
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48935.roa
File: AS48935.roa (raw, json)
Hash identifier: Qwo81szm0ZD2IzaBx5/am2XHchNT3FWCmA1HvDKIN+0=
Subject key identifier: 10:83:E2:DB:17:C4:D4:F0:6C:1E:0B:95:D9:BA:A3:6F:F9:CB:B3:E3
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 18DACFCDBEE6D76DEAEAC4BA4D901086161B43CF
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48935.roa
Signing time: Fri 05 Jun 2026 07:12:37 +0000
ROA not before: Fri 05 Jun 2026 07:07:37 +0000
ROA not after: Fri 04 Jun 2027 07:12:37 +0000
asID: 48935
IP address blocks: 2a0a:6040:7500::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:da:cf:cd:be:e6:d7:6d:ea:ea:c4:ba:4d:90:10:86:16:1b:43:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:37 2026 GMT
Not After : Jun 4 07:12:37 2027 GMT
Subject: CN=1083E2DB17C4D4F06C1E0B95D9BAA36FF9CBB3E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:97:90:d8:55:e1:4d:f4:d1:cf:0d:c3:c3:
53:11:9a:5b:fe:38:c2:a6:d7:25:20:f8:19:d8:49:
b0:48:4d:91:a1:88:ea:08:44:77:44:02:95:21:4d:
01:f1:15:4f:a0:5b:39:45:1a:c8:50:b9:ae:0b:c7:
9e:0c:5d:78:83:62:63:c2:16:79:01:2d:64:c8:ef:
90:3a:b6:66:a7:fe:53:28:c0:04:2b:0e:e7:a2:94:
a3:ab:72:c5:89:1a:ee:0b:68:28:53:07:05:04:c3:
a2:42:39:d2:72:bf:ca:fc:08:b6:f7:5f:9a:f5:5d:
01:f9:0f:3a:ed:8a:91:67:5a:e4:2c:3b:d8:47:6e:
c5:b6:ed:45:c8:46:e5:7e:2c:7a:f6:66:d7:b7:15:
64:d0:ea:49:85:0a:f8:2a:86:2c:e4:1b:f5:13:f1:
2d:84:60:83:74:10:88:ee:39:37:7a:6e:af:5d:25:
8c:72:a2:3a:dd:74:6a:28:fb:94:e0:5e:2e:a6:a3:
f8:20:d1:9a:cf:37:bc:ba:6d:04:de:3c:3d:97:7f:
f3:0b:e6:81:14:ad:a1:26:f6:54:aa:e0:7e:3b:7b:
40:4d:34:99:30:7f:ee:f0:5c:ae:de:c8:df:3b:28:
24:99:b0:d8:32:2f:b3:6c:6a:40:29:ca:d7:b7:f0:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:E2:DB:17:C4:D4:F0:6C:1E:0B:95:D9:BA:A3:6F:F9:CB:B3:E3
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:7500::/40
Signature Algorithm: sha256WithRSAEncryption
8e:f1:7e:2a:26:eb:78:39:f2:14:61:0a:34:65:81:16:6a:58:
37:26:d2:c6:b2:18:48:ba:92:71:26:6d:3d:e3:bb:65:a3:8a:
b1:b5:b8:be:dd:0b:1e:34:c6:38:f1:c1:10:b7:18:18:cb:bc:
53:28:f5:53:78:1d:53:39:94:d1:af:6c:5f:1d:1d:07:6b:c0:
84:4c:f3:8d:91:19:85:be:8f:67:8b:6a:c9:38:50:32:35:da:
bc:48:55:0c:b9:74:94:68:1d:e6:0e:6f:8b:f9:fc:a9:fb:df:
ab:85:60:b9:90:57:c2:f0:02:ca:73:fe:fd:92:e7:47:50:5f:
e5:44:ce:ad:46:b2:ff:11:01:3b:73:74:0f:96:ec:27:44:bd:
8f:86:57:de:62:a5:24:45:fa:c7:f3:55:f3:15:4a:9b:95:25:
92:c4:c4:2d:3c:72:12:c1:82:47:04:3b:1a:31:c8:5e:5b:07:
e6:6f:1c:9b:c9:31:54:9e:f8:15:db:ff:ac:e0:2c:87:bd:b1:
1a:8b:70:62:1d:b8:98:cc:21:e3:b7:f9:22:90:c8:b0:ff:42:
95:8c:93:96:3e:be:42:be:bc:69:6a:ba:33:00:d9:b6:8b:2d:
81:32:9f:cf:14:34:7b:1e:da:25:64:ea:cd:b4:68:bf:61:86:
b0:08:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:27 2026 by rpki-client