
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
File: 3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa (raw, json)
Hash identifier: SbUba4tzqK+YrTcy9FFmtuw7/z7BDjoDlafvW+sPxGA=
Subject key identifier: 31:B3:E5:15:D8:DA:8B:BF:37:16:DC:91:4A:6E:58:B4:FA:5F:E3:31
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 43507BFC5DACD0EC88D90E40430CA921C94B6DB1
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
Signing time: Fri 25 Jul 2025 06:01:31 +0000
ROA not before: Fri 25 Jul 2025 05:56:31 +0000
ROA not after: Fri 24 Jul 2026 06:01:31 +0000
asID: 138841
IP address blocks: 110.232.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 12:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:50:7b:fc:5d:ac:d0:ec:88:d9:0e:40:43:0c:a9:21:c9:4b:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Jul 25 05:56:31 2025 GMT
Not After : Jul 24 06:01:31 2026 GMT
Subject: CN=31B3E515D8DA8BBF3716DC914A6E58B4FA5FE331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:46:85:70:37:10:55:f9:55:50:00:54:3a:
98:c2:31:67:75:06:15:b5:1d:9d:01:5d:94:64:98:
e1:30:92:a2:72:dd:89:ad:86:ee:4a:cf:75:2b:3f:
9b:8f:88:97:35:56:89:59:aa:62:d6:3e:e7:51:26:
7a:31:d8:26:d1:22:73:1f:50:a4:60:3d:24:05:26:
1f:84:38:b4:6c:0e:90:f5:aa:45:4e:ec:8f:d9:6f:
91:27:0c:09:84:22:d7:d3:47:7b:d3:16:f7:43:0c:
50:13:e4:bd:28:6f:b6:bc:0d:5c:4d:0b:11:d5:db:
73:17:d7:df:7b:84:cc:75:06:b2:49:4b:23:f5:67:
86:b4:83:2f:12:11:b7:59:2c:ad:f4:f2:b6:87:c6:
2e:3d:49:39:10:65:30:2b:b2:c3:6a:70:c0:16:a6:
4a:62:8c:5d:dd:11:41:f5:37:fa:3b:28:61:2e:01:
22:9c:24:c0:b6:78:17:40:45:9d:aa:e1:66:d9:6d:
5e:45:58:9e:7b:17:18:41:ac:ec:9b:9f:74:e9:82:
f3:f4:c8:f8:5c:d0:74:ae:62:a7:d7:98:63:69:a0:
b0:3c:e4:ee:6c:84:cd:4a:45:d7:96:8d:e7:75:ec:
7b:49:7a:57:41:70:6d:a9:73:41:fb:f6:52:59:11:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B3:E5:15:D8:DA:8B:BF:37:16:DC:91:4A:6E:58:B4:FA:5F:E3:31
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.88.0/23
Signature Algorithm: sha256WithRSAEncryption
17:a1:0d:5a:e3:51:26:bc:5f:f2:75:d0:0f:7f:ac:c8:43:0d:
4a:80:c6:4f:28:f0:17:80:1b:93:d9:b1:ee:26:69:e4:8b:ed:
83:39:37:59:16:79:1e:9d:ab:bb:10:a6:e8:3b:fe:c6:a5:b8:
8d:44:08:55:03:36:70:4f:b2:71:44:a1:2d:4b:33:ab:dd:f8:
09:2b:72:1a:e6:f3:42:c8:64:8e:86:25:bd:48:cd:26:33:9d:
9d:9d:d7:d4:30:b1:87:3e:09:9e:a1:4b:94:30:e1:46:8d:a9:
76:51:4c:28:e5:65:f6:2c:7e:bf:9c:d1:7c:35:4d:5c:11:f4:
22:a9:80:60:86:31:d2:49:6f:eb:46:60:15:52:c5:86:49:bf:
74:80:1b:60:ea:10:72:7f:24:ae:a9:e2:0f:14:68:f6:c9:0d:
48:4b:f0:0b:3c:4e:16:4d:fa:a4:a2:09:e3:a3:6f:0b:2a:09:
b0:ec:a7:12:9e:03:7e:cd:e3:6c:83:cc:b7:4b:04:d3:2e:04:
91:07:4c:65:a3:30:b8:1d:76:38:fa:a6:1f:47:73:fe:dd:db:
b5:c0:2a:62:a6:6f:b6:d0:5f:cb:8c:3a:2c:b0:6e:6f:b6:6d:
25:39:68:b0:0e:c5:fb:2a:82:e4:73:e2:0a:11:ae:21:88:b5:
8c:33:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:02:02 2025 by rpki-client