Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/35392e3135332e32342e302f32332d3233203d3e203539323835.roa
File: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (raw, json)
Hash identifier: PIawmPVRU0rv5QZs3Obbrs4y7IdFZGOdzlX0TquIq6M=
Subject key identifier: 42:32:16:B9:AE:92:A5:05:36:3A:CE:89:97:D6:2A:97:61:13:36:7C
Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B
Certificate serial: 18F382060149E5034A23430A4C3CE41ADCBC8587
Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/35392e3135332e32342e302f32332d3233203d3e203539323835.roa
Signing time: Sun 03 May 2026 03:06:43 +0000
ROA not before: Sun 03 May 2026 03:01:43 +0000
ROA not after: Sun 02 May 2027 03:06:43 +0000
asID: 59285
IP address blocks: 59.153.24.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 08 May 2026 07:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f3:82:06:01:49:e5:03:4a:23:43:0a:4c:3c:e4:1a:dc:bc:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B
Validity
Not Before: May 3 03:01:43 2026 GMT
Not After : May 2 03:06:43 2027 GMT
Subject: CN=423216B9AE92A505363ACE8997D62A976113367C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:45:7f:96:5f:3b:f7:f2:02:3f:09:39:68:
a9:7a:32:29:e6:34:06:cb:4b:61:4a:af:48:00:db:
6c:eb:64:55:4b:2b:ee:75:a2:7a:53:20:db:13:ab:
85:78:e2:00:ec:5e:04:66:72:9a:cd:cc:f1:bc:94:
a1:6f:ae:b2:29:26:54:95:bb:ab:7f:25:b2:4e:a7:
04:77:a0:bd:d8:cf:56:b7:8c:dc:60:25:9b:ea:e7:
ea:42:e5:05:7a:45:dd:08:af:20:23:e7:bc:06:5a:
02:28:dd:a7:f2:05:97:92:35:3f:fc:5e:64:30:c9:
73:f2:64:08:9f:57:bc:bc:cc:08:7e:00:d8:c8:a9:
34:6d:68:ab:7a:30:d6:65:5a:b2:35:8f:9c:d6:37:
7a:3f:e2:4e:b9:85:67:39:6e:b3:45:9d:b0:cb:83:
f8:39:4a:e1:d3:95:54:d7:84:59:43:0f:58:aa:a1:
9d:dd:d7:5e:42:6f:a0:1a:17:54:ca:22:d0:5d:50:
76:3c:8f:e9:b2:bf:03:7a:fc:61:b0:57:74:76:00:
03:f1:62:34:25:33:c6:6f:c3:67:21:f5:7f:a3:71:
a9:6a:e2:c9:00:9e:40:77:5c:3b:50:0a:e2:87:87:
8f:95:9c:ba:c5:db:4b:02:cc:54:98:0f:40:fb:55:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:16:B9:AE:92:A5:05:36:3A:CE:89:97:D6:2A:97:61:13:36:7C
X509v3 Authority Key Identifier:
keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/35392e3135332e32342e302f32332d3233203d3e203539323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.24.0/23
Signature Algorithm: sha256WithRSAEncryption
82:39:13:4b:e8:c2:54:12:a1:c3:2d:a2:58:12:27:b0:7b:48:
02:09:8b:6f:63:0d:5b:6a:0c:06:71:83:e4:92:35:ad:4c:5b:
e3:80:be:49:78:ef:52:4b:de:60:48:a9:c2:02:a9:7d:cc:c9:
50:be:1d:0c:d5:43:d4:8f:fb:9e:e7:6a:f8:ce:d0:34:92:42:
c1:d2:2d:27:9a:74:09:70:68:d0:82:b0:50:a3:0c:2e:dd:16:
2a:48:00:04:87:50:5c:e3:f7:56:69:b7:45:cf:78:0d:8c:42:
5b:d8:c5:c7:78:cf:a5:81:ac:77:d0:8b:a8:fd:51:75:95:ec:
95:0f:cf:19:40:14:ca:22:e7:8b:a5:8e:35:ba:c2:1b:a2:f0:
98:93:c8:c7:b8:f5:4b:6b:9b:e6:6c:45:93:18:61:a4:da:ef:
a7:8f:fb:e6:91:2c:bb:80:67:24:48:e7:01:1d:08:eb:7a:91:
e5:01:52:74:a9:02:65:f8:46:1a:c1:2c:df:19:f0:80:cd:a4:
37:6b:d1:3d:c4:d4:67:26:59:f7:e9:c9:0e:e5:16:c6:2b:72:
26:ab:b8:7f:21:aa:57:4b:e0:c5:8f:8e:e8:52:7e:6a:30:5b:
6a:b2:72:1c:e9:29:65:a4:c1:43:86:02:07:5f:be:61:35:08:
8f:22:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:31:43 2026 by rpki-client