
$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31372e302f32342d3234203d3e20313532303733.roa
File: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (raw, json)
Hash identifier: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=
Subject key identifier: BD:04:D9:EC:A7:6A:73:F5:AF:36:84:DF:5B:4E:62:77:92:58:B3:7A
Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
Certificate serial: 27E4BA00D0C29CFE54160FE8E50DE5852597DAB4
Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31372e302f32342d3234203d3e20313532303733.roa
Signing time: Fri 06 Jun 2025 07:00:00 +0000
ROA not before: Fri 06 Jun 2025 06:55:00 +0000
ROA not after: Fri 05 Jun 2026 07:00:00 +0000
asID: 152073
IP address blocks: 160.19.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl
rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 09:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e4:ba:00:d0:c2:9c:fe:54:16:0f:e8:e5:0d:e5:85:25:97:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
Validity
Not Before: Jun 6 06:55:00 2025 GMT
Not After : Jun 5 07:00:00 2026 GMT
Subject: CN=BD04D9ECA76A73F5AF3684DF5B4E62779258B37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:08:63:0c:dd:14:28:a6:1c:cc:91:1a:a2:
41:5b:1d:83:0e:31:25:0f:de:25:10:ff:3e:f3:b5:
5e:b2:df:d2:ee:0b:a0:12:3c:ea:06:6a:49:68:5f:
8b:61:c7:b9:60:80:73:6f:5f:3a:6d:15:83:6c:73:
77:10:d6:e0:29:40:74:9f:db:5b:b2:c4:48:77:0b:
76:99:cb:32:71:36:e9:25:c1:63:3f:87:23:8e:05:
7c:df:ce:7f:26:a9:ae:23:5d:f7:a0:3d:c6:05:32:
e1:2b:90:63:e9:43:af:02:cd:55:d9:e5:18:ae:1d:
7a:0f:82:10:ee:0c:46:51:ca:b1:a9:ae:bd:c9:09:
48:2e:72:74:d4:2a:00:46:20:d4:da:29:36:b7:f3:
6f:16:52:4e:49:ed:40:6b:d8:13:f9:89:96:fb:78:
1d:e1:cd:0b:fa:8c:36:1e:cc:64:df:d9:f7:f9:de:
90:94:b1:e3:50:f6:c9:cb:5c:7c:fc:8a:da:41:82:
fd:7c:19:02:d3:d6:85:9d:58:12:cb:e8:90:07:d9:
d8:a0:ff:28:63:ea:8e:f6:ae:52:0c:cb:aa:e9:57:
28:79:3d:b0:06:53:3c:f9:50:f1:2d:81:71:f3:1f:
b7:ff:09:71:7e:31:5b:7b:eb:af:b0:e9:be:d8:63:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:D9:EC:A7:6A:73:F5:AF:36:84:DF:5B:4E:62:77:92:58:B3:7A
X509v3 Authority Key Identifier:
keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31372e302f32342d3234203d3e20313532303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.17.0/24
Signature Algorithm: sha256WithRSAEncryption
87:84:36:8c:23:ed:4f:5a:d4:29:a0:db:29:4e:fd:af:f2:b8:
ee:55:6a:95:2a:2d:af:8e:b8:70:61:c9:69:f4:c3:23:a8:94:
dc:6e:24:76:f8:6a:34:29:62:60:c8:cc:ed:d7:83:36:c0:d4:
b6:bc:3c:60:b0:fd:ff:cc:9b:31:e5:18:93:5d:e4:89:8f:9f:
62:e6:9d:d4:f9:00:d0:73:45:7f:b6:72:f9:32:37:eb:0c:b2:
be:e9:a9:8a:14:8e:11:6a:96:53:5f:4f:9a:db:25:63:72:9c:
e4:c7:d5:a5:79:c9:9a:f7:2c:20:6c:ad:a6:70:14:2a:d1:cc:
b4:53:06:08:8c:20:cb:35:af:f4:63:96:b9:d2:c8:93:19:36:
ae:e7:00:99:13:1c:b6:f9:19:c8:78:8e:33:08:55:8a:32:5a:
20:f4:1e:20:9e:4a:e8:89:cc:97:30:6e:2b:c1:74:62:5a:18:
b3:0e:f3:4d:93:f4:97:08:49:86:66:f6:e1:19:3e:1f:12:8f:
b2:79:97:6c:e2:01:7f:e3:c8:4c:71:f3:16:a5:85:a2:e2:c0:
3c:4f:c4:fa:40:f0:22:79:2f:6a:72:24:f9:70:19:d1:ca:b6:
5a:7d:13:1f:0b:63:44:5e:5a:b5:fd:17:b5:d9:81:87:18:4f:
f7:8f:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:49:30 2025 by rpki-client