
$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
File: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (raw, json)
Hash identifier: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=
Subject key identifier: 24:7B:16:A4:B3:6D:2E:6D:94:13:92:47:73:66:19:B7:8A:DB:CD:B6
Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Certificate serial: 6271A9612002FB0E3E30349F059D356A5E120975
Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
Signing time: Mon 02 Jun 2025 02:04:44 +0000
ROA not before: Mon 02 Jun 2025 01:59:44 +0000
ROA not after: Mon 01 Jun 2026 02:04:44 +0000
asID: 45705
IP address blocks: 2405:2c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 00:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:71:a9:61:20:02:fb:0e:3e:30:34:9f:05:9d:35:6a:5e:12:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Validity
Not Before: Jun 2 01:59:44 2025 GMT
Not After : Jun 1 02:04:44 2026 GMT
Subject: CN=247B16A4B36D2E6D94139247736619B78ADBCDB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:06:4b:f9:79:41:f1:61:ff:0b:77:5f:64:
e3:f1:62:9b:da:dc:86:70:14:6d:e1:a9:1a:38:f3:
ef:41:66:13:7b:60:a8:a9:1c:aa:bf:c4:f2:a6:fa:
5a:55:2c:5b:62:5e:cc:0c:da:16:de:4c:a5:3b:c5:
2a:17:69:3b:80:db:09:85:7a:03:81:d4:6b:3f:86:
4a:bc:19:63:fc:47:cd:62:51:f5:89:10:85:97:fd:
5a:f4:29:fd:58:ec:9c:27:dc:0b:e3:fa:76:5e:c3:
76:97:30:61:26:9b:58:03:9b:8d:2f:c9:66:77:e9:
15:58:4a:71:16:a3:3f:b8:a7:63:be:7b:97:63:d5:
9f:a7:6a:78:93:c3:10:fe:fa:33:1a:c8:4f:41:9a:
b5:84:08:33:e7:e9:f0:0a:c9:df:98:19:2e:90:ee:
c5:c9:25:87:e1:ae:6e:24:6d:f2:58:29:70:a8:da:
70:60:ec:47:b8:1c:54:65:28:76:3f:3a:77:3f:1d:
af:9e:43:06:26:6e:2a:1c:a9:01:96:69:64:a2:c2:
f1:9f:74:18:64:7f:bb:53:4b:87:dc:a7:75:b9:87:
a1:88:c8:e1:e9:d4:9d:ed:c8:66:87:db:cf:ab:77:
12:a6:91:fc:f4:64:71:8f:e7:01:d1:fd:8e:ca:3b:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7B:16:A4:B3:6D:2E:6D:94:13:92:47:73:66:19:B7:8A:DB:CD:B6
X509v3 Authority Key Identifier:
keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:2c40::/32
Signature Algorithm: sha256WithRSAEncryption
cb:a5:94:3a:20:46:66:87:0b:00:3b:29:cf:50:89:4c:29:67:
f9:0b:5d:05:7f:c3:df:08:c2:58:e6:00:d8:53:43:8f:6e:b7:
5c:72:3c:10:9b:e3:37:be:31:5a:4c:13:e2:2f:a8:39:82:04:
49:06:52:14:61:8c:eb:eb:7f:b5:36:45:60:21:47:55:e8:4f:
d4:26:c6:66:b1:b7:94:8b:d6:91:57:73:6f:25:e2:14:13:e1:
77:1c:4e:6d:81:b7:ca:c5:de:fd:72:8a:0f:6b:e5:c8:a6:5d:
10:13:a2:45:27:50:d1:1e:a7:9a:cb:02:02:46:cd:97:df:8f:
06:f1:01:7b:8e:fa:da:1d:09:d9:ba:2c:0f:88:e5:d8:49:df:
02:38:2a:60:62:49:7f:13:a3:9f:ab:69:80:36:6a:dd:85:9b:
f0:6f:f0:87:ee:4a:e9:9b:ca:7e:05:88:4f:f2:98:ba:a0:87:
51:c7:51:ac:d2:e0:5a:0c:3e:dd:4c:53:e8:75:9f:1a:09:20:
ff:b6:70:39:5a:11:17:f2:fc:e0:e4:66:a5:9d:d5:1e:53:04:
3b:29:5a:47:98:83:85:e6:9e:97:75:1a:01:07:51:fa:36:c8:
98:8d:78:b9:4a:c9:ed:f8:7a:40:d5:6b:35:c4:fc:9e:8a:f0:
3f:be:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:53:31 2025 by rpki-client