
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
File: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (raw, json)
Hash identifier: LdkOVHPRJZ2FR3qmT6KJhjMmjG6naW4xlLBSVHp1k1g=
Subject key identifier: 97:D4:A1:1F:EE:80:BB:27:83:4F:4F:E3:C2:8B:D3:39:C7:6A:D5:8B
Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1
Certificate serial: 389746176EF81B9C287696BEAFE5927C03162D29
Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
Signing time: Sun 02 Mar 2025 05:00:00 +0000
ROA not before: Sun 02 Mar 2025 04:55:00 +0000
ROA not after: Sun 01 Mar 2026 05:00:00 +0000
asID: 138829
IP address blocks: 36.50.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 23:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:97:46:17:6e:f8:1b:9c:28:76:96:be:af:e5:92:7c:03:16:2d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1
Validity
Not Before: Mar 2 04:55:00 2025 GMT
Not After : Mar 1 05:00:00 2026 GMT
Subject: CN=97D4A11FEE80BB27834F4FE3C28BD339C76AD58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:3f:a0:c7:da:6d:02:c4:0a:27:37:32:e5:
4d:f9:d4:83:b9:e6:e9:76:c6:fe:87:68:91:79:69:
2d:af:5e:a6:bb:fd:46:5e:6a:01:0f:d8:fd:e0:0e:
56:de:1e:8e:e3:91:6c:b4:c7:fa:59:2f:cc:2e:17:
b9:bb:93:4d:a4:a6:ea:2e:65:8c:ac:8c:cb:e4:99:
4c:54:1c:87:ed:a3:60:61:a7:b2:77:b0:4d:7e:b2:
b7:85:2b:8c:03:d1:ed:de:2b:e4:39:19:20:09:19:
b9:ef:ac:0d:28:95:2d:7a:46:75:25:f8:4e:f5:d6:
35:bd:8d:f6:69:ad:2f:31:43:fd:b6:bb:7d:85:9c:
d3:d1:a4:74:64:a6:ba:45:2c:d4:2e:33:58:e3:07:
b0:0a:8b:7b:7f:91:c3:5e:13:aa:a4:13:50:18:85:
74:51:0a:ae:16:83:4b:b9:62:04:0a:3b:14:6a:d2:
6c:40:29:39:4f:07:98:5d:90:11:cf:74:2a:7c:35:
09:26:9c:89:e8:7e:dc:4a:0c:6f:fc:5c:24:c1:75:
76:78:91:b3:59:68:c1:90:8f:a7:67:62:97:a7:40:
47:4a:45:23:67:f3:c2:45:cf:d5:0d:5e:e0:51:23:
b0:1d:dc:a1:de:8a:32:46:d8:9f:71:da:f4:53:22:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:A1:1F:EE:80:BB:27:83:4F:4F:E3:C2:8B:D3:39:C7:6A:D5:8B
X509v3 Authority Key Identifier:
keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ee:a7:30:ad:a4:c6:23:08:9d:e8:d7:ce:6f:01:25:71:6a:
43:48:de:d8:8a:20:43:ca:69:97:4e:ad:c2:56:21:ff:74:bb:
2c:be:88:12:3c:2d:85:eb:5e:d7:69:34:54:d8:cb:ba:62:45:
b4:04:5c:90:59:26:17:10:19:d3:fc:d4:8a:31:c2:aa:7e:f9:
b1:81:b7:12:dd:f8:3e:be:0e:be:c6:7c:34:cf:08:68:cc:29:
2c:68:7a:99:8b:ef:b0:05:19:69:0a:22:1d:2a:a1:09:fb:b1:
5e:72:0e:6b:a0:43:30:88:84:8c:66:51:48:74:ae:6c:46:e1:
ee:a1:25:22:a6:a1:e6:8e:99:ba:ee:1f:5e:5b:be:a6:8f:88:
17:86:8d:87:e5:8e:8d:bc:08:42:a8:c0:b2:b1:6e:90:75:91:
89:4f:76:e3:40:ef:48:08:32:cb:f7:da:e7:da:a7:fe:6a:0b:
4a:dd:66:53:4d:d3:8d:9c:28:5d:a4:fa:31:bf:74:6a:15:b5:
c8:b1:2d:0d:6e:a6:db:3a:1b:fa:59:88:f2:90:35:45:8f:dd:
ff:38:b1:a3:cf:80:09:31:f6:3c:15:64:b9:66:d9:17:ab:c5:
d8:26:ad:62:81:77:54:1b:9a:45:10:13:cb:05:be:03:36:47:
31:46:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:01 2025 by rpki-client