Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          CBa7SKR03rGBDOZHqkM6webTLW7+BW6kM/JnqK1iLI8=
Subject key identifier:   B7:AD:BC:6F:61:3B:42:82:25:8E:AA:05:B3:01:CC:53:0D:E8:F0:D4
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       79F75F78939CE41104762B5F54642A06D53E5150
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Tue 28 Apr 2026 18:00:00 +0000
ROA not before:           Tue 28 Apr 2026 17:55:00 +0000
ROA not after:            Tue 27 Apr 2027 18:00:00 +0000
asID:                     133798
IP address blocks:        2402:5680:9310::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f7:5f:78:93:9c:e4:11:04:76:2b:5f:54:64:2a:06:d5:3e:51:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Apr 28 17:55:00 2026 GMT
            Not After : Apr 27 18:00:00 2027 GMT
        Subject: CN=B7ADBC6F613B4282258EAA05B301CC530DE8F0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:65:44:f1:d2:f4:b8:10:bf:08:6b:76:f2:
                    51:b1:05:66:9d:c6:25:8e:12:2a:33:95:e2:cd:d0:
                    ae:f0:59:57:00:bf:c3:0b:40:dc:80:87:e8:59:95:
                    08:c7:45:64:30:e0:a4:ec:3d:21:a6:5d:5c:a2:29:
                    b3:79:15:bb:80:f0:77:58:75:2f:9e:70:64:35:68:
                    45:bf:36:6a:1c:58:96:f5:a0:d2:d9:b9:8e:94:6c:
                    45:94:75:76:ad:63:e9:65:4d:cb:12:09:df:ec:b2:
                    fd:e0:83:a5:17:0c:33:29:80:52:33:fc:a0:85:17:
                    f4:e6:f3:22:c3:d4:85:91:c3:64:3d:d8:33:e0:ba:
                    db:b3:8e:91:6a:88:05:71:f9:ee:89:48:2c:c9:f0:
                    2f:42:fb:47:35:d7:60:ab:43:0d:51:95:11:f0:76:
                    b9:89:60:4f:ef:6f:02:e7:8a:80:29:ab:3a:56:bd:
                    58:e2:c8:de:c7:19:49:69:25:7f:b8:e0:d5:7c:c5:
                    14:3e:fe:da:d1:69:5f:e9:8d:b7:ea:16:87:63:0a:
                    1a:03:d8:a9:70:e3:a1:ed:9a:a4:7e:1c:a1:dc:de:
                    45:e3:ec:7f:94:5c:45:0f:19:93:45:9c:af:6c:88:
                    ef:df:99:f9:2c:94:09:4f:b5:83:3e:fa:95:57:a4:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AD:BC:6F:61:3B:42:82:25:8E:AA:05:B3:01:CC:53:0D:E8:F0:D4
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9310::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:31:77:f0:88:e0:0c:fb:1b:ed:8c:ed:18:51:04:82:3f:
         b4:4c:29:b2:67:a9:10:3c:e1:82:c3:a5:c8:e5:f9:9a:e6:8e:
         73:a1:d1:87:11:74:63:77:fb:3b:2d:07:11:05:81:62:bf:15:
         21:07:7a:14:67:e1:97:65:e0:b4:24:3c:6e:03:c0:c0:f6:27:
         1e:f4:34:fd:fb:bc:70:6e:24:e2:6b:49:a3:4c:40:89:0d:ce:
         d3:cf:16:0c:6d:67:61:61:3f:3c:00:de:39:97:0b:e9:82:ce:
         01:23:13:b5:fe:fa:86:a8:63:0a:cc:6e:b0:86:df:6a:c5:ba:
         0e:92:3e:b5:68:43:6d:88:94:5b:13:5e:92:d9:3b:2f:df:dd:
         40:10:a1:12:67:10:cf:0d:3c:b0:8d:4e:23:33:16:c7:10:22:
         f1:24:1e:b6:fe:e1:47:7d:eb:3b:a7:c3:59:da:e4:bf:f6:a6:
         00:df:34:70:b3:73:83:7b:71:36:9b:58:7c:24:de:a0:ab:14:
         95:0e:d1:26:c8:7f:8d:d0:b0:c3:16:a6:6d:a7:89:79:22:eb:
         86:c6:56:2b:73:8f:27:8f:b6:16:d2:75:1a:50:9f:69:e2:3d:
         f1:bc:e3:36:87:a9:7a:96:7c:b6:df:2f:5d:fb:1e:5c:0e:f6:
         2b:ec:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:18 2026 by rpki-client