
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e362e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: XreZ/bz8wV0ZKm09cOpUZ4WRJ9YMW/+leLvyx+xCzwM=
Subject key identifier: E7:A6:E0:CB:C6:0C:D7:2E:F6:68:A7:70:45:0F:18:62:D8:22:48:40
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 176D418D9BFEE5251C8732F2C7A9EE57A8496087
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
Signing time: Mon 02 Jun 2025 01:03:03 +0000
ROA not before: Mon 02 Jun 2025 00:58:03 +0000
ROA not after: Mon 01 Jun 2026 01:03:03 +0000
asID: 38778
IP address blocks: 202.148.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 19:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6d:41:8d:9b:fe:e5:25:1c:87:32:f2:c7:a9:ee:57:a8:49:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Jun 2 00:58:03 2025 GMT
Not After : Jun 1 01:03:03 2026 GMT
Subject: CN=E7A6E0CBC60CD72EF668A770450F1862D8224840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:f6:6f:d9:c3:77:e2:36:25:ca:1c:bc:d6:
c5:8a:f3:8b:16:d7:92:79:ea:28:cc:c6:f9:ee:44:
4a:d8:e0:90:fb:ec:6c:27:13:d5:b0:22:53:8d:37:
d7:d1:ec:c2:ff:63:6e:a5:78:ee:14:15:be:b6:4a:
68:6c:0e:43:38:e2:fe:81:e8:a8:bc:1b:38:4b:09:
17:40:f1:4d:cc:c0:48:87:62:1c:45:85:26:1a:4a:
b7:59:3c:55:a6:e9:ea:ac:27:5c:7c:5b:45:c7:eb:
31:dd:1f:b6:da:5b:6c:d2:4b:03:7e:70:be:20:04:
c4:49:88:81:2b:e7:fd:f0:e1:a5:ec:53:f6:df:60:
af:43:fb:ef:92:79:8e:bd:7c:0b:1c:4e:43:1b:a1:
05:59:b6:ed:94:80:c1:aa:05:ce:bf:79:21:f5:2b:
bf:10:bc:37:dc:2c:6c:f4:e0:b3:5d:62:21:12:7a:
9e:53:5f:b2:9b:91:16:4c:48:7a:82:0e:90:8e:3d:
01:6f:a7:15:c0:bd:02:23:b9:f6:46:2d:e9:2c:0c:
37:c9:74:df:cf:73:46:8b:08:39:34:0e:db:16:2b:
8a:d6:25:5a:ec:97:f1:f3:49:29:30:e2:6c:49:c9:
94:d4:cb:18:0e:4f:37:17:62:d3:73:b1:3e:78:23:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:E0:CB:C6:0C:D7:2E:F6:68:A7:70:45:0F:18:62:D8:22:48:40
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e4:fc:7c:af:c0:ad:22:22:a7:14:d9:00:ff:02:8c:f2:9d:
a7:b5:c2:57:39:66:7b:7e:db:b3:bb:a1:ca:fa:50:f6:fc:9c:
a5:eb:6a:39:de:49:fd:c7:83:3f:09:ac:92:13:3d:ed:80:eb:
be:9d:8f:a7:47:46:88:d5:62:ba:17:0d:1f:e1:d7:27:fc:36:
1b:25:a7:0a:2b:28:6b:6d:9c:03:b2:76:e7:43:83:79:69:d8:
59:06:7a:cf:74:89:47:81:02:3d:36:be:a5:db:b2:60:39:29:
43:60:3d:ec:15:40:7b:f5:92:f2:a5:00:6f:c7:95:15:d7:e6:
97:f7:7f:e1:64:a7:08:3b:8f:14:db:00:29:22:b1:86:4e:46:
94:bd:35:dd:79:46:3d:f2:9b:95:ae:27:f8:2c:db:e6:2b:3f:
f3:38:06:c3:eb:37:e8:a0:44:3a:a8:9f:4a:a0:d6:e6:f2:93:
f8:c6:28:9e:ce:65:8a:92:0d:3e:46:86:d2:dd:c1:3a:68:1c:
f8:6a:b8:ae:8a:f1:c2:24:4e:47:07:02:73:d0:56:69:8b:c5:
1c:79:d7:3b:d5:82:b4:ff:5d:a4:b6:f8:28:41:10:39:c9:20:
74:f4:30:a1:9e:fc:9c:d9:a9:ba:b3:90:b4:92:bb:ba:51:65:
c9:bf:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:19:06 2025 by rpki-client