
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32372e302f32342d3234203d3e203234353235.roa
File: 3230332e3135332e32372e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: VNHQb6ZDy7Sl9qdEyjEdax/L2Yp7PucTK6fhmMcZTvg=
Subject key identifier: 83:A5:A2:6F:07:05:90:33:EE:19:4C:6A:36:EF:55:F4:2E:DE:AA:28
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 664D59BEBADB00D239C74D703502D541C3E3CCF2
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32372e302f32342d3234203d3e203234353235.roa
Signing time: Sat 03 May 2025 09:00:04 +0000
ROA not before: Sat 03 May 2025 08:55:04 +0000
ROA not after: Sat 02 May 2026 09:00:04 +0000
asID: 24525
IP address blocks: 203.153.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 06:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4d:59:be:ba:db:00:d2:39:c7:4d:70:35:02:d5:41:c3:e3:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 3 08:55:04 2025 GMT
Not After : May 2 09:00:04 2026 GMT
Subject: CN=83A5A26F07059033EE194C6A36EF55F42EDEAA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:44:da:09:96:9b:15:b7:6e:ad:dd:78:8a:
09:8a:e6:4d:6e:b0:70:4e:1f:ed:e8:77:dd:bd:15:
8f:8a:01:8f:bf:c2:13:f1:f5:a3:3c:6b:85:cf:41:
8f:27:24:0e:12:79:a2:4c:c0:fd:07:2d:4e:9e:0d:
86:ba:0c:ae:c9:59:08:32:ab:02:c7:12:33:a2:b4:
18:64:60:f8:26:64:3a:2c:7d:77:56:b0:20:ab:17:
49:f4:c7:24:35:90:90:80:08:5a:ca:f2:1a:98:5e:
3d:79:72:c1:bd:85:f3:3e:c4:3d:c8:52:7f:6e:a7:
5c:f0:cf:fa:8d:27:28:f6:22:a5:e1:79:1a:42:05:
97:d2:02:ac:b4:f4:60:21:ae:f9:b7:1c:19:bd:9d:
cb:34:c1:eb:48:2e:15:3e:37:c4:04:2d:cd:8c:12:
3e:70:89:47:72:6f:c3:59:42:6f:1a:ca:1c:1c:57:
70:44:53:b7:77:8d:1f:57:0b:d7:f3:81:ec:c3:78:
96:2c:41:1d:11:ef:de:c8:ac:23:ac:c1:48:f5:31:
c6:e5:42:2a:cb:3f:17:af:1b:24:ae:47:d0:7f:9c:
f0:71:ca:ed:a0:6d:64:4a:9a:b9:dc:8d:1b:91:ef:
a3:30:85:9a:e1:7f:bf:51:66:3e:d0:4a:45:a8:10:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A5:A2:6F:07:05:90:33:EE:19:4C:6A:36:EF:55:F4:2E:DE:AA:28
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32372e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.27.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8c:ca:01:5f:1f:b7:4a:22:1e:c6:3b:09:ea:8f:52:47:1c:
95:64:4d:93:c8:13:b2:77:b6:c2:db:b6:4b:2f:4a:6e:05:df:
79:bb:d1:97:f8:16:d4:e6:11:37:ec:8f:d1:57:f4:94:86:b4:
0c:80:3b:e0:47:5f:d0:04:5a:73:32:2f:69:b4:d4:35:2d:6d:
22:32:5c:ea:cb:6a:d1:c7:84:6e:cf:2f:4d:67:ce:db:36:41:
29:c3:32:7b:ff:c3:d1:d4:23:f6:cd:09:f3:64:7a:6e:87:2c:
ed:04:45:ea:1d:53:18:ab:fb:b1:11:bc:1c:6f:77:8f:7d:d7:
f6:85:e6:83:1c:77:6a:82:02:51:00:70:77:4f:0b:31:68:e2:
d9:28:3f:3b:57:2b:45:f1:e8:88:43:c7:e4:53:a3:8e:d5:c5:
6c:cb:f3:73:7c:fa:84:2e:8b:df:40:a8:ba:f4:e8:47:52:c7:
81:ad:6b:12:cd:f4:45:1a:e5:f1:1a:45:e8:96:93:c5:74:18:
6d:30:6e:4a:58:02:de:63:83:9a:08:b7:29:0b:71:bd:ce:4e:
36:39:b7:76:19:cc:c7:5d:08:25:05:18:da:32:19:22:c0:5f:
c0:25:27:85:93:84:c8:f8:77:49:8c:08:29:22:9d:c3:e1:63:
5f:91:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:26:37 2025 by rpki-client