Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa
File: 3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa (raw, json)
Hash identifier: JHBiHZb666bssr8bfhvVlKBoUY5dMnALXMC4AC+ETd8=
Subject key identifier: AB:0A:1E:C3:B4:9D:E0:00:70:CC:D5:89:2C:6F:3E:9D:0D:B0:72:79
Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE
Certificate serial: 47829BBD0ECF1EC26015353B8C40E0EF479AAEB2
Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa
Signing time: Wed 22 Apr 2026 21:47:58 +0000
ROA not before: Wed 22 Apr 2026 21:42:58 +0000
ROA not after: Wed 21 Apr 2027 21:47:58 +0000
asID: 141898
IP address blocks: 160.25.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:82:9b:bd:0e:cf:1e:c2:60:15:35:3b:8c:40:e0:ef:47:9a:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE
Validity
Not Before: Apr 22 21:42:58 2026 GMT
Not After : Apr 21 21:47:58 2027 GMT
Subject: CN=AB0A1EC3B49DE00070CCD5892C6F3E9D0DB07279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:c9:25:e8:35:5e:6b:55:1a:cd:6e:44:f3:
7e:8c:42:8a:ae:a2:79:cf:5d:41:91:3c:54:51:ac:
8d:df:33:58:d8:92:5b:a2:d7:8f:c2:e9:8b:00:f7:
8e:70:a3:71:47:c1:fa:44:1a:f3:ab:7b:e8:c9:0a:
2c:1f:bb:d5:93:97:5c:cb:f9:18:d7:06:b3:64:9c:
51:60:16:19:a6:a9:6d:6a:dd:d4:46:48:aa:a0:fa:
5c:c5:e9:5b:9b:53:41:3c:76:af:fb:d1:92:5f:53:
62:bc:dd:0e:0a:76:73:dd:1a:c6:f8:9d:43:64:bd:
8c:9f:27:74:88:3d:66:80:70:36:08:3c:e7:9a:cb:
b9:ab:81:94:34:c1:9b:30:a1:56:f4:ab:fa:12:a2:
b4:3b:9c:33:8b:c3:8a:3a:55:30:9b:5c:9a:cc:66:
c9:be:f5:00:fc:d4:8d:b7:4b:e8:ba:7c:2a:3a:bd:
d3:e8:b8:24:ee:c0:e7:f9:19:f4:47:c8:4a:69:da:
cc:c4:6c:1e:a8:4c:92:52:29:3b:22:72:0f:a5:b8:
16:04:59:e6:03:71:c5:37:4e:b2:b7:86:e6:99:bc:
1e:d0:23:75:9e:ea:f1:3a:00:9e:c3:ec:f9:b5:ca:
8c:e5:23:79:2d:23:cd:fd:fc:37:be:94:b0:f9:ca:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:1E:C3:B4:9D:E0:00:70:CC:D5:89:2C:6F:3E:9D:0D:B0:72:79
X509v3 Authority Key Identifier:
keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/3136302e32352e3137372e302f32342d3234203d3e20313431383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.177.0/24
Signature Algorithm: sha256WithRSAEncryption
02:37:3a:61:39:9e:e5:9b:a2:e9:70:9c:b7:41:5c:79:55:7c:
10:8d:c1:b0:a3:2a:a2:12:d5:5b:20:0e:ef:e9:de:b0:56:ad:
4e:46:1e:b8:36:67:f2:e6:b5:2d:c4:1d:1a:bd:7c:13:cc:3e:
f0:2e:4f:ce:27:33:81:e6:f2:72:75:fc:0c:d7:5a:07:5a:c5:
51:a6:bd:e8:94:c4:94:bd:10:bb:3c:0d:8a:f4:b7:76:f4:d7:
d3:5b:86:ca:2e:f2:33:0c:7d:af:e8:08:03:6d:e3:e2:bd:c8:
81:a7:cc:2b:41:0c:82:86:e9:f0:ed:df:42:ca:59:bf:00:0b:
30:26:57:83:4f:a3:ee:22:90:65:10:9d:b0:3e:57:16:d8:22:
0e:61:5f:48:02:de:8d:af:2b:ba:3c:c0:a8:db:fc:b4:00:b4:
70:91:ec:a7:7d:30:f5:67:f4:58:ed:1f:88:c3:f5:58:fa:6c:
ad:5e:59:cf:d3:2e:77:c8:58:6e:da:63:96:b8:11:64:8f:d1:
ff:07:6f:53:45:fd:32:b9:fe:fb:66:b1:c3:e2:c7:5f:53:37:
8f:b9:d4:dc:ff:ca:e4:5f:19:ba:70:32:10:d8:a4:b9:49:04:
c4:61:10:2d:ea:81:09:06:95:e6:43:24:ea:d5:1e:9d:02:2e:
bc:a7:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:26:19 2026 by rpki-client