
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
File: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (raw, json)
Hash identifier: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=
Subject key identifier: 54:69:69:A5:70:8D:6D:AC:1A:03:C6:F0:F1:EF:BC:20:48:DE:10:C8
Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Certificate serial: 4E54C7D2783541998A465864BC0B3E9526EE75A4
Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
Signing time: Tue 27 May 2025 15:00:50 +0000
ROA not before: Tue 27 May 2025 14:55:50 +0000
ROA not after: Tue 26 May 2026 15:00:50 +0000
asID: 152800
IP address blocks: 160.22.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl
rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 03:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:54:c7:d2:78:35:41:99:8a:46:58:64:bc:0b:3e:95:26:ee:75:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Validity
Not Before: May 27 14:55:50 2025 GMT
Not After : May 26 15:00:50 2026 GMT
Subject: CN=546969A5708D6DAC1A03C6F0F1EFBC2048DE10C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:ac:de:e3:5d:ac:33:97:a2:12:51:ad:d7:
8b:85:1d:e6:f4:77:47:7a:ba:4f:38:46:9c:49:16:
8d:01:de:30:d5:c5:e4:ba:45:27:f2:e0:15:ca:38:
92:a5:d9:12:c3:10:fd:e7:ab:fc:3e:9c:8b:9c:5d:
8d:55:0a:35:e6:df:b2:89:1d:e8:ba:f7:73:e8:d3:
2d:da:4c:11:6f:68:f9:ef:70:a7:cc:2d:b1:44:cf:
73:72:39:27:43:ec:9b:57:68:5e:68:46:95:d0:20:
b6:77:0b:ec:d3:a2:ff:55:fe:6f:54:8c:1a:ed:e3:
bb:23:ad:08:4c:a2:c9:47:55:72:32:62:0a:e9:3b:
7b:05:da:74:0b:00:5b:bd:21:8c:28:71:6d:71:86:
4d:88:7d:19:96:ea:25:62:ae:06:19:8b:15:aa:5b:
b2:6f:96:20:61:c0:c9:d2:3e:87:e5:54:ee:99:6f:
07:eb:7e:48:e6:28:03:5d:6e:6b:2d:f0:a9:f5:ae:
dc:a2:cf:b1:4c:ac:8f:ca:dd:71:ba:1f:56:e7:cb:
40:3e:26:c9:43:fa:7e:97:ff:cd:a9:c3:2e:2b:d7:
c9:37:c3:43:6d:e3:ef:e2:e3:b2:16:21:2d:81:ae:
04:9e:e4:2e:83:22:8c:46:78:87:3f:74:33:a0:55:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:69:A5:70:8D:6D:AC:1A:03:C6:F0:F1:EF:BC:20:48:DE:10:C8
X509v3 Authority Key Identifier:
keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.24.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e7:5c:d3:76:3d:3c:51:c1:06:1e:0d:30:13:19:43:c0:d7:
fd:27:d9:bc:72:f9:de:90:a1:30:a4:13:8d:10:b1:8c:2a:6f:
31:5f:5a:a9:24:a8:61:b3:2d:52:da:5a:58:7a:51:55:a2:b1:
ab:f8:33:71:95:b9:d4:08:09:a3:53:02:a2:b4:48:bd:ca:ce:
80:b1:5d:a4:c3:3d:e0:f0:1e:fe:e1:52:73:03:57:a6:56:4b:
20:10:44:92:48:2c:c4:f9:4a:aa:b4:2c:9b:7c:1c:7b:dd:45:
05:82:03:b8:7f:66:69:43:1f:6e:a9:a6:fe:ff:34:10:f4:4a:
ab:b5:ea:24:99:87:1a:9e:1c:c3:34:88:f8:1e:b3:14:47:cf:
d7:55:55:fa:e3:e8:52:95:35:7a:b8:ce:a0:a6:2c:ad:b0:59:
be:cb:32:b1:e8:83:9e:8c:dc:b6:c0:ae:3b:e8:df:7b:2d:6a:
30:0a:65:12:22:8d:0d:0e:90:a1:98:6f:59:f6:09:94:4d:5a:
ed:9a:20:1e:69:82:fd:61:0e:45:7a:d3:ac:91:22:e7:b3:11:
07:64:f8:06:c3:05:f6:44:05:38:38:8b:24:88:17:c8:94:ed:
82:b8:ca:c7:5b:67:d0:00:bf:12:7b:2c:61:67:24:df:7f:2c:
d3:5d:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:13 2025 by rpki-client