
$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa
File: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (raw, json)
Hash identifier: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=
Subject key identifier: 2F:2E:3C:80:4C:1A:08:FA:A5:88:5A:CF:07:97:41:48:96:29:9A:77
Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0
Certificate serial: 4360FF69E932F0F37F0E2102527E2AFA3B8CDA6F
Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa
Signing time: Mon 23 Jun 2025 06:02:21 +0000
ROA not before: Mon 23 Jun 2025 05:57:21 +0000
ROA not after: Mon 22 Jun 2026 06:02:21 +0000
asID: 153079
IP address blocks: 160.25.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl
rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:60:ff:69:e9:32:f0:f3:7f:0e:21:02:52:7e:2a:fa:3b:8c:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0
Validity
Not Before: Jun 23 05:57:21 2025 GMT
Not After : Jun 22 06:02:21 2026 GMT
Subject: CN=2F2E3C804C1A08FAA5885ACF0797414896299A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:32:31:f4:b7:93:8d:01:d6:fc:9d:94:70:
f8:9f:e6:08:22:5b:76:98:02:23:91:ec:99:65:c1:
bf:67:ca:fd:03:11:3d:67:2d:97:d4:5e:99:f0:75:
50:4a:99:40:18:b6:d6:03:24:77:7c:f1:cd:07:fe:
e4:e4:5f:87:d8:34:22:f1:fc:bb:7e:35:3f:fa:15:
cf:9a:16:9d:30:a1:32:5b:5b:de:1b:53:f0:bc:3c:
7a:41:f7:ef:91:c2:14:27:94:26:d0:f2:7c:22:ab:
ad:b2:1c:ea:6e:81:d1:fd:45:48:e7:b0:e0:85:ff:
68:42:fe:6e:a5:12:d3:75:62:9b:71:43:89:77:5a:
0b:a7:12:a7:0d:f0:e8:ec:27:22:77:32:aa:30:3c:
aa:e3:0c:2c:b9:b3:a9:b6:20:ad:22:2a:fd:d1:8d:
99:fe:25:d7:d2:26:01:a3:35:39:2e:91:c9:61:7e:
7c:b3:c9:a0:80:b2:2f:6b:32:0f:17:e6:df:15:04:
e7:75:c4:df:cb:c2:d8:74:3f:43:ca:c2:7f:e2:5f:
85:25:fd:53:d5:43:d9:17:3f:4c:27:da:79:cb:dd:
4e:0d:fd:be:65:07:cd:c7:46:73:3b:36:02:43:28:
30:4a:a3:44:16:f6:91:a8:75:d7:d0:15:4a:bf:0e:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:3C:80:4C:1A:08:FA:A5:88:5A:CF:07:97:41:48:96:29:9A:77
X509v3 Authority Key Identifier:
keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.116.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3c:1c:a1:82:95:13:85:a0:41:e8:55:81:05:b8:79:c3:0b:
da:7f:35:7b:92:17:71:cc:d5:1a:67:72:39:66:3e:83:9b:33:
fb:49:df:74:4f:87:8e:cc:a6:2f:fe:6e:39:8b:c4:0d:30:14:
d8:a9:9a:fd:0f:2d:46:3d:43:c8:4d:3d:28:ee:6a:fb:16:a3:
3d:1b:1d:7d:38:e0:3c:85:d0:c5:94:ec:b1:3a:6a:83:2a:0f:
ee:e4:7e:0c:53:55:80:91:87:d5:80:6e:d5:60:10:2f:1e:77:
fd:69:9b:e8:cb:08:e3:ae:2b:a5:4e:64:ce:7b:0b:cd:71:22:
cc:56:11:dc:6f:4c:49:ea:34:96:db:7c:92:58:c2:58:d4:f5:
b9:74:6b:f9:43:ca:33:25:7a:ec:23:3b:98:cf:ea:6a:30:20:
22:8b:86:2f:f1:57:f0:58:7e:e3:63:20:9d:16:37:67:23:93:
97:dd:83:d8:31:21:8a:0c:47:3e:fa:9e:e3:18:3a:bc:a0:a1:
3e:66:0c:00:ba:bb:84:c9:ae:81:ff:75:c6:59:4e:6a:35:7d:
5c:9a:b2:d0:7c:59:a2:cc:92:ee:ed:95:10:bd:c0:20:75:41:
b9:32:f9:43:f9:99:38:ed:f1:81:63:8d:68:f7:81:ba:9f:cf:
11:63:45:8f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQ2D/aeky8PN/DiECUn4q+juM2m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3
RTI0NDlBMDAeFw0yNTA2MjMwNTU3MjFaFw0yNjA2MjIwNjAyMjFaMDMxMTAvBgNV
BAMTKDJGMkUzQzgwNEMxQTA4RkFBNTg4NUFDRjA3OTc0MTQ4OTYyOTlBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiIjIx9LeTjQHW/J2UcPif5ggi
W3aYAiOR7Jllwb9nyv0DET1nLZfUXpnwdVBKmUAYttYDJHd88c0H/uTkX4fYNCLx
/Lt+NT/6Fc+aFp0woTJbW94bU/C8PHpB9++RwhQnlCbQ8nwiq62yHOpugdH9RUjn
sOCF/2hC/m6lEtN1YptxQ4l3WgunEqcN8OjsJyJ3MqowPKrjDCy5s6m2IK0iKv3R
jZn+JdfSJgGjNTkukclhfnyzyaCAsi9rMg8X5t8VBOd1xN/Lwth0P0PKwn/iX4Ul
/VPVQ9kXP0wn2nnL3U4N/b5lB83HRnM7NgJDKDBKo0QW9pGoddfQFUq/DgntAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQULy48gEwaCPqliFrPB5dBSJYpmncwHwYDVR0j
BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx
QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0
NDlBMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ODI1OWQ2LTI2NTUtNDQxNy1i
ZWM0LTgzZWY2NjQ0ZjU3ZS8wLzMxMzYzMDJlMzIzNTJlMzEzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl0MA0GCSqG
SIb3DQEBCwUAA4IBAQBCPByhgpUThaBB6FWBBbh5wwvafzV7khdxzNUaZ3I5Zj6D
mzP7Sd90T4eOzKYv/m45i8QNMBTYqZr9Dy1GPUPITT0o7mr7FqM9Gx19OOA8hdDF
lOyxOmqDKg/u5H4MU1WAkYfVgG7VYBAvHnf9aZvoywjjriulTmTOewvNcSLMVhHc
b0xJ6jSW23ySWMJY1PW5dGv5Q8ozJXrsIzuYz+pqMCAii4Yv8VfwWH7jYyCdFjdn
I5OX3YPYMSGKDEc++p7jGDq8oKE+ZgwAuruEya6B/3XGWU5qNX1cmrLQfFmizJLu
7ZUQvcAgdUG5MvlD+Zk47fGBY41o94G6n88RY0WP
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:07 2025 by rpki-client