
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
File: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (raw, json)
Hash identifier: i8E531bAACF/do6q7C690HP7ycKInzio0QMeynldjVQ=
Subject key identifier: 08:41:2E:13:CB:62:17:D3:2A:80:74:92:DE:10:E4:C2:29:E0:E8:24
Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial: 2619028EF13A1D03CDB8C70AE25CB2A7DBE9FDE1
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
Signing time: Mon 02 Jun 2025 02:04:30 +0000
ROA not before: Mon 02 Jun 2025 01:59:30 +0000
ROA not after: Mon 01 Jun 2026 02:04:30 +0000
asID: 135360
IP address blocks: 45.64.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:19:02:8e:f1:3a:1d:03:cd:b8:c7:0a:e2:5c:b2:a7:db:e9:fd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Validity
Not Before: Jun 2 01:59:30 2025 GMT
Not After : Jun 1 02:04:30 2026 GMT
Subject: CN=08412E13CB6217D32A807492DE10E4C229E0E824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:30:0c:cd:f7:95:5a:21:b6:de:fe:62:c0:
66:6f:c9:c1:47:38:2f:84:09:cc:f0:a1:92:99:e2:
36:2e:f2:c5:cc:3b:4e:a2:a3:70:0b:26:db:b7:17:
11:22:87:97:05:e7:0e:29:16:be:b3:27:fe:a4:7b:
b8:ee:79:37:7d:62:e6:fa:43:5c:c7:76:39:f0:65:
26:76:54:8f:49:b2:3d:8c:55:6f:ca:05:f2:84:c7:
0b:4f:64:ea:bb:95:ed:d4:ba:3b:8d:3c:b3:47:64:
a9:95:91:46:f5:6d:7b:f4:43:46:08:0d:3a:59:27:
92:a1:2d:80:2c:cb:57:c1:d7:fc:5c:f9:43:dc:19:
ed:27:93:c9:07:0e:72:97:a5:d8:61:af:e8:10:24:
a8:cd:ae:d2:95:2c:4b:a8:c6:2a:d1:4d:46:c6:49:
bf:f4:0d:56:84:00:b3:cf:24:f7:d9:6b:a6:df:52:
5f:36:e1:3b:ed:a1:f0:81:7a:df:3e:0a:f8:64:92:
a0:c8:2a:a1:22:35:5b:68:97:8d:6e:29:8e:f0:19:
02:77:ec:26:00:a3:eb:d2:05:cc:cb:e0:d1:7c:1d:
4f:fe:e0:15:a4:9e:e3:87:c4:b3:62:64:70:e4:21:
6f:c0:2d:46:61:a6:bd:40:0e:69:c1:df:59:b7:a1:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:2E:13:CB:62:17:D3:2A:80:74:92:DE:10:E4:C2:29:E0:E8:24
X509v3 Authority Key Identifier:
keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:70:84:f2:a9:78:31:06:36:89:f7:8e:94:34:76:99:06:27:
1a:4a:59:87:8b:53:0b:6b:f9:79:58:88:a8:ef:04:55:82:76:
fe:40:26:3f:25:eb:21:5d:ca:8f:a5:66:90:32:2b:6d:10:6c:
2d:57:1c:c0:9b:68:68:56:c4:2f:32:f5:b9:88:1d:c7:e9:8f:
53:19:ad:c8:cb:7b:b2:2d:45:ca:3e:6d:c5:fa:51:36:6e:f1:
9a:01:09:e7:45:8b:e5:8c:4f:15:05:4f:c9:ae:f1:7a:39:88:
cf:37:fb:c6:df:8f:23:c9:3d:40:98:a5:1e:65:a6:fa:a3:b5:
22:11:01:22:5f:d0:18:db:5a:48:43:57:3b:87:5f:c5:69:7a:
36:db:b2:bd:e7:a0:6e:37:84:cd:a2:4a:37:75:c2:73:18:5c:
a6:b6:e2:fc:ae:b1:1e:33:d7:a5:a9:7c:a8:01:fb:96:c6:08:
60:70:78:46:df:bf:49:ec:99:63:3a:e3:78:0b:92:3e:a0:2f:
60:30:e0:13:ba:76:81:87:31:7e:d6:9d:d4:a0:e3:f5:a8:46:
77:ff:fc:6a:eb:16:34:7f:b5:7a:88:12:2f:b1:be:d9:43:35:
12:66:41:70:94:9c:7c:93:c7:07:67:df:a7:cd:11:78:09:19:
04:cc:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:30:39 2025 by rpki-client