
$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
File: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier: D4SmgWinw2uDnNDHY1kT9jgep4MItUVn6E6KY3uTDIU=
Subject key identifier: E3:EA:63:BE:D0:06:E6:56:30:17:72:E3:E3:76:E0:47:D5:1C:D3:56
Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial: 7309B4FE2F81A28A3DC1803C66A232F8C3AA3543
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
Signing time: Mon 02 Jun 2025 02:03:27 +0000
ROA not before: Mon 02 Jun 2025 01:58:27 +0000
ROA not after: Mon 01 Jun 2026 02:03:27 +0000
asID: 24204
IP address blocks: 203.80.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 22:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:09:b4:fe:2f:81:a2:8a:3d:c1:80:3c:66:a2:32:f8:c3:aa:35:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Validity
Not Before: Jun 2 01:58:27 2025 GMT
Not After : Jun 1 02:03:27 2026 GMT
Subject: CN=E3EA63BED006E656301772E3E376E047D51CD356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:9e:b7:90:b9:5c:a2:fa:e0:5f:ff:ed:01:
02:10:e4:51:63:c2:80:2b:ea:f9:97:d5:a3:b5:5d:
53:33:94:ee:40:3d:aa:db:47:aa:c0:2c:ec:bd:0d:
42:47:c2:30:80:25:42:5a:ed:95:38:d6:ce:e2:19:
3b:fa:fc:f1:bc:2c:c6:bc:a5:f3:26:54:62:76:e5:
d7:50:d4:34:4c:a5:c1:d4:f2:27:97:78:10:89:f8:
72:4d:b7:8a:a6:d0:ea:0c:57:bc:13:1f:f4:71:4c:
70:0c:6f:e1:30:6a:51:5d:04:f0:8a:ff:13:37:d3:
34:57:38:a9:b8:52:c8:25:47:ce:00:a1:12:fd:37:
ce:65:0e:5b:52:ff:77:ed:a3:a4:eb:8b:cc:4f:73:
ee:37:84:f4:b9:34:76:05:37:86:75:0a:ee:17:99:
d8:19:62:3c:f5:16:75:e3:0b:c6:fe:8c:08:05:7e:
9a:9f:88:2d:f6:3a:0d:5b:f9:47:e2:74:f1:3b:7f:
9c:82:76:80:5f:17:9c:ae:fd:49:80:e5:22:da:24:
2a:51:d7:1a:b3:de:8b:51:28:2d:08:6a:2a:62:19:
9c:6a:e6:e4:16:85:98:ad:c2:b7:a6:e8:75:60:81:
69:6b:36:ff:f2:bc:b5:ce:85:d4:6b:7d:f3:5b:07:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:63:BE:D0:06:E6:56:30:17:72:E3:E3:76:E0:47:D5:1C:D3:56
X509v3 Authority Key Identifier:
keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.80.9.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d4:92:4e:de:74:d8:ab:a4:a0:e3:c4:82:50:b7:89:db:99:
84:ac:03:a2:15:be:11:49:7b:be:69:73:8e:f8:a8:89:d7:a7:
09:e0:f4:00:eb:12:03:93:e3:2c:84:63:96:61:df:82:b1:ba:
f6:83:71:c4:ea:6b:dd:50:0c:7a:3f:16:7e:dd:05:00:6e:6f:
59:61:97:19:45:4c:ee:a6:76:89:de:77:84:58:1e:26:b5:09:
28:60:95:11:c0:f6:47:7d:14:42:8c:fa:3b:df:79:54:8f:a6:
a8:77:0c:03:ec:e4:28:c7:fa:18:bc:0e:61:e3:34:70:e0:05:
1c:7d:8b:06:16:32:6c:eb:59:5a:5d:f1:4e:58:1a:13:af:9b:
59:a8:84:cf:9c:6f:a1:ea:20:68:3f:b4:9b:56:16:7b:fc:9f:
2f:e5:49:de:ff:a1:ae:a8:08:f6:a2:c5:c2:c7:7f:f4:65:ef:
03:00:b0:4c:6b:c4:b2:64:a4:55:3a:1d:42:fc:cd:11:75:09:
ca:b5:e9:d3:56:1b:3d:20:ef:7d:c7:e7:48:18:df:32:86:e4:
5e:ba:7d:a9:7f:64:ef:67:d0:d9:7c:0f:b0:0e:b4:8f:ed:98:
92:2c:a4:c4:dc:6d:25:ea:65:09:e6:64:17:23:c8:c1:72:cc:
f9:6b:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:14:02 2025 by rpki-client