
IP address blocks: 2402:5680:91c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a5:43:a6:b3:2a:5f:a6:c7:c6:f0:b0:e7:6a:c5:b3:59:17:5f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 28 16:55:01 2026 GMT
Not After : Apr 27 17:00:01 2027 GMT
Subject: CN=BB400E82C750ED33F2FAC174EC482000AC12D765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:61:b7:6f:17:e9:5b:9b:21:67:81:77:12:
de:64:8e:99:e9:90:eb:81:51:d3:66:f1:8f:44:ba:
01:c2:8a:cd:68:5f:67:18:7e:95:4d:47:51:c9:19:
24:7c:26:5f:f4:ad:4d:7a:a3:02:07:7a:57:e7:11:
ab:26:d1:cf:d4:24:24:28:b7:75:90:c0:be:4e:31:
fd:de:46:78:6e:33:6c:e6:25:50:9d:ff:0d:45:00:
95:4b:18:bd:3f:7b:b4:2e:af:76:9d:6f:23:c7:e4:
30:1d:59:52:2e:b5:34:34:a6:f3:2e:5c:9a:fe:44:
8c:e2:27:2f:92:56:d0:db:b7:80:bf:c5:0e:1b:cf:
67:2c:94:b8:32:d8:42:27:ac:24:bf:4b:d9:b1:b7:
a8:e6:c8:e9:32:27:e1:71:2a:20:d9:84:31:56:2d:
80:2d:4b:92:5a:67:f8:28:20:71:d1:8c:5c:cd:4c:
fe:ba:72:a7:8e:50:4c:66:9b:76:d6:97:c8:8e:7a:
4e:b1:3a:00:d9:bb:42:13:4c:1f:75:a1:9c:c2:d5:
e7:47:09:25:ad:42:11:b1:22:67:f6:d9:71:c2:f7:
ec:1f:37:e0:50:f2:d4:72:91:97:09:51:5e:c5:49:
f7:3e:b6:75:d1:a5:7c:90:5a:67:76:63:d4:cd:19:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:0E:82:C7:50:ED:33:F2:FA:C1:74:EC:48:20:00:AC:12:D7:65
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393163303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:91c0::/44
Signature Algorithm: sha256WithRSAEncryption
86:ea:14:63:8f:2a:e4:51:88:5a:79:6d:45:5a:cb:69:2a:a0:
7d:81:27:c7:bb:0e:27:43:c2:5a:70:88:03:b4:fa:cf:15:b5:
ae:4d:ee:19:cd:39:ed:44:70:7e:bf:d6:68:3c:4d:45:4a:07:
6e:e6:28:c3:25:0f:1b:61:ef:bc:aa:26:c4:b4:d7:38:45:54:
1c:c3:ba:aa:61:22:ba:9e:e5:53:3e:2a:cd:5d:86:ec:d5:b1:
4f:cc:83:2d:6e:20:42:24:7d:dd:73:99:e1:f4:e5:c0:69:de:
31:76:dd:ec:9a:94:97:bb:b7:48:70:55:aa:ee:f3:e8:c0:b6:
39:6f:d5:4a:67:19:19:7e:61:c0:97:ec:d7:94:95:2d:87:2d:
e8:73:ac:56:8c:f1:0f:80:cf:dd:5a:75:97:a1:c3:6c:ae:34:
f5:c5:76:c2:e2:7f:6e:d1:26:20:ae:06:69:e0:48:25:32:85:
27:c3:d0:2d:54:42:80:df:c0:0d:0f:d5:08:cc:f5:6c:8c:de:
87:4d:3b:bd:02:d0:95:0d:85:64:68:87:51:45:ec:89:4b:9a:
b2:c1:df:a5:06:0c:14:7f:6a:84:68:23:d7:5e:db:1f:2e:aa:
99:97:5d:01:f3:bd:07:a6:74:3d:92:fa:32:fa:76:51:a7:fc:
d7:21:4e:7a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfqVDprMqX6bHxvCw52rFs1kXX+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNjA0MjgxNjU1MDFaFw0yNzA0MjcxNzAwMDFaMDMxMTAvBgNV
BAMTKEJCNDAwRTgyQzc1MEVEMzNGMkZBQzE3NEVDNDgyMDAwQUMxMkQ3NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nWG3bxfpW5shZ4F3Et5kjpnp
kOuBUdNm8Y9EugHCis1oX2cYfpVNR1HJGSR8Jl/0rU16owIHelfnEasm0c/UJCQo
t3WQwL5OMf3eRnhuM2zmJVCd/w1FAJVLGL0/e7Qur3adbyPH5DAdWVIutTQ0pvMu
XJr+RIziJy+SVtDbt4C/xQ4bz2cslLgy2EInrCS/S9mxt6jmyOkyJ+FxKiDZhDFW
LYAtS5JaZ/goIHHRjFzNTP66cqeOUExmm3bWl8iOek6xOgDZu0ITTB91oZzC1edH
CSWtQhGxImf22XHC9+wfN+BQ8tRykZcJUV7FSfc+tnXRpXyQWmd2Y9TNGTNFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUu0AOgsdQ7TPy+sF07EggAKwS12UwHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzMTYzMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAkcAwDQYJKoZIhvcNAQELBQADggEBAIbqFGOPKuRRiFp5bUVay2kqoH2BJ8e7
DidDwlpwiAO0+s8Vta5N7hnNOe1EcH6/1mg8TUVKB27mKMMlDxth77yqJsS01zhF
VBzDuqphIrqe5VM+Ks1dhuzVsU/Mgy1uIEIkfd1zmeH05cBp3jF23eyalJe7t0hw
Varu8+jAtjlv1UpnGRl+YcCX7NeUlS2HLehzrFaM8Q+Az91adZehw2yuNPXFdsLi
f27RJiCuBmngSCUyhSfD0C1UQoDfwA0P1QjM9WyM3odNO70C0JUNhWRoh1FF7IlL
mrLB36UGDBR/aoRoI9de2x8uqpmXXQHzvQemdD2S+jL6dlGn/NchTno=
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:25 2026 by rpki-client