Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393332303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393332303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: +XKM0hhm5AGyDlo3qjcANFCx6qSGQYelh8cWcUYiahA=
Subject key identifier: 5A:F5:BF:66:89:EC:A1:40:19:6B:7A:84:F2:08:82:03:A0:E7:22:D3
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 42B5F8F2D00A6D0CCB942B5C96013A93D3922038
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393332303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Tue 28 Apr 2026 18:00:00 +0000
ROA not before: Tue 28 Apr 2026 17:55:00 +0000
ROA not after: Tue 27 Apr 2027 18:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9320::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b5:f8:f2:d0:0a:6d:0c:cb:94:2b:5c:96:01:3a:93:d3:92:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 28 17:55:00 2026 GMT
Not After : Apr 27 18:00:00 2027 GMT
Subject: CN=5AF5BF6689ECA140196B7A84F2088203A0E722D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:37:31:6a:58:cc:93:27:3a:c5:d0:35:94:d5:
1f:7f:63:c2:64:ec:96:20:f8:8d:fa:d2:db:f7:33:
27:d0:aa:38:3f:6b:5b:b6:4c:5f:e1:87:3c:b5:e5:
64:d9:d4:10:f7:b0:c8:64:0d:bb:e1:9b:28:1c:67:
2c:5c:16:6f:b6:3e:1c:78:18:fe:d7:d6:fb:eb:66:
d2:eb:8d:bd:e6:75:76:a5:0a:7e:65:f9:29:39:10:
77:7f:5e:0d:fa:21:a3:24:d6:61:06:3f:aa:4a:a3:
1a:da:fc:a2:ee:30:07:5d:28:c3:82:8c:c3:de:ec:
2b:37:b0:95:50:e1:c1:eb:01:2b:6a:be:89:76:59:
7b:a7:f2:ff:ba:1a:ed:ba:5a:40:c0:f0:bb:40:8d:
76:39:64:9a:38:d2:d3:6d:9e:15:96:4b:2e:57:7a:
3b:7d:47:dd:25:04:2a:23:40:68:d7:7f:46:a6:e7:
2b:2d:5d:3a:b7:57:c5:a1:e6:a5:0b:d4:12:76:45:
f1:63:d6:25:af:1e:64:f7:7a:69:eb:10:25:34:83:
f2:90:6d:6d:0d:4b:c7:29:ef:57:af:f2:f8:75:f4:
fe:ce:e1:3c:62:60:4d:c8:b3:ff:eb:91:47:b5:ea:
39:5a:2f:71:da:e3:f0:ff:e1:0b:4d:6c:d8:ba:75:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:BF:66:89:EC:A1:40:19:6B:7A:84:F2:08:82:03:A0:E7:22:D3
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393332303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9320::/44
Signature Algorithm: sha256WithRSAEncryption
40:fe:5d:68:62:fc:b0:bf:77:c4:75:b1:c9:b5:8e:ba:28:6a:
55:70:f5:06:50:6c:75:e4:15:9f:1d:01:ad:6e:f1:0c:0f:1e:
24:18:6f:3d:29:0a:53:d3:e7:88:63:89:c7:6a:ea:4c:e1:d0:
5b:fe:c1:a6:d7:28:9e:53:40:b9:3b:49:4b:5c:d4:6d:1b:7a:
12:6e:fe:53:b3:45:8b:55:ef:dc:55:22:ab:d0:aa:65:2e:28:
3a:5c:7e:38:32:b1:0d:7c:a9:73:17:f3:ca:05:e8:79:d9:77:
04:f3:11:86:11:9c:6a:80:e9:00:e1:74:2c:9d:2e:9b:a3:8c:
d0:69:7f:58:37:ad:ab:33:fb:5f:a0:76:39:81:c7:4c:23:c5:
98:28:a0:44:29:f7:54:80:88:2b:7e:00:e0:c8:d5:89:05:4f:
da:c8:11:6b:09:75:99:bb:b1:c4:db:10:25:39:91:91:da:9d:
68:43:ef:a7:d0:f7:9d:68:e9:cc:e9:15:02:0c:6b:ed:f2:d7:
92:2a:81:5d:16:ac:8d:71:f6:f8:bd:99:1a:45:e7:77:eb:e9:
5a:eb:33:90:b9:46:f3:0d:29:00:ff:af:8e:54:74:da:d0:b9:
43:6b:ca:ea:47:1e:4a:b8:51:9a:81:1d:55:ca:3f:73:27:50:
25:eb:d1:70
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQrX48tAKbQzLlCtclgE6k9OSIDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNjA0MjgxNzU1MDBaFw0yNzA0MjcxODAwMDBaMDMxMTAvBgNV
BAMTKDVBRjVCRjY2ODlFQ0ExNDAxOTZCN0E4NEYyMDg4MjAzQTBFNzIyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvNzFqWMyTJzrF0DWU1R9/Y8Jk
7JYg+I360tv3MyfQqjg/a1u2TF/hhzy15WTZ1BD3sMhkDbvhmygcZyxcFm+2Phx4
GP7X1vvrZtLrjb3mdXalCn5l+Sk5EHd/Xg36IaMk1mEGP6pKoxra/KLuMAddKMOC
jMPe7Cs3sJVQ4cHrAStqvol2WXun8v+6Gu26WkDA8LtAjXY5ZJo40tNtnhWWSy5X
ejt9R90lBCojQGjXf0am5ystXTq3V8Wh5qUL1BJ2RfFj1iWvHmT3emnrECU0g/KQ
bW0NS8cp71ev8vh19P7O4TxiYE3Is//rkUe16jlaL3Ha4/D/4QtNbNi6ddv1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUWvW/ZonsoUAZa3qE8giCA6DnItMwHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzMzMyMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAkyAwDQYJKoZIhvcNAQELBQADggEBAED+XWhi/LC/d8R1scm1jrooalVw9QZQ
bHXkFZ8dAa1u8QwPHiQYbz0pClPT54hjicdq6kzh0Fv+wabXKJ5TQLk7SUtc1G0b
ehJu/lOzRYtV79xVIqvQqmUuKDpcfjgysQ18qXMX88oF6HnZdwTzEYYRnGqA6QDh
dCydLpujjNBpf1g3rasz+1+gdjmBx0wjxZgooEQp91SAiCt+AODI1YkFT9rIEWsJ
dZm7scTbECU5kZHanWhD76fQ951o6czpFQIMa+3y15IqgV0WrI1x9vi9mRpF53fr
6VrrM5C5RvMNKQD/r45UdNrQuUNryupHHkq4UZqBHVXKP3MnUCXr0XA=
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:23 2026 by rpki-client