
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa
File: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (raw, json)
Hash identifier: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=
Subject key identifier: A9:47:E8:BC:2F:6E:3E:ED:73:2E:90:58:54:E5:B2:C7:18:29:F0:1B
Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358
Certificate serial: 4C1E92A9F90EC9780EB9D8F24987FBDBD53F5679
Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa
Signing time: Mon 02 Jun 2025 01:02:54 +0000
ROA not before: Mon 02 Jun 2025 00:57:54 +0000
ROA not after: Mon 01 Jun 2026 01:02:54 +0000
asID: 138113
IP address blocks: 2404:1040::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1e:92:a9:f9:0e:c9:78:0e:b9:d8:f2:49:87:fb:db:d5:3f:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358
Validity
Not Before: Jun 2 00:57:54 2025 GMT
Not After : Jun 1 01:02:54 2026 GMT
Subject: CN=A947E8BC2F6E3EED732E905854E5B2C71829F01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:4d:30:a1:86:81:55:69:11:ce:58:75:91:
17:5b:eb:2c:b8:2e:92:4e:8b:37:5a:26:bf:c0:24:
ed:d6:df:c5:4e:39:af:88:06:f5:46:b9:b1:4b:da:
9a:26:71:b6:f4:86:0c:9d:9d:6c:82:38:b5:ed:1d:
cd:b3:6a:df:45:42:71:f1:ea:81:59:e5:ec:5a:bd:
c7:8d:13:e4:3f:85:a4:b1:1b:a7:98:51:77:77:0a:
03:1b:fe:d3:d7:d7:ae:c5:21:87:0e:dd:06:07:12:
70:dd:e9:07:7c:31:7a:05:37:75:14:65:30:57:9f:
2a:e1:41:37:cd:a7:fb:8d:21:57:af:88:02:6f:76:
ca:ca:20:40:e3:21:16:34:1a:9b:a6:0f:49:8f:31:
27:91:da:86:a8:e3:9e:c8:ac:0e:6c:ee:d4:59:b7:
5f:eb:99:c9:7d:b6:a1:24:2f:3f:10:e0:2f:58:11:
dc:2c:cb:d6:57:67:1a:8d:86:fa:f1:84:6b:86:7e:
7d:77:d3:13:c8:10:a8:be:da:92:bf:21:1d:99:24:
80:d2:4d:3e:5d:2b:a4:ac:23:02:5a:02:25:99:cf:
6c:d0:c2:c5:60:2a:20:1e:18:1f:30:f5:ee:3d:b7:
e2:97:99:99:e1:fa:01:0e:d2:e3:06:a1:95:c7:a4:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:47:E8:BC:2F:6E:3E:ED:73:2E:90:58:54:E5:B2:C7:18:29:F0:1B
X509v3 Authority Key Identifier:
keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:1040::/32
Signature Algorithm: sha256WithRSAEncryption
91:a2:48:f7:ea:e6:fa:71:af:f8:1a:62:49:6c:da:82:42:29:
4a:dc:17:0f:8b:a1:5b:b8:b0:ac:43:8a:c4:b6:79:96:3f:a1:
d3:33:e5:3a:62:64:c3:9d:aa:b6:37:f9:05:65:eb:72:79:f2:
21:2f:c3:e1:82:9e:b3:3f:eb:1a:6c:47:59:5a:2c:10:ff:1a:
17:4c:bb:92:52:50:28:00:8c:11:60:73:23:8b:13:81:be:65:
b2:a2:c7:53:f0:1e:eb:a1:ea:90:62:3e:c0:83:2b:51:eb:73:
43:35:f1:c6:74:60:9c:ad:c4:61:c5:66:a6:38:52:44:55:de:
02:ff:fd:6b:b2:b2:25:91:91:43:62:e6:df:e8:72:1e:49:ed:
17:d8:cb:9d:b6:c7:ff:37:e5:7f:b5:d5:50:e3:9b:d8:80:56:
bc:e0:05:69:c6:0a:39:a7:00:a6:49:09:60:6d:98:77:b1:ff:
7b:be:56:8b:e8:a6:0d:52:10:75:08:81:3d:f7:3c:d6:9b:cc:
07:0a:fd:9f:cb:1a:61:5e:9c:e2:84:ec:5c:6c:f9:18:31:a1:
12:65:25:3b:30:7c:10:b1:a5:25:be:db:93:b3:c3:b0:3a:a5:
cf:12:c3:b4:6e:d9:89:7b:ea:94:1b:fd:0a:ee:98:16:ce:c8:
40:f1:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:56 2025 by rpki-client