
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32342d3234203d3e203234353235.roa
File: 3230332e3135332e32342e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: 2t/tR4FwnY9mtcgV6zTc0+m7RjqW5ATBvAg5ZlC7aRQ=
Subject key identifier: 3B:FE:11:5A:61:51:02:90:DA:80:42:F4:6D:31:CE:87:38:72:45:05
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 69A03BED30DFB36DA046190DA80FF6AF65A12CCC
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32342d3234203d3e203234353235.roa
Signing time: Sat 03 May 2025 09:00:02 +0000
ROA not before: Sat 03 May 2025 08:55:02 +0000
ROA not after: Sat 02 May 2026 09:00:02 +0000
asID: 24525
IP address blocks: 203.153.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 06:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a0:3b:ed:30:df:b3:6d:a0:46:19:0d:a8:0f:f6:af:65:a1:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 3 08:55:02 2025 GMT
Not After : May 2 09:00:02 2026 GMT
Subject: CN=3BFE115A61510290DA8042F46D31CE8738724505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:a9:e6:14:c2:a5:98:18:bf:a2:3e:f0:45:
bf:59:70:a5:9f:8b:d7:8c:fb:6a:b4:bc:b8:c1:2b:
df:ff:68:9e:e3:78:92:4a:3a:28:ae:03:26:6d:7f:
e1:3f:fa:f2:cb:5d:7e:de:4c:2c:95:da:16:27:5f:
50:52:3d:e1:c2:eb:2a:aa:eb:24:4a:c7:77:41:15:
8e:2e:28:7d:eb:82:bd:eb:05:e1:39:b2:97:7b:d4:
0d:a0:07:fa:8c:68:2e:ad:7d:76:81:c2:86:25:01:
eb:6e:63:1e:27:ed:c7:51:b4:2a:92:e0:3d:57:ee:
0c:a6:5b:05:fb:b5:ea:09:c1:aa:3e:fd:5c:82:35:
d9:b5:a5:e0:1b:55:0e:e0:1b:06:0d:c4:ab:0a:db:
a9:6e:06:5e:0e:ad:a4:0c:37:d3:ba:9c:08:a4:1d:
61:fa:f6:d7:8e:af:91:0e:cc:b9:b9:fa:2d:7d:69:
9f:08:8a:68:de:83:7f:4c:5e:a3:ce:06:8d:0f:93:
6a:10:ae:b9:07:e7:63:45:5d:d8:e5:0d:83:5a:2b:
09:13:2a:5e:05:2c:60:b6:8a:b4:07:db:51:b5:6a:
6f:f9:c0:7b:a9:15:10:20:c5:c4:0c:39:0e:16:ae:
de:a8:13:ea:1a:64:78:d6:29:17:52:a5:08:97:c9:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:11:5A:61:51:02:90:DA:80:42:F4:6D:31:CE:87:38:72:45:05
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b9:8e:ac:f3:f6:aa:d9:eb:87:76:8b:73:91:e7:31:93:eb:
74:a7:74:ff:8b:07:76:73:ed:44:9c:82:ac:2c:ec:07:2b:71:
a4:62:35:40:b0:57:75:86:bf:4d:b4:f2:49:1d:ba:9b:1a:a8:
0f:95:0c:98:1b:56:02:bc:27:24:45:7a:0a:26:43:76:c2:84:
e4:5c:f4:50:b8:df:4a:9b:15:14:30:5d:54:0f:4b:38:52:70:
89:c3:ad:e9:57:b4:54:10:b1:e5:e2:74:31:c3:95:08:5f:cb:
c2:bc:c4:c3:90:4d:05:f5:cd:33:87:7c:5d:a4:6a:68:ae:32:
c4:39:3e:6d:a2:4d:19:46:f9:0e:ce:73:99:fe:c6:fd:b2:7e:
e5:39:ce:14:29:e1:40:9e:df:d8:d4:35:b3:58:30:cf:68:35:
4c:78:38:c4:3a:a1:99:be:bd:4d:b5:a0:e5:e6:e9:b4:76:5b:
3b:01:a4:d8:f5:90:51:7f:eb:19:18:e5:3e:91:b5:2e:91:16:
7f:e1:9d:c6:77:d1:a4:05:20:b4:d5:6c:01:88:a6:09:c4:3d:
7b:69:f6:01:87:0f:1c:dd:a2:c1:5b:98:c4:bc:ae:8f:16:00:
c0:af:cd:4e:3f:98:bf:8a:aa:2f:3e:e6:b9:ec:cb:cd:61:1b:
0a:71:d7:8a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaaA77TDfs22gRhkNqA/2r2WhLMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0
NkE4MzcwMjAeFw0yNTA1MDMwODU1MDJaFw0yNjA1MDIwOTAwMDJaMDMxMTAvBgNV
BAMTKDNCRkUxMTVBNjE1MTAyOTBEQTgwNDJGNDZEMzFDRTg3Mzg3MjQ1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbqnmFMKlmBi/oj7wRb9ZcKWf
i9eM+2q0vLjBK9//aJ7jeJJKOiiuAyZtf+E/+vLLXX7eTCyV2hYnX1BSPeHC6yqq
6yRKx3dBFY4uKH3rgr3rBeE5spd71A2gB/qMaC6tfXaBwoYlAetuYx4n7cdRtCqS
4D1X7gymWwX7teoJwao+/VyCNdm1peAbVQ7gGwYNxKsK26luBl4OraQMN9O6nAik
HWH69teOr5EOzLm5+i19aZ8Iimjeg39MXqPOBo0Pk2oQrrkH52NFXdjlDYNaKwkT
Kl4FLGC2irQH21G1am/5wHupFRAgxcQMOQ4Wrt6oE+oaZHjWKRdSpQiXyc2nAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUO/4RWmFRApDagEL0bTHOhzhyRQUwHwYDVR0j
BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1
NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4
MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuZGDANBgkqhkiG
9w0BAQsFAAOCAQEAG7mOrPP2qtnrh3aLc5HnMZPrdKd0/4sHdnPtRJyCrCzsBytx
pGI1QLBXdYa/TbTySR26mxqoD5UMmBtWArwnJEV6CiZDdsKE5Fz0ULjfSpsVFDBd
VA9LOFJwicOt6Ve0VBCx5eJ0McOVCF/LwrzEw5BNBfXNM4d8XaRqaK4yxDk+baJN
GUb5Ds5zmf7G/bJ+5TnOFCnhQJ7f2NQ1s1gwz2g1THg4xDqhmb69TbWg5ebptHZb
OwGk2PWQUX/rGRjlPpG1LpEWf+GdxnfRpAUgtNVsAYimCcQ9e2n2AYcPHN2iwVuY
xLyujxYAwK/NTj+Yv4qqLz7muezLzWEbCnHXig==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:26:36 2025 by rpki-client