Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa
File: 3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa (raw, json)
Hash identifier: cv7XRHHh4aFdvf7MRm++xYvubKHlT+Mh/ragKK3Ub00=
Subject key identifier: 20:DC:B6:A4:52:94:20:9D:A1:97:70:91:17:62:F9:8D:9F:AB:9D:D0
Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE
Certificate serial: 3EEB4D2379097386F8539FBAC203DF461723150A
Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa
Signing time: Wed 22 Apr 2026 21:49:04 +0000
ROA not before: Wed 22 Apr 2026 21:44:04 +0000
ROA not after: Wed 21 Apr 2027 21:49:04 +0000
asID: 153074
IP address blocks: 160.25.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:eb:4d:23:79:09:73:86:f8:53:9f:ba:c2:03:df:46:17:23:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE
Validity
Not Before: Apr 22 21:44:04 2026 GMT
Not After : Apr 21 21:49:04 2027 GMT
Subject: CN=20DCB6A45294209DA19770911762F98D9FAB9DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:04:f2:2d:a7:3c:01:fb:18:10:10:a2:8d:
d9:a5:35:20:23:2e:b3:c9:e1:08:fc:06:6c:19:39:
34:d2:cf:18:6a:9d:af:81:bd:8b:c4:19:59:19:26:
87:a5:12:fb:e9:7e:2b:5f:8d:5c:af:35:87:3d:0f:
de:5a:56:a5:90:27:09:31:c9:f1:30:cc:b0:23:43:
bf:65:c7:1f:8e:23:66:f4:c2:f4:d5:b7:38:41:e6:
ca:17:3d:c1:6d:bf:3b:0c:95:36:bd:9d:c6:9f:72:
82:c3:f9:1d:03:76:98:28:87:84:19:9c:62:50:94:
f8:08:20:f7:8b:46:74:f5:2c:48:3a:18:a1:3d:7b:
8a:57:8b:58:22:a6:e1:d1:87:cb:80:32:71:da:c5:
71:5e:08:40:3f:3a:75:5d:ef:b2:ed:98:70:0e:d4:
f9:7a:87:88:8e:30:49:18:20:e6:10:d2:92:21:20:
40:d8:ce:77:99:0d:bc:81:c9:50:3a:3f:3a:ab:5c:
60:01:e6:dc:d5:c6:1e:b1:e7:86:ad:3f:f3:72:6d:
d2:74:d4:65:1c:ae:71:f0:a4:85:e0:57:fe:8e:07:
9c:c6:37:c8:14:ec:0f:00:71:61:b3:54:4b:e7:fd:
13:03:ca:c9:e8:58:b0:63:dd:41:eb:88:8b:62:61:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:B6:A4:52:94:20:9D:A1:97:70:91:17:62:F9:8D:9F:AB:9D:D0
X509v3 Authority Key Identifier:
keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/3136302e32352e3137362e302f32342d3234203d3e20313533303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:41:35:01:70:bb:8e:65:79:d3:3c:ef:95:d8:09:27:34:f6:
aa:c4:45:cd:84:05:d3:a8:d7:07:0d:40:ec:18:92:d7:14:b8:
e6:36:57:00:1a:90:f1:1c:d3:d3:25:36:6b:fe:46:ce:e7:91:
0d:4c:b0:92:d3:cd:1b:9b:5e:ab:99:67:ef:00:81:5d:44:73:
c1:5c:27:af:24:6c:f7:63:92:01:c5:37:3b:4f:a2:17:c0:a4:
b3:a8:60:4f:59:cf:36:12:d4:2e:cb:ca:f0:e7:55:97:8c:8d:
2c:0b:54:d9:98:94:a6:ed:ff:a9:a2:e1:c9:2b:6a:d2:f1:bc:
17:76:8a:37:3d:25:e7:cb:25:03:90:a1:60:dd:18:5a:8a:bd:
df:4f:03:46:20:5b:89:44:5f:3c:4d:2e:b4:c8:a9:30:44:49:
93:ce:68:59:9a:34:fc:a3:36:60:9e:94:3e:d4:66:66:bd:75:
54:9e:cd:e6:18:0a:ed:10:ad:09:5f:84:51:b6:10:61:4d:7c:
e3:57:5c:4d:8c:40:29:40:2d:79:a2:ce:69:a6:d2:98:80:b0:
da:d5:6b:e1:7a:b7:bd:f0:14:27:13:f0:36:e3:46:ce:eb:34:
84:dd:2c:73:4b:5c:f5:35:f8:18:1c:e1:74:67:33:ce:0f:8a:
f7:19:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:26:18 2026 by rpki-client