Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3230322e34362e3135362e302f32322d3234203d3e203633343930.roa
File: 3230322e34362e3135362e302f32322d3234203d3e203633343930.roa (raw, json)
Hash identifier: MCkfmgLSvjgJzuunqnBfoI56RJumPJj/K4t4bFIXuQg=
Subject key identifier: AB:CA:DC:7B:A4:55:E2:10:5A:08:0B:E5:65:B1:0B:AB:F0:3C:B9:AC
Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial: 74D25E1728D6A8CADD01823A531795C3368ADDBB
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3230322e34362e3135362e302f32322d3234203d3e203633343930.roa
Signing time: Thu 23 Apr 2026 02:08:03 +0000
ROA not before: Thu 23 Apr 2026 02:03:03 +0000
ROA not after: Thu 22 Apr 2027 02:08:03 +0000
asID: 63490
IP address blocks: 202.46.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d2:5e:17:28:d6:a8:ca:dd:01:82:3a:53:17:95:c3:36:8a:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Validity
Not Before: Apr 23 02:03:03 2026 GMT
Not After : Apr 22 02:08:03 2027 GMT
Subject: CN=ABCADC7BA455E2105A080BE565B10BABF03CB9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:6b:94:ca:fc:49:f8:a1:4d:95:46:23:65:
60:23:cd:4e:c6:e4:bc:4b:21:3c:b2:97:cc:99:b2:
ff:94:5c:fd:18:fa:65:12:37:54:53:fa:08:1d:53:
cf:32:d5:b6:23:dd:05:1e:87:58:51:40:0d:09:bf:
f9:03:79:fd:2b:d0:ed:a4:2c:7a:cf:ed:c7:9d:ea:
d0:b4:11:05:fc:83:2d:fa:4c:ee:a0:f4:c2:07:fb:
a8:a6:b4:46:50:26:8c:2e:6b:e9:12:38:e6:39:92:
f9:b4:3e:a9:d1:8b:2a:a1:04:6f:9b:a1:8b:12:64:
c6:33:b3:8c:ae:70:d0:33:05:67:92:8b:ab:af:04:
31:6a:d8:32:f7:cf:66:74:94:f2:5c:e3:44:f7:87:
f6:bd:8b:c2:0e:23:b3:d5:ac:6a:4a:78:30:eb:62:
b7:42:25:3d:31:b0:a5:78:59:24:2e:7b:2a:7b:75:
9e:2c:54:56:9e:5c:86:51:69:00:46:57:1d:7c:9b:
0d:d0:8f:75:9a:79:b9:08:f4:d8:eb:6d:b9:0a:63:
b4:a0:d6:ef:f6:7a:10:54:a5:07:93:eb:66:12:f1:
84:76:7f:d8:ca:d8:88:e4:63:46:9c:6f:ee:76:c3:
0f:83:aa:bb:76:85:c3:6d:3d:32:c0:df:2e:50:dc:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:DC:7B:A4:55:E2:10:5A:08:0B:E5:65:B1:0B:AB:F0:3C:B9:AC
X509v3 Authority Key Identifier:
keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3230322e34362e3135362e302f32322d3234203d3e203633343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
20:ba:3e:a3:d2:f9:b5:12:a0:b1:22:18:dc:40:3b:03:83:ab:
6d:81:6f:6a:92:f7:09:fd:48:f1:f1:67:99:e6:c5:8f:ef:23:
f1:62:4f:f9:55:27:58:83:f2:5a:f3:20:cf:12:d9:8f:b6:3c:
f5:4b:3c:dc:ae:ba:1c:53:77:67:a7:75:5f:c2:c0:ca:cb:37:
c9:ca:3d:fe:0e:5f:60:98:a5:d2:ab:73:4f:7a:32:9d:f1:db:
b4:a0:29:aa:3b:b0:c5:5b:3c:a3:18:2f:d8:c7:e8:ce:30:ab:
97:3f:15:6a:c0:30:16:0a:b7:32:99:bd:8d:06:4a:39:41:81:
c5:bf:8f:c5:31:62:15:d0:eb:24:f7:99:97:c8:95:d1:3f:d7:
cc:1b:12:7b:fa:5f:64:97:d0:d8:27:38:e1:a5:eb:df:42:c7:
ae:19:44:1e:15:09:6f:85:2d:73:22:7b:23:b7:8f:a6:ca:05:
4d:f4:a4:55:84:85:c7:33:a2:d1:f9:6d:47:61:b8:7d:c3:75:
5b:7a:83:15:a6:24:9d:06:1e:51:89:8b:0a:9c:bb:db:6f:39:
37:8e:28:ff:87:02:2c:68:27:50:38:03:be:6b:a5:4b:d3:e5:
80:65:a0:e4:89:ad:c8:8c:be:26:b8:e9:dc:2b:9c:af:0d:5c:
9f:94:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:13:34 2026 by rpki-client