
$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
File: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (raw, json)
Hash identifier: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=
Subject key identifier: A8:D9:07:36:CE:C6:05:0C:19:47:60:88:C6:85:AC:04:3E:59:D9:6A
Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial: 1BC547F709BBA86932A3A88EF5FD6A12B99D243F
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
Signing time: Mon 02 Jun 2025 02:04:51 +0000
ROA not before: Mon 02 Jun 2025 01:59:51 +0000
ROA not after: Mon 01 Jun 2026 02:04:51 +0000
asID: 9785
IP address blocks: 116.213.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c5:47:f7:09:bb:a8:69:32:a3:a8:8e:f5:fd:6a:12:b9:9d:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Validity
Not Before: Jun 2 01:59:51 2025 GMT
Not After : Jun 1 02:04:51 2026 GMT
Subject: CN=A8D90736CEC6050C19476088C685AC043E59D96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:f6:7e:f9:78:d2:59:9b:eb:d1:9a:b4:0f:
68:ec:58:24:99:de:bb:b1:9b:cc:94:6a:8d:60:3e:
db:b5:eb:3c:1a:2f:2a:cd:f4:07:49:f0:48:77:29:
a0:be:fb:b2:0c:a1:31:c9:13:3f:ec:eb:07:fa:9d:
f2:1a:7d:b1:6c:8a:c7:85:73:01:21:32:3f:80:2f:
60:4a:d3:93:d3:17:c4:d0:ae:ac:44:d2:5c:dd:2d:
69:da:9f:39:75:db:81:8a:8a:8e:ef:66:44:3a:16:
11:46:e9:78:04:fd:e8:e5:98:93:cd:b0:78:18:a6:
cb:5c:4a:a0:82:11:d6:45:77:fa:7f:cc:7a:d4:3b:
1b:53:b5:e9:70:28:73:90:f3:65:69:03:a9:f8:76:
c1:d6:04:13:43:05:4c:e9:9a:66:6c:4d:43:24:f8:
e9:a4:8a:a1:1c:2c:27:b0:15:c0:d8:43:dc:61:cc:
41:ef:a0:eb:bc:ad:04:7c:08:c8:e9:bc:36:08:35:
08:5e:ba:44:5b:bd:07:0e:78:53:0f:4b:a7:35:db:
38:49:9d:bc:f9:e8:1b:b6:84:53:59:7e:e4:19:f9:
ee:63:9b:26:98:66:54:59:df:d9:bd:dc:7f:9c:ec:
9f:47:ea:9e:ed:ad:ec:53:87:30:f2:fe:29:d3:39:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:07:36:CE:C6:05:0C:19:47:60:88:C6:85:AC:04:3E:59:D9:6A
X509v3 Authority Key Identifier:
keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.213.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:fb:55:d4:62:bf:5d:7c:f2:a0:b6:10:00:fa:72:3e:cc:c8:
5e:e3:5e:4c:03:77:fd:c5:98:c1:03:14:51:85:20:ec:9b:b1:
84:be:c9:6b:84:9b:20:6d:52:65:4e:1c:44:d2:ca:c9:47:05:
02:99:e0:66:fe:ee:77:15:98:fe:48:0f:eb:ac:e5:33:d5:66:
43:c0:9f:65:6b:d7:ee:0a:0b:b5:b3:17:b5:32:f6:06:78:fc:
99:56:c7:10:6c:e0:53:1a:45:52:6a:2f:4e:f7:68:85:f5:1c:
0e:ed:96:f4:69:b3:71:8f:51:79:09:26:53:a3:cc:be:77:62:
32:89:70:52:7f:bf:98:85:c0:be:02:13:e6:a3:a9:a1:a5:dc:
40:22:aa:3f:ac:f4:13:a6:03:11:cb:e2:f1:53:b7:27:ec:74:
b0:d0:c0:3f:2e:f2:ae:43:2c:65:94:50:7f:64:e0:08:1d:e2:
38:b9:b4:48:d4:1b:46:be:57:6a:e8:74:74:6d:87:b4:15:17:
9f:df:4c:0a:99:c3:0f:e8:9a:69:dc:97:3e:b0:05:6c:18:1a:
90:80:c0:9c:c2:d3:36:80:d1:14:fa:d9:3e:01:bc:ad:38:e3:
76:56:0e:a3:7b:0e:29:3d:9e:eb:70:44:22:ed:46:15:0d:bb:
ee:02:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:56 2025 by rpki-client