
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
File: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (raw, json)
Hash identifier: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=
Subject key identifier: 6A:F7:D4:62:5D:7F:16:4C:28:09:24:4C:1F:41:1B:FE:14:6C:B8:D5
Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Certificate serial: 3378E13BFE8BB95565F088A232D9F70BCCD13211
Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
Signing time: Fri 20 Jun 2025 15:00:01 +0000
ROA not before: Fri 20 Jun 2025 14:55:01 +0000
ROA not after: Fri 19 Jun 2026 15:00:01 +0000
asID: 141609
IP address blocks: 157.66.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl
rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:78:e1:3b:fe:8b:b9:55:65:f0:88:a2:32:d9:f7:0b:cc:d1:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Validity
Not Before: Jun 20 14:55:01 2025 GMT
Not After : Jun 19 15:00:01 2026 GMT
Subject: CN=6AF7D4625D7F164C2809244C1F411BFE146CB8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:24:99:e1:96:57:62:1d:fd:d8:32:9f:ad:
e8:00:2b:cd:8e:48:d9:37:f7:32:a7:04:f9:1f:70:
50:3a:1a:5b:39:65:82:f7:97:a6:b0:b0:41:e8:1b:
b6:0b:07:31:21:08:59:88:e5:12:49:13:a7:64:cd:
19:68:6b:2c:f9:6e:9d:b1:00:37:89:e3:a1:9f:33:
04:81:6d:d8:a5:da:23:f5:2a:d8:33:99:d9:00:72:
dc:e6:fb:16:cb:e1:af:9c:a6:37:5c:0c:30:c6:79:
ff:01:9f:7a:3f:5a:d1:65:35:f7:22:c0:05:d9:63:
5b:bb:b3:04:2b:46:f6:fc:6c:86:83:74:31:c7:14:
f1:1c:46:b4:b7:1b:c4:aa:e7:bd:ba:e2:69:07:37:
58:da:4d:8e:79:be:71:7e:fe:b0:7f:c2:4c:ff:56:
4d:00:16:23:8e:94:87:93:d1:c1:2e:26:f2:64:d3:
73:b6:c5:d3:f6:c7:2f:77:7a:ef:d6:66:a4:b4:1b:
33:c9:e4:0c:37:2a:e2:e5:22:7c:71:ed:a1:1b:73:
bb:97:fa:08:6d:20:ca:eb:3e:0b:d5:fe:5e:e9:61:
78:15:41:5e:1b:e1:a1:c4:43:f5:46:2f:61:c3:50:
c6:71:8f:6b:f5:7f:c8:a7:21:31:eb:7b:76:56:0e:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:D4:62:5D:7F:16:4C:28:09:24:4C:1F:41:1B:FE:14:6C:B8:D5
X509v3 Authority Key Identifier:
keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.62.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:74:5b:1b:e1:8f:63:d3:00:2a:46:3d:1f:bc:8e:74:52:9b:
d4:f8:66:e6:53:ab:41:9b:4d:c7:ce:36:6f:b2:c7:9c:bd:b0:
a5:93:11:78:c6:d5:bd:f3:08:20:b3:3e:0b:8f:8f:49:1d:a5:
22:7b:fb:11:41:9e:db:fe:ec:df:4b:ea:00:db:e6:b4:0f:61:
63:c9:65:76:36:55:6a:8b:97:87:45:45:42:ea:7f:b7:e3:71:
33:91:c8:f6:41:5c:af:8d:55:98:8b:a3:72:e1:c9:55:45:b2:
f5:a0:dc:f6:c6:21:b6:be:87:b9:84:29:98:dd:c8:f4:34:ad:
7e:29:57:26:e7:5a:e6:8e:03:d8:b2:f1:7b:0c:3e:2a:84:27:
ef:d4:1c:9d:87:d9:cf:59:c9:78:d9:58:ca:df:ca:55:97:6a:
4b:27:80:ad:1a:55:6d:52:9b:4c:66:9e:92:11:08:26:fd:a3:
58:69:e3:b7:92:37:9c:33:be:0d:e7:36:25:2c:d8:dc:31:67:
63:2e:14:b9:0c:ba:9b:a7:3b:95:c5:62:dc:5c:75:c0:35:71:
7d:88:49:48:54:79:2f:09:ca:34:74:03:e0:f8:ab:ad:87:9e:
6c:8f:eb:6e:26:85:dd:40:66:16:73:e9:1a:5c:54:50:1c:4c:
a1:4e:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:21:02 2025 by rpki-client