Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32332d3233203d3e203435333036.roa
File: 3230322e39312e33302e302f32332d3233203d3e203435333036.roa (raw, json)
Hash identifier: S4VjJzUTHACCCOjZ/BfmC0eI6K01Te/G4hTr22Yp9oE=
Subject key identifier: D3:33:37:41:F9:0E:F7:6F:E4:CB:26:F9:7E:65:87:3E:51:53:42:51
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 64010845E8DF02F9338C7A1F8661703B1646E37D
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32332d3233203d3e203435333036.roa
Signing time: Thu 16 Oct 2025 10:46:05 +0000
ROA not before: Thu 16 Oct 2025 10:41:05 +0000
ROA not after: Thu 15 Oct 2026 10:46:05 +0000
asID: 45306
IP address blocks: 202.91.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 20 Oct 2025 14:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:01:08:45:e8:df:02:f9:33:8c:7a:1f:86:61:70:3b:16:46:e3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Oct 16 10:41:05 2025 GMT
Not After : Oct 15 10:46:05 2026 GMT
Subject: CN=D3333741F90EF76FE4CB26F97E65873E51534251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:24:85:9f:c0:cf:d5:43:74:20:68:2c:1b:
01:b9:94:35:22:c7:52:6f:5b:a3:73:d6:78:08:3a:
90:c3:98:37:9b:13:6b:42:05:df:30:f9:c2:0f:0b:
53:e4:0c:f1:ed:9e:33:03:98:17:01:91:60:53:e3:
f6:a5:ee:a0:ef:38:79:4d:5d:0b:a8:72:1b:80:30:
f2:15:7c:ee:4f:f9:aa:e7:c8:6b:14:03:e1:76:49:
f1:cb:dd:d7:2e:5a:14:2b:7c:7d:8c:0f:1c:95:4a:
04:7f:85:16:f7:2e:66:10:4b:72:15:77:c0:c1:10:
8d:71:b5:36:4c:88:86:ff:4e:97:11:d8:9e:ad:55:
92:33:a6:f5:d7:21:60:db:f0:c7:5b:d9:56:7d:04:
ac:34:27:bd:70:89:b6:0e:1f:5c:69:3e:40:10:5e:
e7:3c:5d:6d:6e:d7:10:6b:eb:a0:72:08:5e:17:d9:
03:ea:5d:19:a8:24:16:0b:5a:46:4a:13:4a:9d:f8:
09:27:4e:05:da:59:10:9c:49:97:32:bf:ce:56:69:
bb:32:cc:20:09:f3:2e:0d:a2:9c:cc:57:e6:e4:4f:
0e:7c:a1:c5:89:8f:76:80:1b:5e:36:65:1b:b4:ae:
5d:5b:0a:e2:97:bb:6a:d6:32:07:e5:9d:7f:69:76:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:37:41:F9:0E:F7:6F:E4:CB:26:F9:7E:65:87:3E:51:53:42:51
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32332d3233203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.30.0/23
Signature Algorithm: sha256WithRSAEncryption
48:40:9e:d0:a6:09:71:65:79:c3:43:69:50:4d:ee:d3:7f:83:
ab:e2:08:55:c5:2e:6c:20:9d:86:19:7c:4a:f4:7a:ab:91:dc:
33:04:fc:d0:d6:2c:14:65:a9:2a:c1:f1:51:12:df:a7:79:a9:
a9:11:bb:96:34:20:ea:39:69:a8:29:5c:25:68:72:8b:5f:fb:
dc:b4:55:f3:5d:06:21:ee:f7:bd:54:7a:0d:45:8a:83:87:18:
4c:74:b6:f9:53:b0:24:8c:66:6b:b3:b4:73:8d:23:b3:4b:c5:
55:14:ed:d5:41:1c:d2:c0:c0:6f:4a:ad:68:c9:40:ef:7d:0a:
a6:af:94:b3:f7:03:a2:2b:72:f0:e2:71:d1:9a:8c:d1:d7:f4:
4a:cc:67:6c:a4:18:fa:11:78:fc:15:f4:ac:77:96:39:ff:16:
b7:c0:9c:a8:a7:93:2a:1e:7a:a9:ae:50:d5:85:a9:3f:3e:2f:
57:3d:8d:42:ae:4d:c5:a3:63:29:b7:1d:47:66:8b:b4:d5:7f:
e4:a2:bd:e7:30:23:6c:bf:5d:87:fa:14:87:67:d9:dc:09:1f:
35:2c:5a:f0:b8:65:36:b2:9b:ce:21:f2:85:9b:e4:66:b0:27:
fe:9f:61:f8:95:44:05:b3:5e:c6:64:bb:06:f0:76:3d:c6:2a:
53:59:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:24 2025 by rpki-client