Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: LjbniJ4fhivAzK28MNEuIRRZPIr+HXdjcHMbnudu8JA=
Subject key identifier: DC:BF:29:F8:18:BB:61:9A:3B:37:26:8B:58:6C:75:A1:B0:A8:D1:82
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 582AA87FBA6FF2AD1B1AC63C65876E5DA0B6E128
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Tue 28 Apr 2026 17:00:01 +0000
ROA not before: Tue 28 Apr 2026 16:55:01 +0000
ROA not after: Tue 27 Apr 2027 17:00:01 +0000
asID: 133798
IP address blocks: 2402:5680:99a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2a:a8:7f:ba:6f:f2:ad:1b:1a:c6:3c:65:87:6e:5d:a0:b6:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 28 16:55:01 2026 GMT
Not After : Apr 27 17:00:01 2027 GMT
Subject: CN=DCBF29F818BB619A3B37268B586C75A1B0A8D182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:4e:8a:d4:a1:07:f1:ce:9c:a0:f6:15:8b:
df:2a:4f:c8:47:da:d3:09:c2:56:57:7d:be:d2:a9:
e0:24:92:ea:da:fa:05:98:e1:81:c2:e2:a2:a2:9f:
8b:35:04:ef:41:bc:db:5f:f9:a2:9f:a0:b8:67:36:
74:ed:27:40:e3:9a:1e:98:de:cb:c6:4c:61:fb:53:
a1:2d:60:24:27:ce:d1:35:78:e5:23:16:26:5a:3e:
37:ca:71:c0:be:1e:e0:36:f2:c3:3d:48:ca:40:7e:
27:ca:14:4d:8d:7d:51:72:d1:5a:58:82:55:ab:bf:
d4:e5:26:31:eb:e8:74:95:c9:95:a3:30:95:ee:cc:
22:c2:50:d0:87:23:95:a0:6f:cd:0a:7a:23:14:53:
61:95:5a:96:3e:0c:a1:a9:35:28:25:33:6b:d2:65:
d7:f8:33:d1:33:e4:2c:b6:a9:7f:c5:97:31:67:9a:
86:f6:fb:51:85:a1:4b:9a:7a:6f:8d:06:bd:a4:e1:
11:6e:8a:e6:d2:83:fc:7f:89:e0:62:b5:fe:bc:8b:
63:a4:b7:29:7b:ec:c8:76:93:75:75:bc:0d:65:47:
4e:de:76:fa:9e:5d:51:d4:11:db:9f:a2:f7:42:73:
6a:e4:86:f6:48:9f:f5:15:8e:37:4b:96:9c:17:0b:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:29:F8:18:BB:61:9A:3B:37:26:8B:58:6C:75:A1:B0:A8:D1:82
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:99a0::/44
Signature Algorithm: sha256WithRSAEncryption
0f:63:57:ba:1a:62:28:0b:eb:e4:16:97:0a:2b:e9:fc:83:a4:
40:f8:57:40:ea:31:30:a8:b4:e1:92:5a:88:cb:df:68:a2:48:
f4:9a:c4:e3:02:f6:bd:be:8d:2f:6d:93:0f:f9:9d:c8:10:71:
fc:d0:59:2a:d6:45:ac:65:97:4e:b8:34:3c:43:0b:22:55:a2:
ef:e4:80:63:4a:e1:6e:15:78:9c:3c:b9:78:98:a1:36:d9:24:
ce:cc:c1:60:5c:31:89:b6:68:db:ca:7f:e0:03:71:40:1d:71:
df:d1:50:8c:fe:84:1e:20:02:4d:ef:c6:59:da:06:d6:4a:8a:
9a:0c:1e:06:50:50:48:67:6d:82:59:e2:88:09:05:c0:b5:ba:
89:e0:a3:67:df:28:e9:f8:c2:4d:ab:6f:0b:f9:b7:6b:e7:94:
62:3c:38:74:59:62:6f:3c:f8:a0:4e:64:72:c8:af:8f:4b:8b:
50:c0:b7:e4:42:dc:79:2c:3e:0f:d6:1f:e1:76:dd:43:97:07:
94:cb:6c:fd:d6:81:30:be:80:32:06:60:fe:52:93:66:c9:85:
73:d5:4f:af:f6:53:2c:a4:89:53:29:02:a8:c6:5d:1e:b0:c5:
76:d4:70:4f:71:dd:09:46:da:c7:d3:99:db:ff:5e:da:cb:83:
c2:60:f0:45
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUWCqof7pv8q0bGsY8ZYduXaC24SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNjA0MjgxNjU1MDFaFw0yNzA0MjcxNzAwMDFaMDMxMTAvBgNV
BAMTKERDQkYyOUY4MThCQjYxOUEzQjM3MjY4QjU4NkM3NUExQjBBOEQxODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8U6K1KEH8c6coPYVi98qT8hH
2tMJwlZXfb7SqeAkkura+gWY4YHC4qKin4s1BO9BvNtf+aKfoLhnNnTtJ0Djmh6Y
3svGTGH7U6EtYCQnztE1eOUjFiZaPjfKccC+HuA28sM9SMpAfifKFE2NfVFy0VpY
glWrv9TlJjHr6HSVyZWjMJXuzCLCUNCHI5Wgb80KeiMUU2GVWpY+DKGpNSglM2vS
Zdf4M9Ez5Cy2qX/FlzFnmob2+1GFoUuaem+NBr2k4RFuiubSg/x/ieBitf68i2Ok
tyl77Mh2k3V1vA1lR07edvqeXVHUEdufovdCc2rkhvZIn/UVjjdLlpwXC5SFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU3L8p+Bi7YZo7NyaLWGx1obCo0YIwHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzOTYxMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAmaAwDQYJKoZIhvcNAQELBQADggEBAA9jV7oaYigL6+QWlwor6fyDpED4V0Dq
MTCotOGSWojL32iiSPSaxOMC9r2+jS9tkw/5ncgQcfzQWSrWRaxll064NDxDCyJV
ou/kgGNK4W4VeJw8uXiYoTbZJM7MwWBcMYm2aNvKf+ADcUAdcd/RUIz+hB4gAk3v
xlnaBtZKipoMHgZQUEhnbYJZ4ogJBcC1uongo2ffKOn4wk2rbwv5t2vnlGI8OHRZ
Ym88+KBOZHLIr49Li1DAt+RC3HksPg/WH+F23UOXB5TLbP3WgTC+gDIGYP5Sk2bJ
hXPVT6/2UyykiVMpAqjGXR6wxXbUcE9x3QlG2sfTmdv/XtrLg8Jg8EU=
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:55:52 2026 by rpki-client