
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
File: 34352e3131322e3132372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: 4iRQ+fqyHNoEjNRmsfbrk2QYRB+z6wrWaL619bdN23k=
Subject key identifier: 31:E3:FD:01:64:EA:E6:DE:4F:B9:48:35:F4:6D:2F:89:E7:5E:46:53
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 112944CCF726B65A99605BFF2A05F0ECBC3F7BA1
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
Signing time: Mon 02 Jun 2025 02:03:36 +0000
ROA not before: Mon 02 Jun 2025 01:58:36 +0000
ROA not after: Mon 01 Jun 2026 02:03:36 +0000
asID: 58369
IP address blocks: 45.112.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 16:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:29:44:cc:f7:26:b6:5a:99:60:5b:ff:2a:05:f0:ec:bc:3f:7b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Jun 2 01:58:36 2025 GMT
Not After : Jun 1 02:03:36 2026 GMT
Subject: CN=31E3FD0164EAE6DE4FB94835F46D2F89E75E4653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:51:f8:15:bb:f9:03:30:d5:26:fb:e7:6e:
d1:f9:88:43:ed:63:4a:bf:77:f9:94:d3:2d:e4:ed:
9e:48:2f:49:78:3a:d4:67:90:82:2b:a0:d6:b3:f5:
b2:56:c7:71:99:f5:45:5f:bc:eb:19:ab:b9:45:7b:
fb:92:5d:f3:7f:fb:b3:b3:cb:16:23:1e:d9:06:e2:
54:b2:50:a4:a4:ea:0f:bf:9d:19:85:62:21:8c:3d:
8f:c1:ff:1f:7f:af:8f:53:64:a8:8e:59:2f:1c:7f:
bf:cb:c9:8d:c4:ca:b3:36:af:81:94:12:2d:a5:97:
81:56:de:b4:91:e2:43:45:cb:b8:a7:9d:a7:c5:84:
01:0f:0f:60:e3:19:ee:7f:40:7d:d0:77:f2:8a:f9:
e5:00:14:0b:66:a7:90:24:db:bf:c5:fe:e8:cd:7e:
62:db:0c:15:03:b9:8f:d8:91:06:b7:8e:9c:63:1d:
fd:5f:69:f2:45:5c:b0:3a:4f:11:d1:72:a6:61:4a:
7c:67:90:ba:65:0e:8f:03:3a:6f:f3:6c:b5:94:c8:
16:63:de:20:e9:7d:a0:54:88:99:03:24:8f:45:65:
5a:92:cc:4c:0c:93:3b:29:d9:31:4a:e5:fd:2f:02:
74:bf:41:17:08:7c:0d:dd:5a:25:ab:66:ec:d5:6a:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:FD:01:64:EA:E6:DE:4F:B9:48:35:F4:6D:2F:89:E7:5E:46:53
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:83:4c:6c:24:6e:e1:7e:07:8d:1f:92:f8:15:c8:2d:24:
25:b9:71:5a:5f:bd:0f:c8:12:47:5c:b4:74:72:0a:56:6b:fd:
8f:2c:61:d1:e8:26:fe:93:a5:0c:7c:2d:99:8d:cf:b8:68:c2:
23:14:67:8e:55:2d:ea:69:29:d6:59:56:d4:d4:5b:78:87:d1:
95:e1:bd:2e:5d:33:09:3e:54:b8:b5:ff:25:26:b8:a0:f5:5d:
6f:03:b0:ec:3f:d5:4a:6f:54:9b:9d:0f:12:e9:e2:b3:89:4e:
5d:d9:68:28:eb:50:9e:d2:bf:cc:c9:83:6c:c0:e2:db:b6:77:
d6:51:8e:de:16:37:ae:79:3b:1f:26:4c:10:3a:02:2d:c5:8b:
7b:67:2d:95:49:12:60:6e:7d:08:14:6b:de:10:71:61:ea:89:
e9:81:4f:ae:47:8a:30:3b:9c:06:37:e8:0d:d1:cc:ce:61:71:
6e:5e:9d:91:27:84:09:e6:72:a2:1b:40:5a:cf:58:ee:cc:09:
3a:e0:03:12:1c:b0:f8:81:66:d6:ab:46:82:ae:80:94:ad:c5:
ff:d3:a8:71:b7:7d:4a:8b:f0:64:d5:e4:c6:b0:b1:70:5c:83:
cc:21:7c:7d:58:d6:d6:d0:d4:4d:4f:65:a0:ac:75:b4:b6:df:
41:27:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:48:46 2025 by rpki-client