
$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/3231322e3131372e34382e302f32302d3234203d3e203538333736.roa
File: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (raw, json)
Hash identifier: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=
Subject key identifier: DF:1E:F8:EF:48:24:69:9B:8D:21:02:7D:0D:F4:92:81:A6:1A:19:EA
Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92
Certificate serial: 60C1A337DFA68163D30531CC9B81D0E4CA0D8963
Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/3231322e3131372e34382e302f32302d3234203d3e203538333736.roa
Signing time: Mon 02 Jun 2025 02:03:32 +0000
ROA not before: Mon 02 Jun 2025 01:58:32 +0000
ROA not after: Mon 01 Jun 2026 02:03:32 +0000
asID: 58376
IP address blocks: 212.117.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl
rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 09:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c1:a3:37:df:a6:81:63:d3:05:31:cc:9b:81:d0:e4:ca:0d:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92
Validity
Not Before: Jun 2 01:58:32 2025 GMT
Not After : Jun 1 02:03:32 2026 GMT
Subject: CN=DF1EF8EF4824699B8D21027D0DF49281A61A19EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:18:cc:22:93:e0:ee:3d:68:4c:0a:95:5a:
ba:33:74:65:37:ec:85:63:68:bd:e9:12:09:e6:09:
7c:00:7c:0a:5f:f4:9b:1f:ce:04:dd:af:83:d1:8e:
54:40:94:b2:4a:93:ce:57:ae:16:17:bc:79:39:16:
e5:80:f4:3b:4c:07:7a:e9:81:61:d6:dd:45:44:24:
20:aa:b4:e1:dd:8c:13:46:57:6b:3e:c2:28:7d:7d:
bb:ee:e9:b7:7f:8f:8c:e0:2e:03:86:5b:31:4f:1c:
06:dd:3d:fe:17:99:e4:e5:c4:e0:bc:3c:8b:3a:f8:
3e:14:70:c7:3b:ef:ee:4c:3a:62:b7:56:08:57:ef:
e0:0c:9a:a5:1f:4d:ff:96:ca:b9:19:e0:02:3a:c7:
95:f3:37:99:82:20:ef:f0:55:24:61:bc:63:87:28:
ce:75:c8:b5:fe:c8:7c:5f:2a:8e:92:0f:94:1e:26:
6d:e5:4a:14:c9:05:f3:e3:bf:f5:bc:bf:07:f2:62:
7d:c7:d9:21:e6:38:6b:6f:80:7f:ef:85:38:17:00:
58:61:78:c2:93:c8:71:1e:2e:45:71:3c:c7:6c:5e:
d7:b7:d9:cc:2f:06:d9:15:55:30:0c:ea:43:76:8a:
31:ce:3f:dd:08:92:fe:45:00:97:d1:9c:0d:30:c3:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:F8:EF:48:24:69:9B:8D:21:02:7D:0D:F4:92:81:A6:1A:19:EA
X509v3 Authority Key Identifier:
keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/3231322e3131372e34382e302f32302d3234203d3e203538333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:e8:6b:9d:63:8a:df:e5:bb:7e:7e:f3:33:40:5c:6a:a4:70:
e0:aa:c0:f8:cf:40:93:8a:f8:33:54:da:78:61:b6:fe:00:f8:
1b:29:de:f5:e4:97:7a:12:80:40:b1:50:0b:40:0a:ae:f0:73:
21:4a:ac:70:2b:d2:0f:5c:31:d3:68:b0:25:d0:27:69:57:68:
6d:80:0e:5b:15:ab:34:d3:d6:3f:a7:35:98:28:06:99:20:0e:
be:f6:a0:4c:79:e2:82:e5:cf:18:8e:4b:b6:45:5e:5a:c4:d6:
23:59:6e:d4:59:a3:a8:51:a6:6a:31:5f:88:92:5d:a2:03:15:
19:82:50:b8:48:bf:10:59:a0:27:b1:b8:04:53:d4:2c:65:f7:
a2:43:84:09:fe:96:36:ec:f8:7c:a4:20:23:8d:f6:ab:87:76:
e4:bb:7a:3e:67:5d:18:e8:62:17:d5:50:be:04:d5:4f:ec:48:
46:76:09:d3:a1:83:0b:be:a6:a4:ff:f8:b1:d5:47:3b:1b:a8:
f2:d0:ed:70:2a:29:6e:7c:0b:ec:f4:fe:d9:1b:0b:bd:d6:aa:
ba:3a:2a:a9:ab:fb:60:9e:f6:5e:fc:70:e5:29:e0:99:40:f1:
5a:78:9a:ed:b1:ed:1c:9a:b2:de:ea:fb:23:6e:4a:7e:26:17:
ee:21:eb:7f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYMGjN9+mgWPTBTHMm4HQ5MoNiWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2
MEQ0Q0Y5MjAeFw0yNTA2MDIwMTU4MzJaFw0yNjA2MDEwMjAzMzJaMDMxMTAvBgNV
BAMTKERGMUVGOEVGNDgyNDY5OUI4RDIxMDI3RDBERjQ5MjgxQTYxQTE5RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmxjMIpPg7j1oTAqVWrozdGU3
7IVjaL3pEgnmCXwAfApf9JsfzgTdr4PRjlRAlLJKk85XrhYXvHk5FuWA9DtMB3rp
gWHW3UVEJCCqtOHdjBNGV2s+wih9fbvu6bd/j4zgLgOGWzFPHAbdPf4XmeTlxOC8
PIs6+D4UcMc77+5MOmK3VghX7+AMmqUfTf+WyrkZ4AI6x5XzN5mCIO/wVSRhvGOH
KM51yLX+yHxfKo6SD5QeJm3lShTJBfPjv/W8vwfyYn3H2SHmOGtvgH/vhTgXAFhh
eMKTyHEeLkVxPMdsXte32cwvBtkVVTAM6kN2ijHOP90Ikv5FAJfRnA0wwxZDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU3x7470gkaZuNIQJ9DfSSgaYaGeowHwYDVR0j
BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw
QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0
Q0Y5Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMwLTk1ZGMtNGI3Mi1h
ZTFiLWFkMWU5OGIwZTE3OS8xLzMyMzEzMjJlMzEzMTM3MmUzNDM4MmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzUzODMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNR1MDANBgkqhkiG
9w0BAQsFAAOCAQEAnehrnWOK3+W7fn7zM0BcaqRw4KrA+M9Ak4r4M1TaeGG2/gD4
Gyne9eSXehKAQLFQC0AKrvBzIUqscCvSD1wx02iwJdAnaVdobYAOWxWrNNPWP6c1
mCgGmSAOvvagTHniguXPGI5LtkVeWsTWI1lu1FmjqFGmajFfiJJdogMVGYJQuEi/
EFmgJ7G4BFPULGX3okOECf6WNuz4fKQgI432q4d25Lt6PmddGOhiF9VQvgTVT+xI
RnYJ06GDC76mpP/4sdVHOxuo8tDtcCopbnwL7PT+2RsLvdaqujoqqav7YJ72Xvxw
5SngmUDxWnia7bHtHJqy3ur7I25KfiYX7iHrfw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:05 2025 by rpki-client