Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: bpEXwhVxb9qho5Jj5cQvNvhK6FJ9RsrQjCV3+SnoqM0=
Subject key identifier: C9:DC:C8:43:64:4E:AC:05:5C:AA:41:98:C5:51:3E:5B:09:3B:13:DE
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 505BCF3AC7933206132B62813DF5E80D70CA5B29
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Fri 24 Apr 2026 05:00:00 +0000
ROA not before: Fri 24 Apr 2026 04:55:00 +0000
ROA not after: Fri 23 Apr 2027 05:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9b10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5b:cf:3a:c7:93:32:06:13:2b:62:81:3d:f5:e8:0d:70:ca:5b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 24 04:55:00 2026 GMT
Not After : Apr 23 05:00:00 2027 GMT
Subject: CN=C9DCC843644EAC055CAA4198C5513E5B093B13DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:e1:29:c5:95:71:5b:7c:04:24:f3:8c:92:
be:f8:33:b4:d0:24:80:3e:6b:62:92:74:f7:40:5a:
27:b5:f4:dd:41:80:0e:99:ce:4d:e5:62:1d:4b:7f:
69:60:64:7b:54:b7:f0:af:3b:d0:e6:8c:d4:ab:82:
95:ba:d1:95:b3:45:8d:6f:a7:48:7c:f5:26:58:3d:
ce:e9:30:54:c1:7b:d4:71:68:03:b8:f8:e3:1b:8d:
ba:23:75:5e:45:8f:35:6c:3b:48:04:15:44:cc:5b:
e6:ef:5f:eb:12:a3:57:ec:ed:72:14:07:15:1d:86:
43:4b:67:59:13:54:03:a1:fd:b6:b1:b2:94:a4:74:
d7:c1:a9:79:65:4b:66:d9:10:dd:fb:a9:9d:f7:e7:
1d:da:3e:b7:64:25:3a:78:70:d7:5e:f8:56:22:7a:
34:bc:d7:77:78:42:b2:ab:c8:8b:6c:a5:70:d1:76:
67:cd:93:da:e5:45:d2:79:9d:07:29:76:3e:40:e7:
54:4e:ed:f8:48:3e:e4:24:81:34:47:ce:36:e3:04:
e7:e4:4d:dd:49:5e:f0:79:6b:f6:74:85:df:54:cd:
44:a5:8f:10:cc:34:ed:de:90:b1:c5:dd:a6:df:02:
e2:f0:0e:7a:8f:55:1d:50:2a:1e:00:44:bc:d0:80:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DC:C8:43:64:4E:AC:05:5C:AA:41:98:C5:51:3E:5B:09:3B:13:DE
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9b10::/44
Signature Algorithm: sha256WithRSAEncryption
79:87:44:22:70:e0:9a:61:2f:f4:88:26:a0:55:31:f4:2f:5a:
23:00:94:25:da:75:b5:d6:1f:72:c8:b0:14:8f:4c:49:1f:4e:
d7:10:9c:fc:77:92:2f:1e:ee:b1:cb:d0:17:75:9f:a2:4b:61:
0b:d3:da:53:a2:3f:7c:16:65:5f:17:2f:c8:6a:ec:29:27:41:
7d:d9:cc:d9:66:93:97:2c:d3:b0:5d:e2:8f:6f:58:8e:58:18:
48:72:e4:46:92:ec:81:a1:e6:c3:0c:64:01:82:9e:f9:f9:18:
ae:00:2b:eb:2a:4d:d2:7b:07:d5:d4:79:a2:e1:56:ce:b9:10:
8d:5c:bd:a4:97:49:be:59:ad:04:9c:30:88:4b:1b:ce:ad:77:
df:8c:6a:ad:4a:3f:30:76:9b:78:bc:2e:f4:e0:0b:bf:26:5d:
ee:46:b5:c8:8a:24:c4:3d:0e:c4:4b:8e:74:5d:92:0c:67:b9:
af:55:53:cb:fe:93:05:d2:de:74:3b:28:f9:05:81:ab:2c:18:
3d:d2:0a:16:0b:b2:57:32:ae:09:e6:ab:43:7d:e6:79:48:ce:
33:0d:ae:df:fe:f4:1c:27:a5:b9:6d:7d:53:3b:77:13:b7:58:
14:07:4a:9b:ff:c6:90:df:80:61:28:23:f9:0c:1e:f7:a9:8a:
26:36:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:18 2026 by rpki-client