Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
File: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier: kWIc04bg344vSrYwOZG4gngsbdkAayI+0RH3s89aSFk=
Subject key identifier: 6C:69:D4:EF:92:5D:87:43:59:1F:E4:30:B7:30:20:DF:1B:A4:7E:D2
Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Certificate serial: 74D46308937A2A417A23951D8BAA494195EB8F9F
Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
Signing time: Tue 28 Apr 2026 15:01:22 +0000
ROA not before: Tue 28 Apr 2026 14:56:22 +0000
ROA not after: Tue 27 Apr 2027 15:01:22 +0000
asID: 152800
IP address blocks: 160.22.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d4:63:08:93:7a:2a:41:7a:23:95:1d:8b:aa:49:41:95:eb:8f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Validity
Not Before: Apr 28 14:56:22 2026 GMT
Not After : Apr 27 15:01:22 2027 GMT
Subject: CN=6C69D4EF925D8743591FE430B73020DF1BA47ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:63:17:63:6d:5f:fa:69:36:32:51:9c:65:
d5:dd:45:00:39:58:bf:d0:ec:47:62:e2:10:71:41:
61:03:b3:74:c7:3d:74:e8:93:bb:57:7c:c7:32:36:
b1:e8:85:14:bb:fc:66:82:e1:d1:be:1a:87:2a:07:
c0:2f:4d:48:28:f9:6e:ee:92:36:3c:3d:5e:ad:72:
8a:4d:68:80:b0:f8:e6:7e:dd:89:68:13:e0:6c:55:
09:4f:a0:53:ae:ba:a5:ab:39:b8:62:f4:b9:59:fb:
a0:18:3f:9d:5d:fd:42:f9:7b:8c:4f:2b:d7:1a:eb:
b3:73:31:93:ec:63:d3:e6:06:e1:04:de:89:b8:ad:
ed:2a:23:79:d7:97:ed:90:86:29:1b:23:33:0c:87:
31:47:06:04:0a:36:0b:05:68:e3:68:12:55:d2:18:
31:74:9b:06:42:1c:85:b7:24:fc:9e:0e:76:e1:95:
02:d5:57:26:dd:ab:d1:8a:3d:59:5c:df:01:cb:47:
c0:c2:00:ec:15:ab:1d:c9:f4:29:7b:67:9e:36:f9:
ec:e8:c9:4c:ca:58:66:27:8c:28:ea:28:96:ba:89:
72:0f:e9:89:a1:f6:a4:5a:2c:e1:cb:a4:03:47:53:
c3:04:b9:68:f7:6d:a5:fc:83:80:d3:86:ec:a3:8d:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:D4:EF:92:5D:87:43:59:1F:E4:30:B7:30:20:DF:1B:A4:7E:D2
X509v3 Authority Key Identifier:
keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.25.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fc:7f:24:9a:53:a8:12:fd:ac:49:49:ec:7d:b1:23:c7:f8:
99:17:ff:72:10:d7:c7:fe:7e:0c:59:44:33:9c:41:17:ab:94:
23:b4:a4:d2:47:06:eb:42:f3:e5:57:38:37:ff:a3:0d:94:45:
21:ac:92:a5:85:99:76:38:7b:56:52:42:1a:ba:10:70:60:99:
ba:8f:d1:1a:38:28:1c:b2:b0:b4:d8:02:24:03:6f:f7:f2:c3:
dd:e2:cd:18:00:b3:43:61:a1:70:83:f6:e9:68:2a:c2:40:b6:
6d:b1:fe:b8:7e:80:3f:43:c8:f3:ed:37:58:1b:38:9e:3c:60:
69:42:41:1a:b6:55:fb:9b:1f:75:01:da:1e:c8:bf:6b:31:2f:
cd:bc:f7:9f:c9:44:ca:cc:a5:cc:8a:a3:4c:4a:5e:c5:71:d7:
1d:8c:39:f7:7f:09:99:11:5b:34:01:d5:8a:7c:e7:62:bd:dd:
a2:c6:32:f9:36:d6:0a:e8:12:bc:31:45:fc:f2:d8:81:24:c4:
bf:ca:5c:25:a7:f1:8d:45:93:ab:84:e6:92:5b:9a:4b:f6:b4:
73:dc:ca:7c:e4:5d:eb:fd:6b:38:86:c3:3f:16:ea:49:ed:a0:
cb:b6:62:88:73:13:54:1a:ee:10:03:1b:7e:29:dd:14:e0:26:
44:f0:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:35:03 2026 by rpki-client