
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
File: 3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier: YgWDO7bmheUToc8ihmevA/YajjzS29F24UHn4Xpm8eo=
Subject key identifier: 81:AA:81:2E:95:19:44:B6:A6:54:67:55:B5:78:93:7F:75:14:C8:AD
Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial: 63179CD1B403DE8DEB48AA7BBC11EB8F4A27BE62
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
Signing time: Mon 02 Jun 2025 01:03:20 +0000
ROA not before: Mon 02 Jun 2025 00:58:20 +0000
ROA not after: Mon 01 Jun 2026 01:03:20 +0000
asID: 4800
IP address blocks: 123.231.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Nov 2025 11:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:17:9c:d1:b4:03:de:8d:eb:48:aa:7b:bc:11:eb:8f:4a:27:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Validity
Not Before: Jun 2 00:58:20 2025 GMT
Not After : Jun 1 01:03:20 2026 GMT
Subject: CN=81AA812E951944B6A6546755B578937F7514C8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:f6:61:1f:b2:ba:82:5f:b3:55:1b:06:31:
67:db:83:fa:22:c3:24:e9:46:42:dd:80:4d:37:f0:
b2:36:86:7a:37:f2:eb:80:9a:e1:e7:56:93:ec:e1:
d7:4c:b8:b9:8d:f1:79:cf:3f:6c:ed:84:4d:25:01:
e5:f7:a3:90:1b:14:e6:05:95:52:65:30:5d:8c:db:
5f:db:62:9e:e7:8f:c7:c9:c9:3b:c4:f7:ed:3c:15:
c0:f6:54:04:e5:60:b1:14:ea:52:6a:a3:3a:f8:24:
12:0b:2a:0b:bd:c7:76:5f:eb:15:c1:89:97:13:f6:
83:1f:61:af:f2:b7:c1:bc:50:8f:1b:0e:51:d3:19:
46:47:fd:5e:c0:b6:f2:1c:db:03:2e:1a:2a:e7:e3:
56:a9:fc:14:62:cf:b0:5a:fd:8e:77:bb:f2:91:c6:
c7:c8:cd:ed:a4:80:8a:06:96:0f:f8:8c:e9:83:d0:
65:ee:a6:ab:e8:1e:0d:21:a3:7e:fd:62:d8:9a:20:
de:bd:f0:93:44:0b:8c:d2:74:28:c9:38:2a:e5:2b:
75:00:90:11:b3:88:9a:5b:b5:e7:a9:e9:71:55:df:
0e:37:a5:a7:e8:74:5b:ef:79:e1:17:f6:e1:a2:7b:
5a:43:b1:28:9c:7c:c0:22:0d:0e:b3:c9:2c:a9:6e:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:81:2E:95:19:44:B6:A6:54:67:55:B5:78:93:7F:75:14:C8:AD
X509v3 Authority Key Identifier:
keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:fc:a2:2e:eb:42:48:ff:4d:37:ab:a8:41:f5:8e:f2:49:9d:
9b:16:b7:76:cb:08:be:1f:49:53:50:d0:d0:92:0c:f3:c9:2e:
32:3c:44:e9:f2:56:65:1b:76:bd:52:25:ae:7e:2a:f7:e8:03:
e3:de:28:75:31:33:14:65:25:ac:7a:82:bb:e2:49:2e:e6:94:
22:b9:6c:39:dd:c8:58:4c:ef:f8:2c:f9:cd:7a:0a:06:6b:84:
98:0f:6b:d2:f8:65:aa:bb:99:78:cf:fb:65:88:36:3f:6a:70:
4d:c9:01:46:b3:8b:c2:9a:40:08:f7:3b:10:ba:eb:95:f6:d6:
3b:0d:c7:91:54:01:51:5e:c7:05:5f:37:7e:7d:f0:23:4e:89:
6b:96:db:9b:8b:a5:83:6a:04:79:19:a0:a8:06:99:43:51:13:
84:da:d9:b2:db:51:69:e4:af:60:7e:00:42:0b:05:b0:fb:26:
19:0d:cc:a2:03:06:30:40:fb:13:8d:69:0a:41:90:2a:fd:95:
ee:c5:10:9a:e9:4f:f7:a4:a2:45:29:c8:31:5f:23:70:57:0d:
dd:65:8a:86:02:ed:32:f7:fb:fc:b9:03:01:da:95:50:20:c0:
89:e5:69:0f:18:cb:3f:4c:d3:9e:57:93:a0:cd:4a:66:ae:20:
c4:66:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 16:54:29 2025 by rpki-client