Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313534343130.roa
File: 3136302e32352e3132362e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier: aQrIQnhZlYG7VfkfQmX82W1wTSLHMNDivv1dcYccWOU=
Subject key identifier: 53:69:3D:1A:32:33:2B:B2:FF:CF:2E:6F:BE:B0:B9:07:37:8A:65:06
Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Certificate serial: 5033915F3E5655577C7D083E51147A7DE39AD94E
Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313534343130.roa
Signing time: Wed 22 Apr 2026 08:47:19 +0000
ROA not before: Wed 22 Apr 2026 08:42:19 +0000
ROA not after: Wed 21 Apr 2027 08:47:19 +0000
asID: 154410
IP address blocks: 160.25.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:33:91:5f:3e:56:55:57:7c:7d:08:3e:51:14:7a:7d:e3:9a:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Validity
Not Before: Apr 22 08:42:19 2026 GMT
Not After : Apr 21 08:47:19 2027 GMT
Subject: CN=53693D1A32332BB2FFCF2E6FBEB0B907378A6506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:75:6b:6d:aa:24:8a:ef:07:d2:f0:06:ef:
50:65:55:e9:c9:e4:eb:cb:5b:0e:a1:08:27:64:3a:
75:cc:59:a9:88:e7:75:98:48:32:3b:6f:f6:3a:52:
a2:b5:38:50:e6:1a:d5:c4:06:ca:59:7c:af:8c:d6:
c7:62:b8:7f:8b:a9:a7:51:ff:93:94:8e:10:29:95:
08:f6:e2:75:3e:89:72:8a:8c:e7:e9:36:74:47:dc:
14:99:ab:87:e6:d5:db:34:93:20:24:80:45:ea:61:
f8:fc:13:7f:d3:56:0e:81:44:25:e9:05:ce:52:f6:
7f:31:8e:da:75:07:18:9a:de:58:1c:bd:93:ab:87:
82:14:61:06:4a:a2:04:75:bc:0b:c9:ee:3a:30:3a:
87:3e:77:b0:7f:b9:df:eb:51:7a:73:5b:a0:08:42:
97:80:bf:88:d0:d1:27:cc:08:cc:fa:cd:3f:7f:85:
53:27:28:38:fe:56:96:0d:ee:7b:f1:c6:4a:2d:db:
a6:35:3e:94:aa:3c:2b:ef:a0:71:e0:94:65:01:a8:
d6:da:44:7b:c8:34:34:98:d6:fd:d9:01:1b:72:b7:
65:8c:30:bc:a3:5e:08:90:e8:63:07:5d:0d:0b:9c:
b6:93:60:39:41:6e:0e:a9:75:58:aa:5e:f3:12:eb:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:3D:1A:32:33:2B:B2:FF:CF:2E:6F:BE:B0:B9:07:37:8A:65:06
X509v3 Authority Key Identifier:
keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.126.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:1e:ab:9e:32:9a:1e:c2:75:ce:36:ca:e5:9d:29:e0:fc:f8:
49:43:61:00:dd:01:ca:76:b9:f1:f7:1e:61:17:53:e3:68:ea:
7b:92:b8:96:5d:8b:3d:0d:84:bb:5c:1b:48:c8:39:03:79:91:
87:c2:1c:a6:70:01:38:6a:1c:e1:fa:a9:d8:92:87:55:0b:0e:
6b:e1:95:31:a5:c0:c0:fc:2a:69:76:bc:b0:08:71:04:96:c3:
28:fd:d1:69:85:be:45:c2:00:ee:66:75:05:a3:40:c6:09:39:
c0:af:2e:c8:45:93:9a:f9:a7:31:b7:c2:0d:e3:8e:5d:e6:f0:
4f:a2:41:6c:a7:a6:9e:20:45:ff:79:bd:fe:d3:a9:8c:6c:fd:
d6:38:a1:d8:c8:d3:1f:4d:37:aa:2a:6f:0f:d6:0d:7b:46:9e:
a3:1d:ba:2f:eb:34:13:ef:eb:61:9c:62:a5:2e:5b:5b:6d:e5:
23:8f:91:23:0e:f5:52:ab:2a:fe:35:41:5b:20:00:78:be:b6:
05:07:f6:ac:41:d3:86:82:4b:52:6a:b1:48:ba:98:76:0f:26:
d0:9c:8d:41:bd:93:8d:f8:5d:ca:96:83:1d:27:a9:f5:b7:63:
87:67:55:78:17:77:13:7d:11:a5:2f:89:ab:bf:ec:97:ab:1b:
1c:5e:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:26:30 2026 by rpki-client