
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
File: 3230322e34372e36392e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier: G15emKlFtrQ/Qz174DFzSajHhjAQlZRYNTmG97OYqeg=
Subject key identifier: 08:F4:0E:53:06:94:10:6A:9A:B4:4D:92:6F:D0:F5:E8:21:B0:5F:D9
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 30C5443B348D9C91BFF8193A8B231753822AE4F5
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
Signing time: Thu 24 Jul 2025 07:14:22 +0000
ROA not before: Thu 24 Jul 2025 07:09:22 +0000
ROA not after: Thu 23 Jul 2026 07:14:22 +0000
asID: 58824
IP address blocks: 202.47.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 02:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c5:44:3b:34:8d:9c:91:bf:f8:19:3a:8b:23:17:53:82:2a:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Jul 24 07:09:22 2025 GMT
Not After : Jul 23 07:14:22 2026 GMT
Subject: CN=08F40E530694106A9AB44D926FD0F5E821B05FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:16:ba:18:e1:31:07:f1:02:66:6f:08:40:
5b:e1:0e:fc:37:4c:c1:99:1f:f2:e2:c5:0c:02:3d:
10:e2:6b:c2:f4:9d:93:57:a5:d1:21:69:eb:cb:96:
16:1b:92:3e:e4:32:cb:73:e0:b2:0c:c8:5a:0d:f4:
ba:44:47:e0:db:1a:c2:1d:9a:1c:67:74:1f:60:c5:
ee:1f:a3:c8:ad:61:1a:fe:8b:49:3f:bf:e7:e0:62:
8a:4c:69:d0:b3:d0:5b:98:0c:ee:dd:3a:66:be:eb:
fd:e3:6c:32:33:ea:72:dd:3a:6a:68:1a:05:31:21:
f8:81:96:b9:c5:72:b2:55:74:ff:ca:99:15:1a:54:
a6:72:3e:d0:2c:38:08:a9:8d:d4:0a:4e:45:51:27:
db:fa:86:87:d5:15:80:fc:93:c6:55:33:6a:1d:53:
f4:7d:6d:36:91:93:a0:e7:c7:f6:54:aa:c6:bc:d5:
ed:32:69:dd:41:b1:b4:6a:1d:be:5d:5e:47:0e:01:
2b:20:92:55:59:e4:be:96:cf:94:39:ff:ab:78:9f:
4c:40:6a:ec:35:2f:02:98:f9:8a:b1:cb:37:0b:c7:
91:d2:8e:39:66:09:de:5f:27:b3:a2:8b:9e:81:0e:
de:fe:af:18:45:be:ec:7c:26:03:30:be:40:d7:71:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:0E:53:06:94:10:6A:9A:B4:4D:92:6F:D0:F5:E8:21:B0:5F:D9
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:50:bc:86:71:d9:d6:6b:c4:90:fe:f1:49:bc:d6:11:01:b8:
fd:a3:9b:9c:d8:ae:b4:11:f7:03:cc:c6:33:07:7e:6e:4c:c6:
97:ca:95:43:34:04:dd:fb:eb:4b:13:e8:3d:ac:8a:e1:cd:c0:
bf:71:8c:d3:a5:26:b8:b9:9e:3e:ef:0c:31:65:ba:7c:fc:e7:
54:1d:71:9a:3f:06:4f:07:09:a5:73:4d:e5:fd:50:b4:f2:79:
4c:92:eb:68:5f:9f:83:62:7d:00:df:24:11:2a:90:9c:9c:5c:
88:a6:fb:98:51:61:7f:76:b9:cc:89:4b:0a:95:24:90:bd:96:
67:ba:49:ae:31:e5:ba:a7:a1:df:39:f2:00:0d:ab:33:67:f2:
3f:86:41:ed:05:b9:48:8c:77:e9:7d:5d:ba:01:ce:66:22:2d:
bf:b7:9d:66:63:e8:12:ff:9f:92:a0:46:94:f2:e0:9f:a2:97:
24:0d:e7:2e:89:c2:e9:f0:47:84:06:38:45:9a:4a:a7:c3:04:
de:6e:22:62:0e:e9:db:ba:4c:8c:a7:30:1e:fc:58:3a:71:65:
03:90:ef:43:8f:7d:96:fa:14:65:3b:30:0d:58:6b:b1:ac:20:
b9:52:9e:48:ef:db:a0:bf:44:5f:dc:7e:b2:e4:e9:5f:bf:fd:
0e:1c:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:44:21 2025 by rpki-client