Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
File: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (raw, json)
Hash identifier: TXjYJLzON9GC73jafOnjH+eie5+pdIe1ymapG44ZN1U=
Subject key identifier: 99:48:9D:7F:E1:9D:80:E9:65:67:13:EC:3F:4E:3F:D8:31:79:32:63
Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA
Certificate serial: 2D51966B7DB3DE5B40940CCF86A579CB6778E667
Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
Signing time: Tue 28 Apr 2026 18:02:37 +0000
ROA not before: Tue 28 Apr 2026 17:57:37 +0000
ROA not after: Tue 27 Apr 2027 18:02:37 +0000
asID: 152815
IP address blocks: 160.22.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:51:96:6b:7d:b3:de:5b:40:94:0c:cf:86:a5:79:cb:67:78:e6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA
Validity
Not Before: Apr 28 17:57:37 2026 GMT
Not After : Apr 27 18:02:37 2027 GMT
Subject: CN=99489D7FE19D80E9656713EC3F4E3FD831793263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:43:00:d3:8c:d4:d3:a1:f5:ec:34:bb:09:
23:61:07:5e:62:52:bf:9b:68:8d:4f:71:04:c2:94:
e6:1b:45:db:18:4e:79:2f:52:ff:e9:a5:e9:40:98:
6c:25:a7:21:40:98:d6:cb:11:9f:74:9d:c5:51:fe:
bb:f6:1b:ab:cb:f8:e9:81:6f:32:35:d3:c8:59:ea:
a5:99:0d:1d:59:1c:c1:f8:7c:0a:b1:d9:c7:40:b1:
99:6a:6b:19:71:9b:c1:00:48:7e:68:9f:db:66:4b:
35:3f:41:9e:72:51:88:5a:4b:ae:40:7b:ca:a2:71:
52:f5:fd:36:2e:02:05:34:ba:12:c7:46:a0:ac:56:
de:2a:18:a1:98:3a:f6:f5:bd:cc:01:ef:e9:4a:b8:
05:18:69:cd:ff:b9:7f:c5:c0:d1:92:72:5e:4a:cd:
13:72:95:e5:91:28:c2:06:d7:69:b8:ae:04:35:31:
11:a2:36:9e:5c:43:7c:cb:82:0f:ee:56:07:5f:10:
2f:13:3a:f7:f1:0a:35:96:95:43:b1:9f:27:d0:30:
dd:c4:ac:d9:c9:1d:6f:d2:d6:91:b9:75:73:26:d4:
b8:a5:d9:75:68:c1:5d:21:9e:a4:bc:7a:ed:66:d1:
d7:62:7c:1b:1c:b9:90:32:05:98:bb:bc:fa:a4:1e:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:9D:7F:E1:9D:80:E9:65:67:13:EC:3F:4E:3F:D8:31:79:32:63
X509v3 Authority Key Identifier:
keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.90.0/24
Signature Algorithm: sha256WithRSAEncryption
67:00:ba:db:6a:27:16:81:3f:41:bb:a4:94:0b:e4:de:1c:76:
97:c9:c5:38:7b:6a:97:d8:16:13:15:a2:0f:12:28:7d:3c:62:
82:bc:54:ed:2b:0a:51:c3:33:5d:84:29:07:06:49:f5:3a:c4:
55:98:db:2f:41:19:3e:45:98:b4:da:de:2f:58:1f:6f:0a:70:
65:55:47:23:1e:7d:a9:9a:9a:b2:eb:71:28:d8:af:be:06:bf:
89:b8:45:46:c5:2d:8b:da:97:50:ec:3e:5b:e6:d3:f3:a2:30:
d7:25:7b:47:ef:9b:65:95:5d:57:d0:06:4c:aa:a3:cf:89:8a:
84:d3:c5:bc:f1:aa:b0:4c:2f:6a:98:95:c0:f8:62:03:71:c0:
1d:bb:06:7f:d3:6a:45:6b:9f:26:e5:3d:8d:3c:e0:14:42:7e:
08:6b:9a:51:db:ef:76:e2:71:31:e1:44:70:28:0c:30:91:74:
7f:72:c0:c3:35:4b:10:67:b7:27:f0:72:da:01:ae:a4:11:cb:
2d:17:95:56:c9:63:b5:85:8b:48:48:e4:75:7e:48:ae:10:9b:
82:3c:3a:d4:a2:08:3c:de:00:5c:12:02:3f:ef:f4:f8:16:34:
32:da:bd:d4:fb:6b:7a:c3:21:e9:ef:1d:9e:c2:5d:1e:46:71:
97:38:e2:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULVGWa32z3ltAlAzPhqV5y2d45mcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG
Q0JBMUVDQTAeFw0yNjA0MjgxNzU3MzdaFw0yNzA0MjcxODAyMzdaMDMxMTAvBgNV
BAMTKDk5NDg5RDdGRTE5RDgwRTk2NTY3MTNFQzNGNEUzRkQ4MzE3OTMyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/0MA04zU06H17DS7CSNhB15i
Ur+baI1PcQTClOYbRdsYTnkvUv/ppelAmGwlpyFAmNbLEZ90ncVR/rv2G6vL+OmB
bzI108hZ6qWZDR1ZHMH4fAqx2cdAsZlqaxlxm8EASH5on9tmSzU/QZ5yUYhaS65A
e8qicVL1/TYuAgU0uhLHRqCsVt4qGKGYOvb1vcwB7+lKuAUYac3/uX/FwNGScl5K
zRNyleWRKMIG12m4rgQ1MRGiNp5cQ3zLgg/uVgdfEC8TOvfxCjWWlUOxnyfQMN3E
rNnJHW/S1pG5dXMm1Lil2XVowV0hnqS8eu1m0ddifBscuZAyBZi7vPqkHp3ZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmUidf+GdgOllZxPsP04/2DF5MmMwHwYDVR0j
BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE
RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB
MUVDQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxN2Y3OWIwLWI5ZTMtNGMzZC1h
MTEzLWI2YzZhMThhZjRkMS8wLzMxMzYzMDJlMzIzMjJlMzkzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWWjANBgkqhkiG
9w0BAQsFAAOCAQEAZwC622onFoE/QbuklAvk3hx2l8nFOHtql9gWExWiDxIofTxi
grxU7SsKUcMzXYQpBwZJ9TrEVZjbL0EZPkWYtNreL1gfbwpwZVVHIx59qZqasutx
KNivvga/ibhFRsUti9qXUOw+W+bT86Iw1yV7R++bZZVdV9AGTKqjz4mKhNPFvPGq
sEwvapiVwPhiA3HAHbsGf9NqRWufJuU9jTzgFEJ+CGuaUdvvduJxMeFEcCgMMJF0
f3LAwzVLEGe3J/By2gGupBHLLReVVsljtYWLSEjkdX5IrhCbgjw61KIIPN4AXBIC
P+/0+BY0Mtq91PtresMh6e8dnsJdHkZxlzjitQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 05:35:35 2026 by rpki-client