Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e20313432343031.roa
File: 3230322e38312e36332e302f32342d3234203d3e20313432343031.roa (raw, json)
Hash identifier: OhCwr8AoU4pxRYcYRKzs6BkaYDiZoqLDrYJztjEbkCY=
Subject key identifier: 1E:79:21:98:39:B1:B8:26:6F:24:51:86:CC:B3:4F:20:2B:82:88:6C
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 435F1C97CF795D58E661DF7BFDF9462DCD91A0AA
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e20313432343031.roa
Signing time: Wed 29 Apr 2026 08:00:01 +0000
ROA not before: Wed 29 Apr 2026 07:55:01 +0000
ROA not after: Wed 28 Apr 2027 08:00:01 +0000
asID: 142401
IP address blocks: 202.81.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5f:1c:97:cf:79:5d:58:e6:61:df:7b:fd:f9:46:2d:cd:91:a0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Apr 29 07:55:01 2026 GMT
Not After : Apr 28 08:00:01 2027 GMT
Subject: CN=1E79219839B1B8266F245186CCB34F202B82886C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:d2:e2:ab:22:a1:73:3e:53:e3:a4:a0:a6:
1e:d7:f5:ff:56:db:9c:60:00:c6:de:b5:c4:bf:ef:
57:42:c6:65:af:4f:01:24:f3:f9:77:58:c1:0a:2c:
a3:cc:6d:0f:06:35:f8:e6:72:66:74:ae:11:ed:fb:
25:52:83:28:c1:3d:9b:ee:eb:95:08:42:ee:7d:f3:
83:46:8c:0f:50:5c:a2:55:cb:9a:2c:c0:1d:44:c8:
33:97:fa:18:85:0e:d1:ef:12:ff:9e:ec:09:a2:10:
f4:51:f1:62:ec:5a:c6:b4:4c:c3:14:74:b2:6a:8c:
7d:18:a6:01:b7:dd:b6:00:c8:ac:65:50:f2:c4:e7:
bb:8c:2a:60:3e:49:2f:da:26:9a:2d:1b:e2:91:eb:
70:a4:75:8a:5c:cd:c7:6e:a8:b9:44:54:a3:fe:c1:
3a:de:4c:71:81:b9:80:46:f6:96:d6:73:83:f5:5d:
50:d3:3f:8f:6b:ed:19:cc:36:ee:31:99:1e:af:46:
27:9a:6f:5c:d8:9d:a5:09:27:68:2c:32:bb:28:58:
a9:10:4d:68:c0:59:b1:8d:9a:ca:e5:f2:9b:11:de:
63:33:50:18:55:dc:d2:9c:0e:6f:dd:f4:cf:f8:ca:
bb:a4:74:84:d5:97:43:a0:22:04:de:a7:d0:b0:55:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:21:98:39:B1:B8:26:6F:24:51:86:CC:B3:4F:20:2B:82:88:6C
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e20313432343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3d:11:ad:dc:ac:ec:49:09:28:1d:a7:78:8b:52:e8:d9:ac:
48:06:02:2a:78:4c:a9:84:d8:8a:2d:93:af:ef:bc:44:08:9f:
56:32:1e:76:1f:54:f7:e4:b7:3d:14:54:4f:1c:16:7e:b1:be:
ea:3b:ca:f1:e4:b0:1c:94:86:64:2b:72:3e:13:d8:4c:3f:7a:
db:6a:cb:25:46:97:e0:c9:ee:fe:9e:c2:11:be:3c:16:d4:2d:
21:55:38:4c:8d:4e:c6:9d:f4:63:41:ce:33:b1:14:38:3c:46:
b7:33:1d:d4:63:75:f7:0b:e5:51:c4:11:e6:c4:23:d8:87:d2:
b7:a3:39:7d:f1:da:5f:d9:c4:f1:84:c2:5d:37:6d:9d:a8:e3:
62:d3:6e:96:f1:47:0b:45:02:ad:1b:ab:28:e6:74:72:cc:fb:
44:79:15:a7:be:85:20:23:b4:ba:95:3c:df:11:9a:0a:ce:65:
37:9d:b0:a0:e6:8b:75:b9:f6:48:a1:a6:53:0b:83:ad:69:9b:
c7:98:e8:a4:26:98:ad:90:c3:ba:5f:9a:23:14:44:ba:ed:d1:
f5:6e:c2:7b:a8:79:ca:38:07:44:94:d2:fc:10:76:d8:d4:ec:
b3:d0:d9:43:78:f8:4e:77:6c:8a:ef:5e:b2:e0:6c:ab:fe:8d:
0d:2d:3f:16
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQ18cl895XVjmYd97/flGLc2RoKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNjA0MjkwNzU1MDFaFw0yNzA0MjgwODAwMDFaMDMxMTAvBgNV
BAMTKDFFNzkyMTk4MzlCMUI4MjY2RjI0NTE4NkNDQjM0RjIwMkI4Mjg4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO9LiqyKhcz5T46Sgph7X9f9W
25xgAMbetcS/71dCxmWvTwEk8/l3WMEKLKPMbQ8GNfjmcmZ0rhHt+yVSgyjBPZvu
65UIQu5984NGjA9QXKJVy5oswB1EyDOX+hiFDtHvEv+e7AmiEPRR8WLsWsa0TMMU
dLJqjH0YpgG33bYAyKxlUPLE57uMKmA+SS/aJpotG+KR63CkdYpczcduqLlEVKP+
wTreTHGBuYBG9pbWc4P1XVDTP49r7RnMNu4xmR6vRieab1zYnaUJJ2gsMrsoWKkQ
TWjAWbGNmsrl8psR3mMzUBhV3NKcDm/d9M/4yrukdITVl0OgIgTep9CwVcMxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHnkhmDmxuCZvJFGGzLNPICuCiGwwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzYzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMjM0MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpRPzANBgkqhkiG
9w0BAQsFAAOCAQEAbz0Rrdys7EkJKB2neItS6NmsSAYCKnhMqYTYii2Tr++8RAif
VjIedh9U9+S3PRRUTxwWfrG+6jvK8eSwHJSGZCtyPhPYTD9622rLJUaX4Mnu/p7C
Eb48FtQtIVU4TI1Oxp30Y0HOM7EUODxGtzMd1GN19wvlUcQR5sQj2IfSt6M5ffHa
X9nE8YTCXTdtnajjYtNulvFHC0UCrRurKOZ0csz7RHkVp76FICO0upU83xGaCs5l
N52woOaLdbn2SKGmUwuDrWmbx5jopCaYrZDDul+aIxREuu3R9W7Ce6h5yjgHRJTS
/BB22NTss9DZQ3j4Tndsiu9esuBsq/6NDS0/Fg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:47 2026 by rpki-client