
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
File: 32372e3132342e38352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: aoDR6t06bkLGVC/rQfIwcjKcvkAAaVZMuXphMPh7uTU=
Subject key identifier: FB:1B:36:12:A8:20:46:D6:36:FE:35:A9:2B:29:01:52:6B:A6:D2:6A
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 710AC015D0787E7A3CD55D62C8E5BB0A5BD453F7
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
Signing time: Wed 13 Aug 2025 13:00:54 +0000
ROA not before: Wed 13 Aug 2025 12:55:54 +0000
ROA not after: Wed 12 Aug 2026 13:00:54 +0000
asID: 9341
IP address blocks: 27.124.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 19:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0a:c0:15:d0:78:7e:7a:3c:d5:5d:62:c8:e5:bb:0a:5b:d4:53:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Aug 13 12:55:54 2025 GMT
Not After : Aug 12 13:00:54 2026 GMT
Subject: CN=FB1B3612A82046D636FE35A92B2901526BA6D26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:63:4e:56:74:16:3d:63:94:56:18:91:f8:
e9:19:2e:6b:a2:1f:a7:f3:a8:f4:ad:55:34:e8:01:
75:f5:28:cd:84:76:aa:70:b0:e0:c0:b1:00:64:68:
46:27:41:7f:36:88:fb:86:e9:9d:ce:2a:f1:93:f5:
48:2b:5d:eb:97:6e:b4:4d:fc:ef:7f:8f:b9:07:c2:
b6:66:c4:02:55:7f:67:9c:a4:f7:f1:f4:02:b6:4f:
e5:0a:cd:dc:e9:53:f4:a4:77:28:02:c1:42:2a:e1:
83:f2:db:89:f9:a0:3f:e2:7f:21:32:77:5d:4c:50:
7c:ea:7f:24:d5:7f:ad:3e:28:c5:20:41:0a:02:17:
ce:c3:31:1f:19:e0:21:e5:39:95:c8:b1:3c:f8:8b:
5b:43:7c:e9:53:14:2b:d5:9f:e5:17:e6:a9:96:40:
b9:31:e9:94:18:10:3e:47:2d:10:a5:ea:27:a9:f9:
00:1a:9b:b9:77:64:81:4e:e0:69:a2:3e:7f:db:a8:
ca:cb:22:20:3d:c6:87:41:b0:29:bc:d3:87:25:5f:
d0:41:9b:8e:dd:f4:bd:8e:02:1e:a2:e4:c2:f9:7a:
01:56:6e:95:88:28:78:45:7a:ba:84:62:bc:2e:0d:
3c:7e:ff:14:a2:8d:d5:2b:61:66:c3:f1:c0:0d:52:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:36:12:A8:20:46:D6:36:FE:35:A9:2B:29:01:52:6B:A6:D2:6A
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:28:ad:3c:cb:6c:03:2e:48:0c:af:b0:63:5f:be:6a:d6:1f:
eb:93:a8:10:86:1a:15:f5:f7:73:b9:e3:7c:86:1b:59:82:5d:
eb:f6:1c:e0:0d:2d:3b:32:19:af:8f:01:ee:f6:29:75:2e:37:
f2:89:5e:41:51:11:a4:60:ec:3b:18:0e:21:50:a5:09:d5:c5:
37:2a:76:16:0f:60:03:70:6b:5b:2e:56:c9:d1:77:96:19:98:
0c:00:fd:cb:f9:29:09:84:d5:2f:e3:af:c8:e3:c4:dd:0f:6c:
84:d4:68:66:f3:5f:75:30:1a:3f:e1:b3:72:3d:c7:56:f7:8b:
0f:3b:d8:76:f4:f6:b9:ea:e2:74:fa:3b:4b:b4:91:0b:89:24:
8e:e5:df:b2:db:3e:a3:fc:37:a1:db:d9:8c:a0:f5:d5:8a:f8:
2f:01:4d:78:33:37:41:c4:59:13:56:a1:9b:28:2a:af:ba:cc:
e0:da:6a:55:59:7a:96:83:5a:d7:30:fe:51:7c:9a:9e:5a:41:
0b:08:ba:70:13:27:a0:64:3c:70:a6:b4:ad:b5:d8:c1:f7:83:
82:99:93:a4:dc:6e:66:7b:6e:c7:ed:5e:91:6a:e1:c9:59:b0:
d0:81:f1:5f:4f:e9:92:23:70:12:fb:fb:a0:1f:ed:e8:4d:84:
68:0d:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:18:37 2025 by rpki-client