
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa
File: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=
Subject key identifier: EF:EF:76:62:D2:F1:75:E0:77:DC:70:6A:BF:88:1A:A1:A7:E3:CB:15
Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial: 633FB1E11561C6F4C735A49397399DB333455782
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa
Signing time: Tue 10 Jun 2025 03:45:14 +0000
ROA not before: Tue 10 Jun 2025 03:40:14 +0000
ROA not after: Tue 09 Jun 2026 03:45:14 +0000
asID: 63859
IP address blocks: 202.152.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 21:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3f:b1:e1:15:61:c6:f4:c7:35:a4:93:97:39:9d:b3:33:45:57:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Validity
Not Before: Jun 10 03:40:14 2025 GMT
Not After : Jun 9 03:45:14 2026 GMT
Subject: CN=EFEF7662D2F175E077DC706ABF881AA1A7E3CB15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:e1:a5:c2:d2:e3:fe:3b:db:0a:aa:bc:8e:
cd:fd:d5:3f:aa:09:ba:10:60:71:5f:62:1c:0c:80:
50:a7:f6:7c:09:bc:4c:7e:85:a6:f1:62:4a:ea:8d:
62:07:b5:aa:c8:0c:99:69:ca:e0:54:83:ac:58:3a:
2c:05:ae:d2:e0:f8:6d:f6:f9:2c:55:c7:2a:dd:62:
ef:c8:dc:05:29:0b:11:f8:2b:7a:e1:7b:71:ca:41:
ec:1d:93:3c:0c:b7:39:e5:9b:d9:28:67:b5:03:81:
80:e0:4c:b9:77:6d:62:c5:13:42:b9:a6:7a:18:8d:
82:ed:64:2c:a7:e8:dd:12:c9:9c:9c:f8:05:56:b1:
31:44:10:23:9d:9f:3c:b3:e9:c9:30:f0:8c:9e:f1:
07:36:b8:09:4f:1c:3d:28:e8:fe:0c:63:c2:e2:85:
29:58:e3:bf:a9:67:d6:99:b8:37:78:4d:2b:a1:1a:
92:9e:40:55:d3:35:90:1f:83:72:7d:3d:29:94:a4:
e1:46:cc:0b:bb:94:7e:09:63:ec:e4:73:0a:0e:9f:
9f:b7:23:a7:a9:5f:24:85:01:75:65:b0:66:c8:86:
b1:ba:5a:97:00:63:f0:fb:f2:c7:17:0f:3a:66:f4:
b0:af:81:50:ef:4d:85:97:bc:73:7c:98:b8:7a:b6:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:76:62:D2:F1:75:E0:77:DC:70:6A:BF:88:1A:A1:A7:E3:CB:15
X509v3 Authority Key Identifier:
keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:33:76:bc:51:bc:86:aa:60:e8:a2:24:91:64:f0:f1:1b:1e:
b5:be:d3:9c:51:b3:67:54:3d:3c:66:63:08:4c:08:e0:35:59:
f8:fa:ba:35:03:02:dd:13:09:0d:06:76:59:29:dc:bc:fc:c1:
08:b8:73:94:d0:e5:83:19:39:d2:22:ee:bf:d4:11:d9:7c:54:
d5:fc:76:4f:82:da:21:85:aa:cc:77:7c:e8:5e:d4:d6:21:9f:
ef:4e:8f:6d:54:92:c1:e2:2f:42:9f:f6:2c:94:61:a9:3a:5b:
fb:3f:23:0f:86:f6:7f:87:f6:95:03:fc:3c:eb:ca:ca:a3:a1:
ff:f1:84:e1:13:94:6f:a3:57:6b:d5:64:be:e2:9c:c1:7f:8c:
cc:3a:09:a0:f7:ca:85:6f:c2:98:64:67:e3:17:6e:df:cd:62:
a8:48:4f:c5:79:b4:8f:0d:64:13:bf:69:ed:ee:88:67:fc:7b:
9b:39:dc:05:c2:f9:a5:0f:cf:9e:56:6b:9c:5d:6e:66:50:52:
6e:ff:67:51:27:6a:cb:60:57:09:52:81:f7:be:e6:0e:ab:05:
32:35:b2:ed:85:9b:a2:b1:1a:02:b5:ea:ee:7f:19:4c:f6:fa:
1d:e0:aa:9a:38:70:34:0b:0d:ca:a8:ca:68:f5:85:9c:c4:47:
bb:2a:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:00 2025 by rpki-client