
$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
File: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier: UocS01XlJbKSBac7WbRNzZaivUhUbWcSE2n+KruMfoM=
Subject key identifier: 9B:1F:35:FF:4E:60:4C:41:05:DF:EB:F5:27:19:13:0A:2A:1C:71:9E
Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial: 256349F12D16F595C3DE5954A24AF57D797AE98F
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
Signing time: Tue 10 Feb 2026 12:00:03 +0000
ROA not before: Tue 10 Feb 2026 11:55:03 +0000
ROA not after: Tue 09 Feb 2027 12:00:03 +0000
asID: 55690
IP address blocks: 42.62.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 12:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:63:49:f1:2d:16:f5:95:c3:de:59:54:a2:4a:f5:7d:79:7a:e9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Validity
Not Before: Feb 10 11:55:03 2026 GMT
Not After : Feb 9 12:00:03 2027 GMT
Subject: CN=9B1F35FF4E604C4105DFEBF52719130A2A1C719E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:0e:52:77:ec:b6:46:73:b1:82:ff:6e:3a:
6e:e2:05:e9:6b:0e:95:f2:62:ae:26:aa:9c:cc:5b:
5f:c2:81:35:63:c9:a4:5b:51:76:66:67:8b:74:e2:
85:21:a5:81:b1:df:73:7d:d7:e4:61:c9:08:f2:3b:
00:0a:0d:5b:60:66:b1:a1:7d:f0:c9:05:b9:1f:ac:
a7:d9:a4:96:0b:7c:bb:eb:30:f5:26:91:01:a2:c9:
c5:15:f1:b7:08:be:cd:53:7f:1c:e6:2f:cb:71:e6:
bb:61:d4:62:14:2a:ab:56:1e:82:64:06:97:4d:32:
00:a3:49:b1:f0:b1:c1:aa:bf:2c:2b:4f:f7:8c:8e:
c5:b0:fe:7e:02:b4:d8:90:fb:47:c9:ab:b0:27:78:
b7:bd:d9:46:8b:80:64:8f:e8:b2:28:f4:4e:13:85:
44:5b:67:01:41:31:1e:9f:37:cc:e6:b9:f7:c4:8e:
2b:a6:f8:78:72:93:5a:49:59:4a:13:40:7a:73:09:
7d:b3:9a:67:03:bc:d7:f1:61:47:63:cf:26:33:10:
1f:a6:e5:c5:07:54:36:76:d3:8d:f6:b4:b6:d6:3b:
9e:f2:59:7f:bf:55:e8:a9:fc:65:32:ce:70:b8:c3:
d9:e6:67:bc:44:fe:49:ee:e5:c0:97:e2:3c:05:b2:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:35:FF:4E:60:4C:41:05:DF:EB:F5:27:19:13:0A:2A:1C:71:9E
X509v3 Authority Key Identifier:
keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.176.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0f:7c:38:f3:bd:1e:77:77:ad:4e:b8:63:76:73:7e:71:5e:
6c:68:4f:53:37:1a:a8:41:50:34:39:97:50:fb:fe:2c:4a:bb:
e7:78:2e:eb:13:5f:b1:43:50:ef:fe:82:96:ed:38:03:f7:8f:
32:0b:76:fe:82:f4:11:37:9d:00:0b:39:59:ba:41:fa:15:cc:
ad:1c:02:a6:1b:9f:5d:a3:d1:54:36:c6:c9:7f:2f:28:27:b8:
7e:3f:a3:bb:49:05:5a:85:48:99:59:81:e4:91:4e:47:64:d3:
5d:7e:2e:a8:1b:57:16:5c:36:72:fd:7d:47:27:15:ac:07:f2:
db:19:11:fd:36:dd:30:e3:85:a3:a7:ce:aa:3f:e2:b9:c5:b3:
7a:b1:2a:ef:94:fd:f4:f0:e9:62:4f:f9:31:7c:13:7b:47:43:
d9:1f:db:2f:42:ae:13:a1:10:57:72:f5:6a:7c:e0:81:a2:4a:
27:f4:42:c0:07:7e:f3:55:b1:84:2a:8f:55:ae:b7:aa:82:b3:
76:68:0a:9e:c8:d9:af:00:9b:c9:f2:b1:b8:59:81:14:42:79:
4e:77:08:a7:fb:93:03:16:f4:4d:21:dc:7d:ff:c1:77:af:af:
d5:30:75:7c:f1:ea:7c:48:8c:76:30:35:be:bb:f4:54:7d:b0:
f8:75:1f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:35 2026 by rpki-client