
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
File: 3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier: O7s9vGDlw/rPxlL45ZzEcpBml0IdvbvciPZWwTb3YDg=
Subject key identifier: C1:44:F7:8D:BE:E4:63:55:D9:32:C5:3A:BD:DB:6F:69:A6:1F:ED:49
Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial: 15EAB4D815BDE074B9B69E7009B341A878274062
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
Signing time: Mon 02 Jun 2025 05:39:09 +0000
ROA not before: Mon 02 Jun 2025 05:34:09 +0000
ROA not after: Mon 01 Jun 2026 05:39:09 +0000
asID: 45147
IP address blocks: 119.110.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 06:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ea:b4:d8:15:bd:e0:74:b9:b6:9e:70:09:b3:41:a8:78:27:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Validity
Not Before: Jun 2 05:34:09 2025 GMT
Not After : Jun 1 05:39:09 2026 GMT
Subject: CN=C144F78DBEE46355D932C53ABDDB6F69A61FED49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:c0:3b:1b:05:1a:c4:e7:d3:b9:e8:d0:77:
4b:f9:3f:02:fa:dc:ad:cf:95:81:e1:06:48:1f:16:
1a:5c:10:66:26:c5:86:f4:98:20:03:ae:29:f2:3d:
a6:48:0a:32:e1:2b:ac:dc:0f:e2:a8:18:0f:e0:02:
20:05:1f:aa:c0:26:b9:b7:1a:10:33:69:d0:54:d4:
20:91:8b:b2:fb:7d:c2:12:b9:04:01:3f:5d:3c:ad:
7d:92:4a:e6:60:b3:d7:50:c7:99:ef:da:3c:13:10:
ac:51:5e:a0:35:af:05:c5:cb:a5:e7:17:82:e9:32:
cd:60:9e:ee:91:88:e6:1c:29:50:20:9d:57:cc:b1:
5d:9b:02:d9:41:0b:48:58:d1:d7:4d:2b:38:8e:93:
7a:1a:c9:a0:7a:9f:0d:30:87:72:58:84:88:87:27:
ab:58:01:9a:23:51:9e:c6:96:59:2d:e3:e3:f4:b7:
9a:2e:2f:07:53:30:a3:37:b0:bb:7c:43:9c:ec:76:
80:0e:76:df:fe:ab:c4:a3:ff:a1:96:bd:be:8d:6e:
8f:55:dc:6d:97:07:d0:da:3a:a5:87:75:d9:3b:75:
0e:2a:20:9b:47:6c:93:24:2a:0c:44:1d:db:e4:8e:
a8:88:40:28:12:34:39:c0:f2:92:bb:e9:42:7a:0e:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:F7:8D:BE:E4:63:55:D9:32:C5:3A:BD:DB:6F:69:A6:1F:ED:49
X509v3 Authority Key Identifier:
keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:da:04:73:dd:fb:2d:99:16:e9:29:1a:67:a4:85:24:9d:a8:
95:1c:d9:c0:89:c4:57:67:db:76:e0:3e:ee:d6:4f:db:65:d9:
a4:8b:6a:c2:8c:0e:ef:89:3d:79:d2:06:49:81:65:f8:38:32:
3f:d3:4f:04:47:34:3d:90:82:bf:16:10:80:d6:d9:4b:c5:4e:
07:65:a8:81:0f:b3:17:82:40:5b:44:5f:68:f3:60:ae:32:80:
aa:86:2a:5b:0d:e5:a4:91:73:23:f2:45:d2:88:53:68:3f:ce:
6a:6b:45:0d:ad:fd:76:a1:d3:a4:12:6e:0a:51:14:8f:42:18:
77:c2:db:b3:b6:0c:6d:4d:a0:63:89:80:b2:1f:56:d8:c5:d3:
8e:a3:9a:40:58:c5:96:b6:df:51:b5:4d:06:b1:c3:9f:3d:67:
47:14:2a:75:bc:0a:a5:95:0a:71:13:4b:96:bc:91:3f:ce:57:
a4:b6:ed:c0:96:a3:a3:04:13:4c:5d:9a:1c:aa:d7:2d:7f:94:
22:0d:fe:95:54:ba:71:4e:cd:fc:11:49:f8:d0:12:96:73:0f:
e1:0c:3b:66:1c:b4:49:a3:87:65:f0:b9:68:7c:83:8c:1f:e7:
b8:ee:ab:62:bf:2c:f3:75:df:9e:c8:86:e0:e9:59:9b:0b:89:
77:9a:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:56:18 2025 by rpki-client