Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203435333036.roa
File: 3230322e39312e33302e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: iVDcw4VWeIm+2P88WlNlsUnSdlz4j+TUs0HnjdSVZLM=
Subject key identifier: 65:61:97:27:E4:20:1D:6F:1D:11:0E:7C:C7:8E:E4:B6:B0:AB:79:37
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 3877572644946116B974F4B096FA5280E7D6538D
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203435333036.roa
Signing time: Thu 16 Oct 2025 10:46:37 +0000
ROA not before: Thu 16 Oct 2025 10:41:37 +0000
ROA not after: Thu 15 Oct 2026 10:46:37 +0000
asID: 45306
IP address blocks: 202.91.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Oct 2025 14:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:77:57:26:44:94:61:16:b9:74:f4:b0:96:fa:52:80:e7:d6:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Oct 16 10:41:37 2025 GMT
Not After : Oct 15 10:46:37 2026 GMT
Subject: CN=65619727E4201D6F1D110E7CC78EE4B6B0AB7937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:48:31:1b:c0:9d:be:96:58:ec:b9:b3:81:
2c:0c:b9:2e:7b:0b:41:aa:f7:0a:da:0c:7c:9e:01:
ee:90:74:e5:11:3b:ae:6e:7e:78:8d:db:66:fa:f8:
c9:ac:73:55:7c:5e:43:f8:e2:ae:3d:b7:b3:4f:8a:
51:69:30:c7:8e:e3:35:b9:61:5a:46:86:ca:d7:3d:
5b:a2:38:95:f2:6c:b3:4c:10:17:04:62:b3:3c:3b:
6a:f9:a4:5f:d1:b4:56:6d:3a:cb:23:96:13:9e:6a:
0a:69:c1:7c:59:24:3b:ee:45:14:34:a4:68:7b:06:
34:13:0a:fe:4e:ba:7b:08:b7:26:75:a7:db:09:41:
52:2b:ed:b2:cd:2f:53:9c:33:1c:3a:56:e9:99:26:
42:e2:51:71:08:16:f3:72:bd:36:ef:f2:4f:9a:d1:
f5:8b:8b:91:82:60:0d:6e:ce:ca:12:58:0a:45:0b:
15:ca:50:92:53:de:8f:aa:dc:46:ef:5d:69:81:d0:
73:e4:07:ea:96:e8:c4:7a:3c:bb:a0:96:b3:ff:74:
d0:45:f5:b5:75:b2:43:3e:d1:ea:e9:98:a6:ee:86:
e7:23:db:b0:59:64:60:bf:d8:71:5f:f7:39:b8:8d:
d9:d2:c2:cc:da:ce:50:d4:7e:77:ce:42:d1:5d:18:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:97:27:E4:20:1D:6F:1D:11:0E:7C:C7:8E:E4:B6:B0:AB:79:37
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b2:db:a1:8a:f3:ea:36:55:8c:74:59:57:e8:9f:98:98:66:
3e:84:f1:bd:21:e9:d5:5c:30:2e:4f:d8:39:ac:13:92:1e:21:
e2:87:1d:93:2c:2c:14:25:0b:19:04:c5:6b:88:2e:c7:be:97:
60:a6:14:8a:be:cb:9d:42:97:69:04:f8:5d:a9:ea:a5:80:02:
b6:a8:41:0b:70:72:7c:e7:08:8a:53:ae:88:8b:35:ca:01:ab:
6b:2c:1a:6c:51:61:6d:82:1a:80:54:dc:be:4a:fc:7b:81:2b:
2f:cc:1b:2a:94:87:6e:03:85:c4:93:78:51:e1:a9:ac:b2:ff:
9b:5a:d0:28:b9:a9:68:c8:9b:9c:50:b0:38:0f:db:b9:a6:fc:
7f:0b:c9:c4:a9:a4:1c:86:1c:5a:fe:6d:7a:fc:2e:25:86:37:
ae:9f:27:c3:2e:38:ef:36:6f:36:96:74:82:bc:13:fb:fd:1b:
77:70:1a:3c:8c:8b:91:56:3b:90:26:65:32:e7:55:f9:da:70:
c8:61:3a:8b:35:4a:29:7a:f4:14:6b:88:07:02:0e:0b:86:53:
a1:96:28:1d:01:d8:8f:3d:54:b0:5b:c9:70:0b:90:89:32:13:
c5:74:83:00:ae:43:57:24:5c:6c:6d:07:13:bf:db:74:a8:75:
4f:0e:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:00 2025 by rpki-client