Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: GCxRrcBIq+78SnGzbij9gK6b0bV8dsMZy3gR8h4yZ+8=
Subject key identifier: 2A:7A:90:8F:CB:9C:BF:73:BB:E5:5B:C3:34:A8:5D:1B:6E:57:DD:A1
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 1DF1916E0E7CA75BB62ECF23F14E723AA042BAB5
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Tue 28 Apr 2026 18:00:00 +0000
ROA not before: Tue 28 Apr 2026 17:55:00 +0000
ROA not after: Tue 27 Apr 2027 18:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f1:91:6e:0e:7c:a7:5b:b6:2e:cf:23:f1:4e:72:3a:a0:42:ba:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 28 17:55:00 2026 GMT
Not After : Apr 27 18:00:00 2027 GMT
Subject: CN=2A7A908FCB9CBF73BBE55BC334A85D1B6E57DDA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:64:07:ba:54:dc:fe:29:53:19:0f:13:56:c9:
bd:8e:19:22:4d:ae:12:7b:74:2c:a5:e4:69:e7:db:
e8:1b:c4:18:4f:17:79:ff:35:74:d5:66:01:f2:8e:
7f:b9:83:46:b2:f1:f7:2c:0f:b3:70:b8:d4:bb:f3:
42:c8:48:72:43:6d:83:57:2f:43:91:f1:a9:29:c2:
4a:17:ca:9f:07:84:29:e8:25:da:8c:81:25:b0:24:
cd:cb:3b:0a:04:17:6e:0d:92:15:55:59:a7:fe:22:
33:24:16:a9:c6:d6:a7:00:cd:62:d4:bd:40:8e:25:
d3:9a:35:7c:8f:53:11:b9:0e:cf:9f:51:48:10:70:
67:e2:48:0a:dc:4c:b0:11:48:5e:57:3d:ba:52:de:
75:99:b1:97:30:fd:50:51:5f:8b:2e:dc:d9:c9:83:
ed:5b:02:9a:17:59:f1:e1:0f:4b:fa:a0:73:22:1e:
13:98:03:12:2d:aa:9d:3a:07:33:c5:80:48:1e:2d:
2e:bc:93:d0:68:79:cd:cf:60:99:b4:67:da:be:34:
66:c5:4d:1a:99:98:8e:46:e5:8c:a9:60:a1:e4:cd:
da:a3:c5:f4:79:4f:bd:af:91:43:e8:fd:d5:2b:85:
65:47:e0:01:08:fa:5d:c7:8f:5d:82:8d:65:ca:2a:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:90:8F:CB:9C:BF:73:BB:E5:5B:C3:34:A8:5D:1B:6E:57:DD:A1
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9300::/44
Signature Algorithm: sha256WithRSAEncryption
a6:1c:66:4a:ec:49:57:59:ec:06:62:b9:31:72:e7:1d:98:a1:
71:e1:a9:e6:4b:c9:15:7f:f9:50:7f:2f:dd:47:0e:07:7b:70:
ef:5a:2a:19:a8:0b:d5:60:d6:c3:ab:1c:a0:61:a5:7c:40:9f:
d6:90:92:b9:34:00:48:a9:30:fe:50:fe:75:cc:d9:3b:de:80:
5a:89:88:e3:5a:15:e0:40:c4:de:e2:a7:ab:f7:26:6e:d5:9c:
4f:69:52:17:6f:f0:82:5b:94:24:19:db:cc:5b:e4:ac:1e:e3:
bd:e6:15:3f:44:ee:7b:c6:e7:40:3a:a4:15:ee:b2:ec:eb:e8:
8b:5c:99:c5:1c:45:5e:16:b5:ee:94:12:48:3b:b9:81:52:57:
15:27:c4:9f:26:65:21:11:64:9f:0b:64:14:d4:f2:45:e3:49:
e1:c7:11:ce:30:b9:96:a7:8a:74:f8:e5:05:e8:58:ba:0e:68:
25:ec:b4:7b:3d:e3:cb:7d:57:54:00:75:c4:52:5b:b1:f0:0b:
69:16:3e:dd:17:5b:09:8e:0a:0c:c2:6b:e4:b4:23:1b:d4:73:
12:03:f6:fb:90:c6:a8:3d:c5:e3:67:8e:81:28:a5:45:c3:8b:
81:16:a8:a8:2e:bf:47:4a:d2:26:5f:84:a9:ef:c8:1b:8c:2a:
8e:d3:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:21 2026 by rpki-client