
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: m+bzUVO8lcZe1R3l6vSAwluc+u3gULM7PctKZnFRQ8w=
Subject key identifier: 4B:DB:90:77:72:6C:20:94:27:9A:4B:07:2C:D6:52:38:C6:DE:3C:E2
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 671B0AA4A4137B3DC4495F32B4F645E4EFB50C79
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:02 +0000
ROA not before: Sun 23 Mar 2025 05:55:02 +0000
ROA not after: Sun 22 Mar 2026 06:00:02 +0000
asID: 9341
IP address blocks: 119.252.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 19:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1b:0a:a4:a4:13:7b:3d:c4:49:5f:32:b4:f6:45:e4:ef:b5:0c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:02 2025 GMT
Not After : Mar 22 06:00:02 2026 GMT
Subject: CN=4BDB9077726C2094279A4B072CD65238C6DE3CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:f1:e8:a4:4f:e5:db:60:93:b6:8c:41:77:
1c:4b:7d:0d:9e:a8:bd:08:72:7b:ee:85:b8:ef:4c:
c6:b6:31:57:eb:e6:47:95:ac:38:ff:c0:e8:d4:08:
b8:77:11:7e:0e:c0:bb:9c:d7:bf:87:53:88:6b:f1:
35:c6:b2:83:80:66:fc:d7:a4:e8:58:50:5c:86:38:
8a:95:c8:2e:33:40:38:43:ff:65:7e:1d:da:f5:51:
1a:08:00:57:69:1f:7b:ef:d6:d4:57:0a:9e:77:93:
f3:eb:50:fe:7e:c6:0e:cd:f9:a7:8c:9a:69:a3:d5:
d5:c5:bd:2d:8c:4c:6d:72:68:b3:ed:c8:aa:14:6f:
99:2f:19:0a:ef:64:4f:0b:31:fd:63:6f:81:7c:9c:
40:b0:b2:2b:29:82:ab:0c:78:13:29:c1:92:57:b0:
79:4e:ba:aa:98:c4:08:ef:77:e3:dc:aa:b4:99:86:
8f:64:92:79:8f:a4:f8:17:46:99:d3:02:08:65:5b:
c8:29:e9:a6:fc:fe:62:44:34:d9:f7:6f:0a:14:47:
79:fa:bb:c7:f2:5f:de:ff:9b:38:25:d5:f0:08:6b:
bf:0d:cf:a0:5b:36:db:d2:de:0e:88:83:5c:84:4e:
bf:d2:7f:41:1f:07:fb:14:5c:0b:73:c2:b0:86:5f:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:90:77:72:6C:20:94:27:9A:4B:07:2C:D6:52:38:C6:DE:3C:E2
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.167.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a6:39:18:87:73:25:b7:e1:51:3b:28:c4:03:5a:32:f8:2f:
3e:ca:39:52:2f:13:b4:63:b0:e6:59:8a:67:a6:19:dc:8e:7f:
24:dd:be:b6:4a:1a:df:f3:dc:7c:f3:15:cf:6f:f5:c9:31:2a:
da:a6:07:5e:4d:b2:e1:97:9e:73:de:5e:60:45:68:4c:4d:ca:
98:4f:1f:a5:b8:57:04:94:e1:ed:b4:90:11:8b:7c:f9:2b:43:
56:ce:c4:ac:13:6b:85:b9:f5:f0:f7:ea:ba:0c:8e:b7:84:40:
b9:ff:b2:c0:73:ae:b4:15:12:90:3b:50:ef:72:49:af:51:d4:
1f:b0:a7:8c:64:25:6a:bc:91:2c:81:12:b9:5d:ad:8a:1f:ae:
f8:95:5c:29:84:3f:5b:bb:90:22:df:17:2f:f7:00:75:96:fa:
fb:d7:4e:f4:25:1d:9d:bf:cb:dd:40:12:8e:8d:c9:7c:41:68:
b6:0c:fa:b7:0f:52:6e:ab:a3:31:ec:4a:47:3e:23:6a:06:4a:
58:ba:3c:7d:cc:5e:15:75:f6:26:0c:ff:cd:2f:aa:08:98:2d:
3c:e2:12:67:29:1f:44:39:9e:05:1f:08:45:bf:36:63:db:53:
81:bd:65:9c:81:34:fb:67:83:d8:d8:35:dc:cf:c8:93:b1:4b:
a9:89:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:18:38 2025 by rpki-client