
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
File: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (raw, json)
Hash identifier: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=
Subject key identifier: A8:01:F7:35:CF:AC:66:3F:51:B9:D0:34:21:72:2F:39:C1:84:CA:C1
Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial: 4E185F01DEE265B16353D7A38EB4EDAD2C37808D
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
Signing time: Mon 02 Jun 2025 02:03:00 +0000
ROA not before: Mon 02 Jun 2025 01:58:00 +0000
ROA not after: Mon 01 Jun 2026 02:03:00 +0000
asID: 24523
IP address blocks: 203.84.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 17:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:18:5f:01:de:e2:65:b1:63:53:d7:a3:8e:b4:ed:ad:2c:37:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Validity
Not Before: Jun 2 01:58:00 2025 GMT
Not After : Jun 1 02:03:00 2026 GMT
Subject: CN=A801F735CFAC663F51B9D03421722F39C184CAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:60:34:98:d0:db:05:11:ed:52:65:de:59:
e5:47:68:c7:45:dc:90:11:df:37:09:54:6c:dc:d5:
19:b0:ce:36:fa:2f:27:4d:8d:27:28:c4:e6:b7:99:
0a:d4:a4:02:62:bb:a0:ca:88:46:07:05:cc:8a:91:
ff:e4:1f:e7:61:ce:1c:b2:23:ce:1b:1b:cf:ae:f3:
9e:7a:f0:9e:59:1c:22:2d:91:43:bd:bf:94:96:f9:
d5:cb:db:2e:fc:e0:a5:ec:b7:33:f6:22:07:ca:08:
ab:af:74:16:59:5b:5b:4b:02:43:09:f0:d5:93:5a:
bc:f6:7e:29:c5:71:62:88:6f:f5:00:b2:27:a0:88:
7f:13:d1:dd:7b:92:4c:7d:72:f5:bc:45:ba:68:30:
cc:bc:e7:f8:0a:8b:1c:48:ed:15:16:69:fa:16:00:
54:96:22:23:92:45:59:00:a0:fe:25:ea:59:c9:3d:
a1:4a:12:47:7c:e4:99:c0:04:ee:4b:d2:2e:e0:37:
15:6d:58:5c:56:da:cc:56:64:29:c6:1f:5e:5a:81:
50:50:11:78:52:66:d2:1b:14:52:b0:74:24:a2:7e:
17:1b:6c:ab:6b:34:3e:76:12:f6:76:ff:40:b4:47:
bf:bc:28:35:dd:ad:4f:3e:12:c4:9e:d6:c3:6f:e0:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:F7:35:CF:AC:66:3F:51:B9:D0:34:21:72:2F:39:C1:84:CA:C1
X509v3 Authority Key Identifier:
keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.152.0/21
Signature Algorithm: sha256WithRSAEncryption
17:b7:91:63:cd:8b:81:03:1e:4e:93:f8:7c:d5:84:5f:85:68:
72:f7:ff:20:dd:f2:a0:58:0a:1f:c2:4c:5b:21:37:95:32:99:
e7:50:ea:ec:98:a4:e5:da:b9:5a:11:ca:52:54:e8:8c:76:d5:
53:17:49:10:32:4e:f5:31:0b:d6:10:71:8a:0f:78:fe:16:13:
bd:2d:88:f0:ab:ea:df:8f:16:37:80:3b:02:23:fe:09:da:b9:
09:95:e2:89:40:b8:40:f6:1c:67:56:da:8b:14:4d:4a:e0:bd:
f5:c1:ef:11:05:ce:2a:8a:65:90:67:2d:36:11:06:6e:46:2a:
ba:d7:eb:54:0a:b4:5a:5f:02:d9:c4:0d:01:43:4d:35:77:d2:
af:89:e3:07:51:b3:95:48:23:95:2d:0d:35:ab:e0:37:b5:cb:
f6:0e:f4:3a:75:42:22:55:93:3e:ac:82:40:7c:cc:99:40:83:
01:1f:5a:8e:9c:d9:64:a2:38:10:a4:47:5a:51:da:b6:6b:2f:
08:7b:fe:c5:0d:8c:44:aa:b4:57:72:45:92:86:ff:fb:f6:42:
b7:f9:af:0c:6c:31:ec:85:cc:7f:65:ef:9d:35:a8:f4:a2:4d:
83:e2:c3:b5:a7:2a:c1:f2:e1:83:27:25:cb:84:54:95:91:39:
e8:f1:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:07 2025 by rpki-client