
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
File: 3138322e32332e36342e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier: gs0NWyAC6x14vl65GdmTB8HcPqy7gwj8XVdRVfiA+78=
Subject key identifier: 82:A2:24:58:0A:2B:15:CE:8F:9A:56:00:82:CE:B0:21:B4:58:FE:FA
Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial: 51A8472AEBA26E44D783FA5CDF72C68E4CF918AB
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
Signing time: Mon 02 Jun 2025 02:01:37 +0000
ROA not before: Mon 02 Jun 2025 01:56:37 +0000
ROA not after: Mon 01 Jun 2026 02:01:37 +0000
asID: 38513
IP address blocks: 182.23.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 09:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a8:47:2a:eb:a2:6e:44:d7:83:fa:5c:df:72:c6:8e:4c:f9:18:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Validity
Not Before: Jun 2 01:56:37 2025 GMT
Not After : Jun 1 02:01:37 2026 GMT
Subject: CN=82A224580A2B15CE8F9A560082CEB021B458FEFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:e4:f3:cd:7d:de:a1:ef:65:ee:79:a3:79:
50:e3:2c:ba:79:d7:3c:a4:c4:18:ac:73:ea:57:0e:
6c:44:c8:ed:4e:c6:4c:56:03:df:18:2a:de:8f:72:
24:68:11:4e:6e:22:be:ff:5e:df:ae:54:e1:c2:42:
cd:a3:6f:93:74:0a:9b:af:6d:b6:40:66:c5:bb:0d:
08:26:50:5d:35:d5:37:c1:46:ba:5b:77:fa:d0:2a:
ae:b4:16:23:8a:23:62:06:06:92:19:ff:8b:8b:b1:
4f:dd:36:0a:c6:f4:64:bd:6e:ca:3c:68:2b:3c:4d:
4f:1a:14:33:ac:cd:1c:70:29:f1:f1:50:ab:48:b2:
3c:60:89:6c:1f:ed:ed:c8:a2:91:ed:25:c7:0b:59:
be:8d:93:f0:c6:61:e0:97:7f:71:2d:73:2f:52:9b:
42:a1:5a:aa:ef:d0:a1:ce:68:70:2a:0e:92:62:bb:
b6:66:d8:8d:a1:9f:50:60:cf:ec:f5:bf:77:7c:bb:
ef:13:65:ef:0c:95:57:65:3e:b6:0b:62:bc:d2:85:
71:d0:29:a3:09:3c:fc:b9:8a:b5:4e:b1:b3:16:31:
90:c3:8e:62:64:b8:a7:a4:46:ef:03:21:2e:29:a5:
3c:9c:e0:6f:49:db:ab:54:b0:2d:19:a4:c1:93:21:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:24:58:0A:2B:15:CE:8F:9A:56:00:82:CE:B0:21:B4:58:FE:FA
X509v3 Authority Key Identifier:
keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.23.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c2:f0:a0:c9:31:50:50:69:36:f9:54:06:17:6c:41:ce:08:
92:5c:96:97:da:f8:ec:04:8d:d7:64:80:06:e8:b9:b9:95:f2:
83:b2:11:c5:3a:4f:8e:8d:4b:c1:84:75:c7:45:41:69:17:30:
2a:98:f3:b2:5e:fb:04:3a:af:07:4b:d2:88:33:fe:96:0c:92:
ab:4f:53:bd:e0:d5:0a:4d:13:0d:33:99:15:31:3c:e6:f7:ca:
63:fd:7c:b1:1e:69:44:8e:9c:b4:8d:5f:ad:9e:5a:4b:46:19:
04:00:fd:5f:40:a2:9b:78:cd:a9:1b:96:19:4a:ab:f6:83:bf:
82:f3:e4:e6:57:b3:a4:cf:87:85:f8:5d:7a:77:73:c0:3c:0f:
83:79:c9:3f:bf:5d:82:af:60:8b:f2:59:f7:7c:92:76:70:71:
08:da:90:af:fb:45:72:aa:fe:84:b0:f3:02:78:7e:9a:68:8b:
08:22:c0:b5:30:1e:de:0b:30:fe:85:97:92:d5:f7:b6:29:95:
d8:96:e1:6a:8a:8b:8b:1c:07:9b:64:ed:54:08:7f:c1:7a:a8:
ce:11:f4:fc:da:8d:8b:91:20:d3:fa:8f:a2:af:d8:9a:f4:61:
87:eb:3c:14:f9:98:9c:e2:1f:95:68:dd:19:99:f4:a0:86:19:
58:0e:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:13 2025 by rpki-client