
$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/3136302e32322e39332e302f32342d3234203d3e20313532383335.roa
File: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (raw, json)
Hash identifier: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=
Subject key identifier: 85:D8:7C:20:B4:12:3C:B0:FD:93:F6:49:E8:D1:10:A0:B7:AE:40:BD
Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB
Certificate serial: 3782F4D911C56880FC73EAB9925F1CA769F81927
Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/3136302e32322e39332e302f32342d3234203d3e20313532383335.roa
Signing time: Mon 27 Oct 2025 11:00:01 +0000
ROA not before: Mon 27 Oct 2025 10:55:01 +0000
ROA not after: Mon 26 Oct 2026 11:00:01 +0000
asID: 152835
IP address blocks: 160.22.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl
rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 18:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:82:f4:d9:11:c5:68:80:fc:73:ea:b9:92:5f:1c:a7:69:f8:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB
Validity
Not Before: Oct 27 10:55:01 2025 GMT
Not After : Oct 26 11:00:01 2026 GMT
Subject: CN=85D87C20B4123CB0FD93F649E8D110A0B7AE40BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:b6:79:f8:c4:ee:bb:35:f4:89:bc:a4:a8:
e0:45:ac:f5:b7:4b:75:43:21:fe:79:bc:b5:23:27:
73:8b:ed:c9:99:11:cb:b0:6e:e1:45:38:dd:e7:7d:
bc:ea:e1:d3:a5:d6:50:28:93:0c:28:38:71:6f:fd:
0b:d8:a7:10:75:14:c5:20:d0:2a:2d:17:de:57:a4:
e1:1f:7b:3d:9a:d7:46:1b:10:dc:73:52:1e:4e:29:
aa:27:58:c4:51:36:ac:ed:47:fe:51:30:27:94:10:
c2:17:c9:fe:94:f0:fa:85:07:17:9a:a8:57:dc:1c:
28:16:6f:51:9c:a8:c2:81:07:e3:c9:37:6d:f6:74:
1c:40:70:ac:37:b8:a0:7f:1d:93:65:30:4f:cb:46:
ca:ed:b9:07:24:9e:58:b2:96:d0:4e:9d:a5:08:5f:
70:75:3a:6b:6c:5a:82:63:1d:19:9e:d6:9e:a7:b6:
54:f0:27:c2:df:a3:ff:01:f5:e3:3f:fe:8d:2d:99:
0f:ef:d7:41:74:90:7c:fd:58:c7:53:1a:01:28:d1:
32:5c:ba:04:2c:60:40:e3:ec:b2:0b:21:43:39:9e:
63:f2:be:9b:9e:b2:17:6c:11:2c:c7:47:c0:3f:9c:
9d:36:f5:31:70:10:a5:3c:65:b6:d4:be:3b:e6:57:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:7C:20:B4:12:3C:B0:FD:93:F6:49:E8:D1:10:A0:B7:AE:40:BD
X509v3 Authority Key Identifier:
keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/3136302e32322e39332e302f32342d3234203d3e20313532383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:28:ae:b4:33:c3:a7:e1:7e:b7:63:eb:ad:bc:46:40:49:e2:
2c:a3:bd:c5:80:ad:23:0c:9f:a4:9a:5e:5e:7e:df:f7:81:9e:
07:50:dc:7d:ab:b6:0c:b2:31:23:ad:89:41:a9:39:f5:f1:6c:
f0:07:99:47:20:e1:5d:89:25:bd:a5:4e:8d:7c:17:08:8c:26:
6a:40:34:06:f0:b2:7d:c2:50:52:42:c4:d0:07:9c:f2:69:3e:
f0:ee:6b:fd:41:8d:9c:18:ec:ea:82:c9:77:f8:6b:fa:65:47:
9f:72:1b:47:e2:aa:a3:8a:d9:df:35:b5:88:d0:fc:38:bd:9f:
28:f3:94:b2:18:7a:25:37:c8:8f:f7:68:42:df:55:18:99:78:
60:2b:53:cb:c8:aa:15:11:bf:2e:88:bc:52:2c:9e:01:10:5a:
16:28:70:f3:8e:45:60:03:ea:cd:b1:48:67:ce:7b:f2:e6:7c:
a4:fd:75:17:5d:7b:77:0e:62:8d:6d:e7:89:29:5e:2b:a5:4f:
33:71:54:9d:e9:7f:ed:b7:d7:76:5f:9b:99:36:7b:a2:1b:0d:
07:68:ba:2a:ca:da:ee:50:e5:e1:b7:23:12:a4:0f:60:df:ff:
31:e9:dc:f1:a3:04:01:90:1e:5c:39:34:0d:94:4e:33:26:75:
c8:a3:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:49:16 2025 by rpki-client