
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
File: 34352e3131322e3132362e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier: mH1xPLCK3h/5p0CI7uvcz13XRgXqkPC5XQBIMAbM/Dc=
Subject key identifier: 7E:58:A7:AB:1B:EC:E2:E3:15:B3:AF:2C:C9:83:E1:8C:E6:AB:9A:55
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 059411004C915760E40905050925E10CC4C202E3
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
Signing time: Mon 02 Jun 2025 02:03:41 +0000
ROA not before: Mon 02 Jun 2025 01:58:41 +0000
ROA not after: Mon 01 Jun 2026 02:03:41 +0000
asID: 58369
IP address blocks: 45.112.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 16:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:94:11:00:4c:91:57:60:e4:09:05:05:09:25:e1:0c:c4:c2:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Jun 2 01:58:41 2025 GMT
Not After : Jun 1 02:03:41 2026 GMT
Subject: CN=7E58A7AB1BECE2E315B3AF2CC983E18CE6AB9A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:d6:00:e7:53:fe:cb:07:89:ef:a2:f6:a7:
52:50:76:36:83:14:47:88:fe:67:c4:1b:85:73:68:
e2:8f:03:3d:74:a3:1a:8e:2f:34:f2:f6:1d:67:4c:
40:dd:3c:1b:46:e7:dc:d2:2e:60:d1:7f:e6:55:b0:
c6:a6:e7:11:11:77:88:61:27:c9:20:ab:c9:4d:46:
28:e4:e7:38:4b:db:92:9f:81:6a:e8:00:24:60:0e:
63:6a:4f:b6:eb:9c:ed:f1:5e:13:2a:22:16:d5:96:
6b:ff:6e:a3:0e:fe:0a:9d:04:3b:a3:60:5d:b8:47:
5d:03:65:f7:e4:14:88:c5:c7:a1:51:b1:6b:b4:32:
59:8a:1f:f6:e3:ce:fd:d7:42:56:ec:6c:00:15:86:
18:c3:4d:ca:83:1d:64:9f:c9:42:c9:b9:eb:0d:64:
25:c7:d7:0a:ce:ac:75:12:bc:c9:12:75:8c:5d:c9:
0f:24:c6:1d:e4:d3:1e:4f:d1:37:0c:15:9b:ca:b5:
de:2c:e6:31:6e:0b:a4:87:ec:ab:af:da:d3:06:3b:
bf:1c:6f:48:48:f7:b5:4a:cb:72:8a:26:e6:e7:86:
80:02:c7:e1:16:a5:62:0e:a0:ea:a8:91:ed:b9:dc:
0f:7a:9b:5d:86:e6:98:4d:66:70:da:b3:1e:38:d8:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:A7:AB:1B:EC:E2:E3:15:B3:AF:2C:C9:83:E1:8C:E6:AB:9A:55
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.126.0/23
Signature Algorithm: sha256WithRSAEncryption
99:88:e6:37:dd:c2:6d:c7:fb:1f:f6:cb:37:49:4b:34:ff:26:
1e:e4:5e:64:c7:9d:89:ec:20:92:8b:a4:10:b1:4b:a2:16:85:
01:e5:87:0e:27:50:5e:68:b7:66:c2:17:15:91:54:3e:86:28:
b6:8b:49:ec:20:fe:2a:f6:52:f2:c2:d5:c9:6a:4d:71:05:41:
ef:69:ab:5f:1f:c3:f6:03:a5:17:d3:73:62:2f:9e:78:9f:00:
0f:a2:29:e5:75:cb:79:d0:57:59:fb:53:2e:68:08:ad:d4:f3:
b0:1c:00:07:9e:81:3a:67:da:a4:ad:13:d9:12:97:e7:0c:7b:
e7:63:9d:0c:a4:e7:77:70:44:d5:80:48:f3:92:47:df:49:5c:
e9:57:f6:e5:ec:66:bc:5b:81:0c:62:cf:9a:4b:bf:8e:6a:f6:
bb:78:47:2e:73:17:7b:08:ec:fd:05:cd:b3:40:6d:a9:1e:80:
3d:e6:a9:98:fb:1d:af:24:d6:65:3f:ab:fd:de:08:c1:9d:96:
ce:02:c0:c7:7f:28:08:9d:08:d7:64:66:eb:f2:39:25:10:92:
74:b0:9a:a2:09:ca:34:96:d3:c7:44:36:e5:63:2e:a7:16:50:
71:45:33:fc:a4:cf:d9:af:5c:8e:95:83:21:f3:f9:d4:89:9d:
1c:b4:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:48:13 2025 by rpki-client