Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: Lhjvb5/hYX3nDjceJ9w4IFmtnoYJ0ZYT2qu/v7RlVIU=
Subject key identifier: B3:23:E2:A0:89:CF:7E:27:04:F8:49:72:3B:2C:6F:2A:8C:60:42:63
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 0B0046692B1D86043832EB7DDA052CB170DC4522
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Fri 24 Apr 2026 05:00:00 +0000
ROA not before: Fri 24 Apr 2026 04:55:00 +0000
ROA not after: Fri 23 Apr 2027 05:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9b20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:00:46:69:2b:1d:86:04:38:32:eb:7d:da:05:2c:b1:70:dc:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 24 04:55:00 2026 GMT
Not After : Apr 23 05:00:00 2027 GMT
Subject: CN=B323E2A089CF7E2704F849723B2C6F2A8C604263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:ad:e3:ee:55:d5:be:a2:f9:88:3d:bd:4c:
02:f7:59:a9:1b:53:d1:41:44:ec:67:cb:09:0e:1b:
3f:23:18:73:81:a7:ba:3f:0b:b7:4e:e7:3d:e8:57:
c6:b7:14:35:c9:a8:40:94:b7:9f:84:d8:2c:32:5a:
7a:de:cd:ae:26:2c:62:69:0a:71:1f:39:42:03:2a:
7b:08:23:54:42:fa:1d:b9:79:52:d9:ba:04:bb:7b:
2a:bd:5e:9c:6d:a0:6d:8b:78:17:fe:08:f3:8e:5b:
d1:8a:d3:06:0f:4a:62:09:b8:63:98:46:4a:d5:91:
e5:32:0c:f9:dd:d0:85:6a:ac:51:b0:fa:90:34:85:
b8:36:7b:11:88:69:50:86:e4:35:18:46:3d:49:1d:
31:95:84:a7:2e:c1:ac:14:63:2d:dc:d5:86:90:8f:
ea:b3:c5:69:f1:7b:56:95:9f:b9:0c:04:dc:50:68:
58:06:c7:99:a3:e1:97:f1:8f:d3:f2:d7:c0:d6:9e:
9c:ee:46:73:aa:8a:09:c4:c6:1b:20:5c:10:51:d1:
c5:b1:3c:9d:2f:4e:05:84:ee:4c:d7:2c:41:98:fb:
53:81:73:2b:ea:cb:fe:11:d3:22:9e:90:66:73:11:
01:5f:b2:0e:64:b7:d9:19:c7:c3:52:b4:cd:cc:20:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:E2:A0:89:CF:7E:27:04:F8:49:72:3B:2C:6F:2A:8C:60:42:63
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9b20::/44
Signature Algorithm: sha256WithRSAEncryption
7c:f8:51:f8:bd:9b:71:d3:fa:87:a6:d4:c3:01:0d:b6:c2:36:
af:f9:19:c4:3b:9c:2f:3b:1f:71:6d:6b:c6:3f:0f:00:b1:db:
2b:fc:3b:96:30:8d:5a:29:c1:a6:c8:79:c4:f5:61:a9:04:00:
31:09:cb:ad:b9:3d:95:65:1f:98:c6:a3:00:b7:40:d9:63:95:
de:2e:1e:e0:67:59:b4:7e:0d:70:97:1a:c5:b7:7e:58:f0:d4:
15:a1:9d:b2:55:d1:2e:bb:83:5d:c2:d4:1e:c5:3a:28:7d:02:
0b:8e:64:b6:87:4f:28:a4:ee:97:bf:29:7a:9a:24:bc:96:c1:
c8:0c:a5:60:2c:82:f6:4a:27:71:46:0b:55:d8:72:63:ce:06:
60:88:50:b2:db:5f:26:e9:88:64:18:d6:0d:d4:1d:56:f6:9d:
07:0f:16:6a:3b:db:48:a6:ac:b2:05:bb:c5:b3:6a:65:d7:8f:
d6:fd:89:aa:64:1e:d9:12:2d:37:a7:61:b5:83:d4:30:0a:6c:
b2:68:34:25:85:ca:61:a9:22:14:57:d9:3e:85:de:f4:da:21:
0f:66:59:f7:39:9a:98:f4:b4:12:ba:d9:a5:c3:23:e0:13:e7:
9a:be:1e:65:55:01:55:66:bf:81:a7:fa:c8:c6:80:68:4f:32:
c2:ca:33:b1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUCwBGaSsdhgQ4Mut92gUssXDcRSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNjA0MjQwNDU1MDBaFw0yNzA0MjMwNTAwMDBaMDMxMTAvBgNV
BAMTKEIzMjNFMkEwODlDRjdFMjcwNEY4NDk3MjNCMkM2RjJBOEM2MDQyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSsK3j7lXVvqL5iD29TAL3Wakb
U9FBROxnywkOGz8jGHOBp7o/C7dO5z3oV8a3FDXJqECUt5+E2CwyWnreza4mLGJp
CnEfOUIDKnsII1RC+h25eVLZugS7eyq9XpxtoG2LeBf+CPOOW9GK0wYPSmIJuGOY
RkrVkeUyDPnd0IVqrFGw+pA0hbg2exGIaVCG5DUYRj1JHTGVhKcuwawUYy3c1YaQ
j+qzxWnxe1aVn7kMBNxQaFgGx5mj4Zfxj9Py18DWnpzuRnOqignExhsgXBBR0cWx
PJ0vTgWE7kzXLEGY+1OBcyvqy/4R0yKekGZzEQFfsg5kt9kZx8NStM3MIE4zAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUsyPioInPficE+ElyOyxvKoxgQmMwHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzk2MjMyMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAmyAwDQYJKoZIhvcNAQELBQADggEBAHz4Ufi9m3HT+oem1MMBDbbCNq/5GcQ7
nC87H3Fta8Y/DwCx2yv8O5YwjVopwabIecT1YakEADEJy625PZVlH5jGowC3QNlj
ld4uHuBnWbR+DXCXGsW3fljw1BWhnbJV0S67g13C1B7FOih9AguOZLaHTyik7pe/
KXqaJLyWwcgMpWAsgvZKJ3FGC1XYcmPOBmCIULLbXybpiGQY1g3UHVb2nQcPFmo7
20imrLIFu8WzamXXj9b9iapkHtkSLTenYbWD1DAKbLJoNCWFymGpIhRX2T6F3vTa
IQ9mWfc5mpj0tBK62aXDI+AT55q+HmVVAVVmv4Gn+sjGgGhPMsLKM7E=
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:19 2026 by rpki-client