Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: VRbLxxx6D4akqpq+UDV8n7hsDBwPnfC4wrUFaSPUya0=
Subject key identifier: 36:F7:A7:0A:CF:1B:54:70:68:63:F5:A1:BF:0D:08:40:EA:FB:D5:9D
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 4ABB0174868FD6522FFF2CBBD352727567EB09BC
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Thu 23 Apr 2026 05:00:00 +0000
ROA not before: Thu 23 Apr 2026 04:55:00 +0000
ROA not after: Thu 22 Apr 2027 05:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9b00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bb:01:74:86:8f:d6:52:2f:ff:2c:bb:d3:52:72:75:67:eb:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 23 04:55:00 2026 GMT
Not After : Apr 22 05:00:00 2027 GMT
Subject: CN=36F7A70ACF1B54706863F5A1BF0D0840EAFBD59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:9c:30:dd:6a:ea:a5:18:62:d1:22:7a:29:
28:b4:07:80:f7:30:36:f8:64:0f:66:97:6e:8c:cd:
de:d1:35:b7:76:3b:69:d7:fb:ac:16:10:ca:97:9b:
a7:e2:b7:8d:c9:52:6c:95:a0:5d:82:de:13:21:73:
fe:53:de:78:24:3f:e7:f9:e0:ea:b3:7d:e8:60:ef:
94:b3:85:02:04:2d:0b:a1:52:37:d8:51:e9:86:79:
55:1a:d5:62:fc:98:f4:22:1b:b7:e0:2a:60:06:de:
ee:d3:7a:7b:73:35:da:37:54:a0:3b:76:a8:31:ad:
7b:68:da:44:ec:f5:73:aa:2b:ad:d7:85:38:2d:5d:
8c:64:e2:25:55:0b:89:5f:18:a2:06:dd:d1:6e:7f:
dd:06:82:7c:a2:92:18:1c:6a:08:2a:25:40:a4:b3:
f6:64:f8:bb:58:c4:48:ea:d2:fa:cd:91:10:90:fa:
e1:75:38:22:e2:61:cc:55:48:47:70:98:6b:1f:96:
ea:0c:cd:6d:ba:e3:e8:26:19:33:f1:70:c3:6c:ac:
51:c0:19:d3:80:7d:08:6f:b9:9d:11:75:4b:84:c9:
61:52:e0:0b:6c:a4:e0:f6:ab:5f:fd:31:48:42:07:
8c:cd:8d:c4:6e:1a:c3:32:14:f2:20:a7:eb:13:f5:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:A7:0A:CF:1B:54:70:68:63:F5:A1:BF:0D:08:40:EA:FB:D5:9D
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9b00::/44
Signature Algorithm: sha256WithRSAEncryption
b4:0a:2d:3c:d6:a6:0b:e5:ad:c8:76:a9:ec:3e:9d:22:bb:b2:
5a:3e:8f:ac:bd:b2:62:28:79:a1:64:ae:23:df:14:e3:58:76:
4d:6b:aa:38:3b:53:bb:9f:b7:8a:cb:bc:d3:9f:3b:5a:5d:f3:
c4:a3:05:e3:ad:2e:d4:22:34:29:d8:7e:f0:41:b8:c6:57:79:
89:45:0a:3f:16:43:c3:b8:b0:4e:96:11:27:47:22:35:80:6b:
4c:53:2e:8d:ee:1d:7d:5f:a4:83:1f:6c:c1:9a:21:95:3b:78:
41:7b:09:d6:33:f3:19:c9:bf:d6:67:60:79:84:e6:be:69:3b:
e9:59:c3:39:d8:89:f3:d3:b1:ae:25:c2:f1:d7:b3:d1:09:9e:
07:58:58:bf:6d:6c:cc:3d:36:51:fd:db:eb:dd:94:64:82:df:
56:24:52:d3:a2:74:6b:84:7b:7a:5f:ce:de:9a:ca:e0:42:0a:
cb:d5:cf:7a:90:41:5a:99:56:f8:2e:7b:96:06:80:e5:5b:79:
ae:61:cf:e1:d0:24:44:56:26:09:24:0c:f3:ab:4c:dc:1e:08:
f8:83:9f:07:9a:7e:d7:d4:a9:71:63:07:0b:3a:ee:3e:d1:5d:
ed:4d:13:d6:30:cb:e9:31:d8:12:2b:4d:7b:31:c8:ad:78:dd:
f3:05:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:18 2026 by rpki-client