
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3131302e352e39362e302f32302d3234203d3e203234353233.roa
File: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (raw, json)
Hash identifier: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=
Subject key identifier: 41:D0:B9:07:F9:C7:5F:59:5F:1F:CD:18:46:F0:E0:54:10:3A:35:00
Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial: 19D58841DEE30AF17CDC89D2C572863E12ABF48E
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3131302e352e39362e302f32302d3234203d3e203234353233.roa
Signing time: Mon 02 Jun 2025 02:03:00 +0000
ROA not before: Mon 02 Jun 2025 01:58:00 +0000
ROA not after: Mon 01 Jun 2026 02:03:00 +0000
asID: 24523
IP address blocks: 110.5.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 17:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d5:88:41:de:e3:0a:f1:7c:dc:89:d2:c5:72:86:3e:12:ab:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Validity
Not Before: Jun 2 01:58:00 2025 GMT
Not After : Jun 1 02:03:00 2026 GMT
Subject: CN=41D0B907F9C75F595F1FCD1846F0E054103A3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:4c:9b:17:5a:ee:b9:c9:f6:95:d2:3f:1f:
e5:55:9d:4d:eb:19:57:86:4f:bb:50:e8:07:25:8e:
f4:35:ad:0b:db:38:40:f0:63:e7:7b:5c:63:96:6a:
fb:58:85:3b:f9:0c:f0:d1:8b:e4:60:37:a4:b1:8f:
43:18:77:bd:71:c5:09:b0:2d:e8:44:89:58:11:2c:
dc:04:e2:36:0b:d0:c9:cd:b7:fe:a9:aa:0a:08:a8:
f8:0b:52:0a:1e:28:3c:81:09:b0:66:5d:73:e3:37:
ef:31:9a:fa:b2:c1:4e:bf:6a:22:88:e9:f8:9e:7b:
a1:30:69:77:81:65:87:f5:36:5f:80:5e:8a:57:7b:
7a:1f:a2:8a:81:8e:c1:94:15:29:54:a8:ce:54:03:
bd:2f:6d:a7:8f:0f:b6:de:f2:47:3d:18:29:de:7b:
3b:43:6b:7a:0d:61:3a:f0:9d:db:fb:8c:cd:f5:0e:
42:0d:bf:95:a7:03:d6:f1:c3:03:1e:11:35:0e:fe:
6b:b1:5a:69:b6:ec:a9:38:0c:dd:53:fd:b9:00:e1:
5c:46:e2:a6:6a:65:e8:39:2f:c8:f7:b2:50:4f:e5:
1b:4f:bb:11:a2:34:52:8b:6c:21:c5:d7:a8:75:23:
89:c3:9c:b4:d1:cd:09:92:5d:a0:a8:b0:b6:67:27:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:B9:07:F9:C7:5F:59:5F:1F:CD:18:46:F0:E0:54:10:3A:35:00
X509v3 Authority Key Identifier:
keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3131302e352e39362e302f32302d3234203d3e203234353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.5.96.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:f7:1e:f5:70:54:c2:b5:10:84:b8:9b:8f:e4:0f:f4:0e:61:
8c:bd:c5:e2:38:20:91:e2:62:a3:22:26:d1:37:82:43:13:68:
f7:58:7e:22:1f:4e:2c:1a:5d:e5:00:33:5b:bd:3c:9d:28:b3:
aa:be:49:9b:a2:f0:2c:86:9a:08:25:22:32:f5:df:f7:fe:ce:
3c:a0:ac:a4:3b:14:54:e2:1b:1a:f5:61:fc:69:ac:dc:d6:54:
57:40:24:db:b0:ed:14:24:a0:b6:f8:60:da:2e:36:ac:aa:03:
32:a9:31:f6:c3:68:a7:3a:d1:27:3e:0c:76:ad:f6:3a:70:3d:
82:d9:fe:f9:f3:e0:fb:a4:16:b9:3b:90:55:a0:93:e8:63:f1:
ae:29:2a:62:09:f5:8f:b2:0f:96:47:05:90:45:07:01:5c:59:
fe:ac:e8:8d:1e:4b:13:df:cb:1e:4f:93:ff:40:04:2c:a1:5e:
6a:40:53:32:40:6c:4f:15:b7:a5:55:26:ac:ef:37:a2:52:0b:
99:86:57:c0:41:42:91:55:a0:cf:d8:dc:24:0c:c4:78:4d:9e:
08:8c:4c:47:76:6c:53:47:71:e9:da:51:bd:9a:37:32:5b:3f:
ae:9f:be:e9:23:d3:f3:c8:dc:c1:52:4e:da:20:35:b0:e4:36:
66:8d:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:11 2025 by rpki-client