Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: iuQqZx77wpB/BSgDZ9B+SNPYTDnY7FsHVxntUAyvTZI=
Subject key identifier: F6:70:D0:03:32:81:59:40:FF:E9:EE:03:CE:62:A7:2B:84:70:13:60
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 60E97B9A80E56F0B7AB19F82161D7C3BCE9AC47F
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Tue 28 Apr 2026 17:00:00 +0000
ROA not before: Tue 28 Apr 2026 16:55:00 +0000
ROA not after: Tue 27 Apr 2027 17:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:91d0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e9:7b:9a:80:e5:6f:0b:7a:b1:9f:82:16:1d:7c:3b:ce:9a:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 28 16:55:00 2026 GMT
Not After : Apr 27 17:00:00 2027 GMT
Subject: CN=F670D00332815940FFE9EE03CE62A72B84701360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:94:78:a0:9d:e1:fe:22:8c:a6:8d:ce:42:
30:34:ff:2c:3d:09:d4:91:c2:a6:2a:64:2d:2a:3d:
42:ff:8a:83:13:6d:12:38:65:16:52:45:31:08:59:
ff:86:d1:99:77:fa:7b:3b:14:e6:86:9a:ae:0b:40:
a5:dd:d0:80:b2:41:bd:1a:ff:78:f6:ea:9e:f3:43:
0e:eb:7d:d2:87:1b:84:25:30:a2:97:6c:c4:9e:d0:
0c:da:41:8c:17:0b:8a:c8:1c:76:d8:6c:f7:11:9f:
af:a7:2e:ab:82:95:18:e0:47:91:88:22:c5:3b:41:
73:78:17:f1:0a:fa:54:41:da:26:71:d6:4b:53:69:
2f:50:c6:d5:86:be:da:b8:43:e8:6d:e3:cc:49:51:
32:07:0e:9d:fe:84:ee:ab:78:db:5d:3d:93:14:c3:
6e:f2:b1:02:39:4a:f5:83:f7:5b:50:d5:88:b0:39:
50:90:81:98:07:78:72:12:6a:42:1e:00:41:87:68:
f0:fd:0f:33:b5:f1:66:a3:f4:ac:66:8c:dc:ee:93:
80:cf:62:d5:e0:6a:2f:74:7d:53:69:ae:04:ce:e0:
27:0d:b6:4b:a6:82:5a:0e:c6:7a:61:c0:54:d2:a8:
96:50:52:8b:ac:bc:05:1e:6c:8a:ba:c7:79:d6:47:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:D0:03:32:81:59:40:FF:E9:EE:03:CE:62:A7:2B:84:70:13:60
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:91d0::/44
Signature Algorithm: sha256WithRSAEncryption
a2:36:4a:6a:d3:0c:54:3c:55:1e:57:2d:9a:a5:72:4f:26:b1:
02:49:1c:ab:38:f4:79:70:d1:48:af:c1:8b:f5:db:9c:af:de:
d9:a5:ec:f3:fb:a9:0d:bc:bb:29:7e:ba:7f:b9:cf:a3:e2:a5:
01:fa:76:a8:b3:5d:93:3e:f9:f9:40:bb:f3:d5:3b:aa:86:63:
f6:f7:b0:15:e3:1f:2e:b7:a0:eb:4e:53:16:77:ca:49:dd:d9:
da:14:78:19:fd:8d:42:1f:21:3e:cd:65:80:f9:dc:a0:e7:3a:
c8:1c:f3:f8:72:b2:cf:3a:7d:a5:88:8a:be:e3:e4:fb:45:cd:
ac:13:3f:da:ee:eb:a2:f3:26:61:47:a1:1d:4f:3c:bc:47:3f:
8d:81:7d:d0:ae:af:d3:cd:d3:59:42:a9:9b:0c:31:76:a6:3a:
21:e5:3d:e1:c5:ff:a0:da:df:67:a4:a3:36:14:70:20:d6:36:
19:47:e7:85:00:f2:7a:19:a3:f8:0e:12:f0:25:16:8c:e9:f4:
03:35:af:b1:40:0c:6d:aa:97:ec:ec:b4:2a:f5:f3:c7:08:72:
66:20:e8:d7:4f:be:4e:cb:e4:76:a9:1f:51:9a:54:dd:fc:9b:
d4:97:1e:26:c3:20:bf:d3:fd:ef:03:f5:46:64:bf:ca:15:e5:
2f:dc:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:26 2026 by rpki-client