Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396233303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396233303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: +rKU92FkxOaTHL0+OKev+9oPbDUWILf99oTwXENZXus=
Subject key identifier: 1D:4C:4C:E5:DD:A2:A7:C7:14:34:1F:87:D1:F2:00:AF:13:96:71:C5
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 119586B5FC4899D4450A02915674364A6C1FE398
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396233303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Fri 24 Apr 2026 05:00:00 +0000
ROA not before: Fri 24 Apr 2026 04:55:00 +0000
ROA not after: Fri 23 Apr 2027 05:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:9b30::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:95:86:b5:fc:48:99:d4:45:0a:02:91:56:74:36:4a:6c:1f:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Apr 24 04:55:00 2026 GMT
Not After : Apr 23 05:00:00 2027 GMT
Subject: CN=1D4C4CE5DDA2A7C714341F87D1F200AF139671C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:85:e7:8f:e8:6d:6b:a8:8c:08:36:30:ef:
82:99:a6:fa:b9:99:3e:a2:4f:b8:39:dd:4b:61:9d:
fc:fe:45:bd:fd:84:80:73:34:05:85:1e:70:2d:1b:
27:b0:b7:06:ff:b9:bf:6e:bf:4e:99:6c:75:4e:ad:
65:b7:c7:d4:9a:ab:af:53:3c:be:d3:01:5c:51:2e:
ee:66:93:53:f5:91:c0:3b:48:0a:23:61:c2:ba:0b:
8b:b8:82:39:be:1a:6b:17:40:d3:46:b6:bc:d7:a5:
b8:b6:1d:7e:31:3b:6d:64:fa:74:13:de:cf:f7:90:
b6:0d:13:c6:7d:4e:43:8e:bb:9d:ac:21:99:fa:8f:
77:94:d2:e6:73:bd:84:97:f2:f8:cb:51:2b:69:d8:
37:b4:08:99:1e:cf:e5:c6:39:00:a0:21:1b:47:57:
52:7b:2c:0c:61:4e:02:0d:1e:96:24:6c:e8:a3:41:
14:76:23:b5:81:bc:8c:06:fa:2a:0c:6a:6f:2e:97:
e7:dd:1d:2d:a1:4a:84:7f:73:cd:c7:3d:93:6e:ac:
b3:2f:26:b0:5c:0d:56:2c:04:67:e5:03:ca:4c:27:
ae:dd:9f:90:9b:bb:f2:c1:92:55:ff:d3:78:6d:33:
31:5c:ac:41:a0:61:da:ee:f9:e7:8f:af:be:6f:4b:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:4C:E5:DD:A2:A7:C7:14:34:1F:87:D1:F2:00:AF:13:96:71:C5
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396233303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9b30::/44
Signature Algorithm: sha256WithRSAEncryption
1a:6a:e1:e9:83:ab:f7:d1:91:49:dc:79:32:65:7e:7c:69:82:
14:e4:46:ca:97:d4:57:14:87:8a:c5:74:f4:24:74:2c:b3:97:
e9:9f:2b:45:3d:c1:dc:f8:e9:bf:ba:fd:5c:d9:9a:a6:82:05:
46:86:17:ab:b0:cb:7e:2c:36:e8:b8:0b:d1:0f:ec:14:c6:83:
c0:df:2f:cd:27:c4:f6:27:5f:68:02:c8:fd:4b:31:2c:09:de:
09:90:20:73:ff:be:0b:4d:17:89:24:0d:46:64:df:96:32:55:
d0:69:99:55:4b:08:db:86:12:09:00:97:96:4a:74:24:24:62:
9f:c1:b4:ea:d0:96:a7:7e:bd:fb:74:bb:99:ad:96:d6:ea:00:
fd:da:5a:18:d4:90:4b:75:0e:0a:04:fe:03:01:48:d0:5b:c3:
d2:0b:e2:9e:30:84:17:d4:93:17:bd:a1:dd:8a:2c:cf:df:c1:
85:83:12:a4:38:de:86:8e:bf:3c:b8:f1:64:ae:c2:9a:d9:20:
f3:73:8d:75:b5:f2:22:df:2e:8f:38:d2:a9:d3:81:77:64:cf:
71:da:98:61:70:55:39:46:d9:29:f6:f8:33:42:b3:f5:f3:7f:
1b:b3:9c:24:ea:0d:2a:09:5d:b0:3a:fc:53:a0:d6:95:19:6e:
48:0c:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 11:56:26 2026 by rpki-client