
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e372e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e372e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: 8Al9govPcm2GD/w4CgcgfWWw3DKCwCA65SLBYwwhZXU=
Subject key identifier: 36:41:70:DC:61:2C:0D:95:CA:D7:5F:9A:5C:92:1E:4E:94:20:F9:D5
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 777F1980D6C851C0203512B14DD7FEF293F4FA81
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e372e302f32342d3234203d3e203338373738.roa
Signing time: Mon 02 Jun 2025 01:03:04 +0000
ROA not before: Mon 02 Jun 2025 00:58:04 +0000
ROA not after: Mon 01 Jun 2026 01:03:04 +0000
asID: 38778
IP address blocks: 202.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 19:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7f:19:80:d6:c8:51:c0:20:35:12:b1:4d:d7:fe:f2:93:f4:fa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Jun 2 00:58:04 2025 GMT
Not After : Jun 1 01:03:04 2026 GMT
Subject: CN=364170DC612C0D95CAD75F9A5C921E4E9420F9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:f7:87:3a:84:8a:ab:d9:e8:6c:dd:03:27:
43:be:7d:72:a4:9b:60:e0:77:cf:34:fe:2c:c7:73:
0e:5f:10:98:7c:57:3e:fa:38:a7:66:88:a4:b1:1e:
27:e2:4f:bc:74:46:08:ce:b1:b6:cd:ca:4c:05:ab:
54:96:c5:f0:3c:46:aa:fe:ca:1f:da:13:fa:8a:c7:
9d:91:50:80:74:62:de:cd:86:26:ee:2a:a8:a4:f2:
d8:5a:17:62:09:2d:f6:8f:77:1f:6b:66:b6:5b:83:
a0:e8:25:2f:7e:ed:7a:9a:80:da:08:98:43:a8:43:
f4:1e:32:b8:11:29:78:85:23:0b:15:30:21:eb:50:
4f:f5:a7:42:ef:0c:e9:d6:f1:cc:dd:4c:ff:90:59:
01:f2:0d:b7:cf:2f:82:dc:eb:a5:6d:04:43:0b:f3:
96:1c:16:22:c9:74:0e:f3:58:e2:a8:ed:42:6d:b2:
73:80:c0:39:31:e2:65:8b:11:d6:71:f9:ad:09:ca:
4b:5f:49:59:1e:d2:d0:f0:7c:ae:dd:5d:09:30:6c:
42:d8:25:ce:1e:40:fc:14:91:6a:ec:56:7d:17:d3:
fd:55:df:c2:4e:64:da:c6:6c:d2:39:87:29:22:e2:
ca:f9:0e:2d:9a:d0:09:d9:2f:1e:f9:b0:cd:46:19:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:41:70:DC:61:2C:0D:95:CA:D7:5F:9A:5C:92:1E:4E:94:20:F9:D5
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e372e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1a:ef:95:eb:e4:22:4f:26:4a:30:e7:f1:35:e4:c2:94:fb:
51:ba:fa:74:47:00:bb:c7:f5:4f:41:74:72:3d:ca:9e:5a:95:
a8:6d:42:7e:55:fe:c2:6b:9d:7a:2d:d3:78:0e:f2:03:1a:0d:
0c:2a:17:ed:81:a7:a7:6b:10:45:b9:c5:6b:cf:c3:3b:46:dc:
d0:aa:88:84:da:48:5d:2d:8e:34:c1:64:60:c7:b7:b4:2e:36:
fc:72:cc:9c:97:67:77:b6:92:c2:f3:df:00:13:d0:ed:2b:ad:
cd:4e:76:79:5d:8e:ff:68:43:f4:b6:04:9a:2b:f0:60:e4:4c:
8c:28:3f:ea:e2:c0:45:47:4f:62:48:79:bd:03:59:78:1a:d9:
06:bb:ac:4d:e0:77:82:2f:9d:73:11:c9:47:7a:5b:db:44:17:
4f:d6:4a:60:85:59:ca:29:0c:67:0b:47:d0:3c:8b:e1:e0:b5:
e0:c9:a8:d9:da:4f:65:77:7d:f4:74:5a:31:69:fd:f6:4f:73:
3d:7c:eb:3c:90:07:64:81:f8:55:02:13:7c:d7:bd:5c:97:d7:
bd:d5:81:ef:c3:5b:8f:23:95:66:c2:15:40:66:92:ab:3b:a5:
05:6e:9e:3e:35:5f:7d:60:7b:94:78:9e:98:ff:a4:e2:80:2e:
93:af:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:02:04 2025 by rpki-client