
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e33322e302f32332d3234203d3e20313337333633.roa
File: 3230322e31302e33322e302f32332d3234203d3e20313337333633.roa (raw, json)
Hash identifier: 0rOdUlH6gv3+zZP8vGxs8CTSWUCRCHhK1DMWGhKDqBk=
Subject key identifier: DA:7E:94:A2:D7:74:AE:79:30:FC:49:2F:8F:57:EC:DF:37:A9:B1:FF
Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial: 1935D71AD51C2C173F581AC637D49885671ACD1F
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e33322e302f32332d3234203d3e20313337333633.roa
Signing time: Mon 04 Aug 2025 04:02:04 +0000
ROA not before: Mon 04 Aug 2025 03:57:04 +0000
ROA not after: Mon 03 Aug 2026 04:02:04 +0000
asID: 137363
IP address blocks: 202.10.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 15:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:35:d7:1a:d5:1c:2c:17:3f:58:1a:c6:37:d4:98:85:67:1a:cd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Validity
Not Before: Aug 4 03:57:04 2025 GMT
Not After : Aug 3 04:02:04 2026 GMT
Subject: CN=DA7E94A2D774AE7930FC492F8F57ECDF37A9B1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:8f:dd:d4:2c:7a:0d:95:be:8d:32:d7:99:
ce:66:13:a0:b8:7a:48:01:90:4e:7c:ea:21:5b:f8:
13:ee:69:c0:8e:7f:e4:c4:9a:fa:19:f2:d1:cf:38:
2e:a2:ba:8b:80:f9:fe:14:be:18:fd:15:55:7e:31:
f2:31:ec:1a:1e:85:a5:92:32:4c:a8:d4:41:bd:dc:
ee:c5:e1:66:bf:7e:07:8a:da:ec:2b:cf:4b:53:16:
e6:c3:42:29:cd:ec:c7:49:b1:cc:39:75:7d:15:83:
a4:e5:e7:25:0a:8a:ee:44:9d:3c:af:66:73:e0:64:
8f:9e:11:0b:ed:a7:aa:e6:3d:e6:e8:c9:f1:94:05:
c4:ec:26:41:e1:0b:b0:e2:4d:b4:64:d5:30:fc:6f:
b8:19:b0:4e:ca:ca:24:c2:a6:59:95:c6:42:eb:59:
e2:00:cf:e9:b2:79:30:9f:08:b2:25:29:68:b2:c7:
2a:3b:81:7b:6c:34:0a:02:fd:8c:52:81:8f:19:0e:
51:cf:f1:5a:b1:66:b0:97:14:c7:f8:33:21:02:60:
5b:1a:17:63:c0:99:2c:d5:56:2f:d2:e1:fb:8f:f8:
94:62:4c:bc:aa:04:99:6a:80:1b:27:9a:c9:cc:bf:
72:46:15:f6:76:3d:41:fd:8b:8c:cc:a5:4f:dd:6d:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:94:A2:D7:74:AE:79:30:FC:49:2F:8F:57:EC:DF:37:A9:B1:FF
X509v3 Authority Key Identifier:
keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e33322e302f32332d3234203d3e20313337333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.32.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:e8:2d:05:31:08:c9:b3:5c:9b:67:e5:11:83:6f:cb:54:bf:
d2:ab:38:77:4c:67:7b:34:62:77:fd:4d:1a:c6:7e:d1:a7:88:
a9:b2:16:7d:80:fe:c8:5f:13:81:aa:2c:a6:ca:f9:09:30:46:
6e:5d:da:ff:d3:73:15:a4:16:6a:80:8c:9c:a1:69:8d:5f:90:
3a:c1:6d:7b:99:6f:08:26:5c:27:01:f6:26:b9:de:ee:74:94:
4b:51:81:89:38:c3:8a:94:e5:40:d4:0b:97:37:fb:b9:05:0f:
39:99:b0:e7:a7:45:10:d5:8e:c0:08:f8:fe:ba:d6:da:1c:f9:
3b:84:53:26:7a:4c:a3:74:23:ac:43:58:67:30:31:c2:35:d0:
c3:bd:70:6b:5d:8e:22:ba:52:41:8d:d9:65:49:07:71:88:a2:
36:ad:ae:c5:87:52:66:9e:75:c0:99:2f:08:b3:93:6b:5e:c9:
27:b5:33:7d:2d:54:ef:4f:9a:45:ac:ac:a0:45:17:b2:2f:ac:
21:af:e5:2f:4e:86:d1:94:b4:ba:a8:7d:0b:54:02:0f:67:7c:
dc:93:0c:2a:1d:f2:ef:04:8f:1c:2e:09:06:6e:b5:1f:ed:b2:
07:ad:51:c1:32:dc:4f:a2:13:f9:16:e0:e9:0b:1b:87:8a:ed:
ee:d9:9e:bb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGTXXGtUcLBc/WBrGN9SYhWcazR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy
NDk5M0NBMzAeFw0yNTA4MDQwMzU3MDRaFw0yNjA4MDMwNDAyMDRaMDMxMTAvBgNV
BAMTKERBN0U5NEEyRDc3NEFFNzkzMEZDNDkyRjhGNTdFQ0RGMzdBOUIxRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5E4/d1Cx6DZW+jTLXmc5mE6C4
ekgBkE586iFb+BPuacCOf+TEmvoZ8tHPOC6iuouA+f4Uvhj9FVV+MfIx7BoehaWS
Mkyo1EG93O7F4Wa/fgeK2uwrz0tTFubDQinN7MdJscw5dX0Vg6Tl5yUKiu5EnTyv
ZnPgZI+eEQvtp6rmPeboyfGUBcTsJkHhC7DiTbRk1TD8b7gZsE7KyiTCplmVxkLr
WeIAz+myeTCfCLIlKWiyxyo7gXtsNAoC/YxSgY8ZDlHP8VqxZrCXFMf4MyECYFsa
F2PAmSzVVi/S4fuP+JRiTLyqBJlqgBsnmsnMv3JGFfZ2PUH9i4zMpU/dbZhFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2n6Uotd0rnkw/Ekvj1fs3zepsf8wHwYDVR0j
BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2
RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5
M0NBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04
MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzAzMjJlMzEzMDJlMzMzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcoKIDANBgkqhkiG
9w0BAQsFAAOCAQEAxugtBTEIybNcm2flEYNvy1S/0qs4d0xnezRid/1NGsZ+0aeI
qbIWfYD+yF8Tgaospsr5CTBGbl3a/9NzFaQWaoCMnKFpjV+QOsFte5lvCCZcJwH2
Jrne7nSUS1GBiTjDipTlQNQLlzf7uQUPOZmw56dFENWOwAj4/rrW2hz5O4RTJnpM
o3QjrENYZzAxwjXQw71wa12OIrpSQY3ZZUkHcYiiNq2uxYdSZp51wJkvCLOTa17J
J7UzfS1U70+aRaysoEUXsi+sIa/lL06G0ZS0uqh9C1QCD2d83JMMKh3y7wSPHC4J
Bm61H+2yB61RwTLcT6IT+Rbg6Qsbh4rt7tmeuw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 13:25:48 2025 by rpki-client