
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32342d3234203d3e203338373738.roa
File: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=
Subject key identifier: D8:06:91:B1:A9:71:EF:FD:4E:0C:EA:36:24:A3:41:17:09:2C:65:B1
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 71956D7960AB703BF8CB756D7965A375968036EE
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32342d3234203d3e203338373738.roa
Signing time: Mon 02 Jun 2025 02:02:40 +0000
ROA not before: Mon 02 Jun 2025 01:57:40 +0000
ROA not after: Mon 01 Jun 2026 02:02:40 +0000
asID: 38778
IP address blocks: 202.93.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 04:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:95:6d:79:60:ab:70:3b:f8:cb:75:6d:79:65:a3:75:96:80:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Jun 2 01:57:40 2025 GMT
Not After : Jun 1 02:02:40 2026 GMT
Subject: CN=D80691B1A971EFFD4E0CEA3624A34117092C65B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:53:14:39:e4:51:32:70:dc:6c:90:6e:40:
0a:bc:12:e3:82:c3:1e:fe:80:b3:41:f4:8e:06:c3:
53:ae:ea:e8:d1:95:23:8d:24:82:6a:fe:68:e7:28:
97:54:44:c9:cb:f9:c3:52:6d:4d:82:5f:e4:5f:fb:
9d:be:da:27:a7:b0:15:d7:01:e4:15:7e:cd:04:2f:
4a:7d:c8:6d:1b:e1:cf:e3:fe:4c:3b:22:70:bb:c3:
0b:fd:45:c9:c9:5a:cf:20:1d:9c:7e:18:f5:09:09:
3a:b1:5c:bf:f7:9c:3d:dc:f7:a2:f7:fe:94:56:fd:
19:8d:b1:eb:79:94:d8:e2:6f:08:7b:e7:b7:b5:ca:
85:07:c3:e6:dd:af:f7:07:91:76:59:1d:fa:26:86:
70:11:10:be:3a:1d:af:b4:5c:51:51:f1:c8:9b:70:
32:d9:e7:3f:50:cc:5a:c2:78:24:2f:94:3c:3a:dd:
a2:6a:63:5d:52:0e:9c:02:d1:ec:48:b3:9a:d2:f2:
72:41:31:65:ff:0f:de:6a:b9:7b:df:43:00:90:25:
fb:9e:21:af:be:e5:1d:01:b8:3a:7a:28:68:3e:6e:
b9:cd:f8:e9:4f:4b:f4:3e:f8:fe:3f:6e:dc:e3:40:
b3:6d:67:4d:0d:8b:15:52:81:c4:8d:45:16:4e:07:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:91:B1:A9:71:EF:FD:4E:0C:EA:36:24:A3:41:17:09:2C:65:B1
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.240.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f5:b4:7c:50:e8:cf:5a:8c:da:5c:79:cc:33:49:59:7d:c6:
76:3d:c1:d1:78:c4:74:90:fa:e0:5d:16:2d:36:7b:00:47:cb:
c5:71:dd:ac:3e:19:d5:d2:90:93:e0:35:58:43:f0:ae:8d:09:
e0:a6:59:4a:c3:45:50:d8:26:0e:45:10:c3:47:6f:e1:d0:77:
79:cb:55:d6:13:6a:3d:55:82:3d:0d:e4:94:1b:73:ec:3e:79:
75:08:e2:f9:05:56:a0:4f:e7:bc:bd:0e:c6:85:79:a8:28:f4:
07:aa:6e:43:b5:1d:f7:96:f0:bb:a5:b2:30:9f:4b:e3:74:69:
77:7a:a8:6d:5e:03:09:81:d4:7c:51:d3:f9:f6:27:2d:5a:a9:
3f:f6:76:51:20:20:a4:e8:bd:27:68:ba:f6:e3:44:30:da:22:
d5:f2:ae:a1:aa:9d:fd:01:7b:fa:d5:9f:14:db:ce:c8:07:14:
7e:7c:d6:47:a5:85:63:bf:a5:4c:02:89:b8:13:86:d8:2f:ee:
6e:f1:96:96:d7:b1:0d:c6:ce:36:9d:9b:5e:90:4d:74:44:e1:
2e:45:68:63:76:0e:8d:f0:d4:cf:d0:e3:bd:bb:d8:e3:1a:84:
16:9c:ba:5c:63:0c:4b:5e:12:31:55:55:6d:3f:74:88:02:53:
10:19:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:39:21 2025 by rpki-client