
$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137372e302f32342d3234203d3e203535363930.roa
File: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier: y4O5dSQRMeH84EShY7UTqOa6lldWSvXCyPUWEuCTnEQ=
Subject key identifier: 14:F4:24:4E:C3:51:89:A0:39:5E:90:09:8A:83:F4:0B:1F:1C:72:C7
Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial: 775BC3F66DE136F0B1C60F41DA61396F0FB039BB
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137372e302f32342d3234203d3e203535363930.roa
Signing time: Tue 10 Feb 2026 12:00:02 +0000
ROA not before: Tue 10 Feb 2026 11:55:02 +0000
ROA not after: Tue 09 Feb 2027 12:00:02 +0000
asID: 55690
IP address blocks: 42.62.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 12:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5b:c3:f6:6d:e1:36:f0:b1:c6:0f:41:da:61:39:6f:0f:b0:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Validity
Not Before: Feb 10 11:55:02 2026 GMT
Not After : Feb 9 12:00:02 2027 GMT
Subject: CN=14F4244EC35189A0395E90098A83F40B1F1C72C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:e4:67:d7:ae:a2:73:04:71:28:9d:e6:7e:
53:56:a3:75:a1:74:f6:f6:ed:70:fa:a6:df:df:33:
cc:22:df:3d:0e:1a:31:18:07:96:50:93:78:eb:a6:
cd:2a:50:a8:80:f2:4e:34:01:d6:cb:4b:f6:32:1d:
98:7c:4d:dc:07:1c:64:3a:a3:8c:27:c7:19:10:30:
fa:60:38:83:4d:46:d1:96:02:60:82:38:a2:7a:33:
02:cf:d1:fa:f3:cf:65:61:10:1f:96:2f:5d:85:93:
5b:72:12:66:2d:1f:9d:c4:d9:8d:66:07:ab:a7:2e:
a4:d6:23:9f:e9:1e:70:56:cb:90:c7:a9:5d:16:3b:
3c:d6:af:3f:b3:ef:7b:d2:e5:8c:55:f1:51:79:8a:
73:59:2f:90:98:fc:b5:35:96:30:84:a3:45:b1:18:
c0:41:23:df:17:1b:db:69:41:bd:4c:6c:ab:aa:67:
fa:e0:96:fe:28:a1:24:49:b9:3c:f5:67:df:22:82:
77:b4:d3:f8:ce:aa:4a:fe:ca:61:2a:34:0d:d2:a0:
36:dd:3e:00:9b:aa:c9:ab:92:a1:3b:9a:20:8b:f1:
b6:1e:63:75:a9:0c:4f:a5:b6:56:e4:1a:01:5d:12:
f3:4d:60:db:db:f0:80:4f:1e:0a:b4:11:2a:61:30:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:24:4E:C3:51:89:A0:39:5E:90:09:8A:83:F4:0B:1F:1C:72:C7
X509v3 Authority Key Identifier:
keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137372e302f32342d3234203d3e203535363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.177.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e3:fd:53:59:c7:94:b8:36:aa:39:b2:8d:70:ff:75:d2:e5:
d4:98:33:f6:3d:04:20:42:60:4f:ff:23:c7:bc:17:44:08:55:
8f:88:f3:b4:30:5b:f6:ec:7a:51:3e:5a:4d:08:8a:9d:26:0d:
17:92:95:9d:eb:67:94:1c:e2:72:0c:33:36:a2:c7:4a:e3:c6:
69:a7:ae:d7:4c:b1:e0:9a:9d:40:13:b3:76:37:2b:a9:d1:c7:
4b:e8:9f:04:46:5b:2c:d0:cf:d3:1b:e2:cc:97:7b:2e:18:f5:
72:c6:c3:45:e7:4b:58:da:e3:18:0d:fc:48:d0:0f:cb:18:5d:
1d:34:14:b1:7a:dc:8f:58:b4:21:bf:f3:77:02:3a:17:bc:b4:
c2:c7:8c:75:40:fa:ed:db:2a:df:1d:d1:31:e3:89:d4:a4:d7:
7c:54:3a:cf:c9:b6:f0:e9:c6:66:ce:a6:5f:26:d0:3e:b2:4a:
9c:1f:f8:d6:bb:ce:33:12:a0:61:bd:f5:04:3f:13:5b:78:55:
91:80:83:5f:0b:3e:7a:13:c4:4b:c6:f6:d5:24:e6:5e:0b:b1:
ec:11:f0:a7:ed:ca:09:7d:a8:18:17:f1:77:29:1b:1a:c9:8a:
70:08:13:00:34:64:8c:cb:81:90:08:a8:b5:23:98:c5:6a:73:
02:42:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:59 2026 by rpki-client