
$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
File: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: 5IMht0xKCCP0U9uwz1XPxOK7yxTeYdiQoJjjSz9Mxco=
Subject key identifier: 11:B7:33:10:36:1E:D7:6E:6F:BE:9D:F9:AC:D3:12:1B:52:B4:59:57
Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial: 2E362CB0A307A90D31CB36D33641FEB60BA1E751
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
Signing time: Tue 15 Jul 2025 06:00:01 +0000
ROA not before: Tue 15 Jul 2025 05:55:01 +0000
ROA not after: Tue 14 Jul 2026 06:00:01 +0000
asID: 23679
IP address blocks: 43.230.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 07:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:36:2c:b0:a3:07:a9:0d:31:cb:36:d3:36:41:fe:b6:0b:a1:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Validity
Not Before: Jul 15 05:55:01 2025 GMT
Not After : Jul 14 06:00:01 2026 GMT
Subject: CN=11B73310361ED76E6FBE9DF9ACD3121B52B45957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:f6:0d:d4:8a:df:0b:af:b0:6e:a9:8d:99:
41:fc:06:2a:93:10:e2:fd:93:e0:b9:13:2c:af:d7:
ed:13:06:99:b0:ed:98:1f:26:82:42:8e:1f:22:68:
62:a5:b6:d3:44:38:1e:c5:b6:c5:37:42:3d:4d:2f:
78:64:2c:ff:36:81:f4:8d:46:b9:6f:0a:21:d4:e7:
fc:fb:6d:14:fa:7c:a3:80:46:36:00:ea:c1:4b:6f:
d0:57:ed:c8:17:78:69:32:eb:fb:c7:04:da:45:ec:
85:a0:c5:d2:a3:c5:fd:ae:cf:74:00:3d:96:40:b0:
ac:be:1c:1a:05:9e:34:91:49:91:b6:74:53:99:5e:
d4:56:18:b0:74:86:e2:90:ca:7c:a7:db:6d:8d:bf:
16:2c:93:57:48:7d:f7:d7:d3:74:b8:35:81:71:9c:
a3:31:6d:7e:c1:c8:57:55:b0:95:75:4e:68:4b:99:
2c:e2:cc:c2:14:35:79:0f:b8:ab:ed:46:2e:9f:84:
d6:00:3d:19:85:81:bc:36:fa:24:21:56:9e:43:f5:
a0:54:d7:03:f7:e5:68:97:bf:c9:a6:8f:b2:fe:fe:
a1:2e:91:f1:31:67:33:c8:85:69:9c:3f:e5:8c:66:
ac:24:5d:72:dd:63:14:eb:5b:d7:fe:c5:f7:20:fa:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B7:33:10:36:1E:D7:6E:6F:BE:9D:F9:AC:D3:12:1B:52:B4:59:57
X509v3 Authority Key Identifier:
keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.130.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:c4:4b:92:98:64:f3:d1:ab:cb:be:a4:b3:89:9b:e7:27:
84:ee:51:1d:a3:c1:fa:28:61:fa:ff:95:c9:cd:28:ef:a4:a8:
69:38:73:c6:e5:c7:79:81:e9:d0:76:a9:fd:a9:c4:3a:76:2f:
71:62:d5:88:41:e9:83:d9:98:15:62:46:fc:ca:fa:55:f6:9f:
f1:e2:38:b2:53:f5:e9:d9:aa:58:28:b3:dc:df:f9:02:0e:50:
32:56:04:32:21:5f:b7:4e:9f:41:09:9b:70:5e:88:ef:05:38:
e8:72:97:e6:ae:4e:ca:15:dc:9f:c9:ae:96:b6:ac:eb:b8:d0:
a5:80:9e:f8:0b:39:93:7b:b4:a5:16:46:04:b1:43:ba:fa:b5:
d7:9d:f5:0d:24:d0:09:a9:c4:e8:4e:6d:12:16:48:a9:9f:67:
2d:c7:31:ef:e6:41:ba:30:cc:c1:d3:c3:d7:21:e2:cc:9f:b3:
64:d3:8c:22:10:79:c0:42:d6:b7:d2:e8:49:d7:3d:7f:bd:c0:
fc:6f:d6:df:16:9d:5c:55:8c:be:cd:85:b9:ab:4b:33:9e:ef:
1d:bf:43:f8:b4:ec:30:c7:f7:ff:6b:0a:94:65:1e:68:1e:a4:
33:f1:0a:6f:e8:40:f6:03:4e:6f:d7:92:47:70:88:a6:58:53:
6d:af:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:41 2025 by rpki-client