
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa
File: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (raw, json)
Hash identifier: 8DzkDXJ0hjv41WhOioNYW4aCuQ61HA42qiPoGr3H0A0=
Subject key identifier: A7:5F:6D:6A:B0:9F:79:F9:FB:96:4E:33:4B:18:A9:A2:34:02:0E:1F
Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial: 4C3AE0F273F421B2F365C06E3148C6308196D388
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa
Signing time: Wed 08 Apr 2026 13:25:42 +0000
ROA not before: Wed 08 Apr 2026 13:20:42 +0000
ROA not after: Wed 07 Apr 2027 13:25:42 +0000
asID: 63827
IP address blocks: 43.243.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 09:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3a:e0:f2:73:f4:21:b2:f3:65:c0:6e:31:48:c6:30:81:96:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Validity
Not Before: Apr 8 13:20:42 2026 GMT
Not After : Apr 7 13:25:42 2027 GMT
Subject: CN=A75F6D6AB09F79F9FB964E334B18A9A234020E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:6c:23:1e:b5:a8:a8:c3:6d:07:1c:9a:59:
c3:a1:dd:b8:48:ef:1f:ce:dd:ae:2f:4b:90:6f:33:
fa:e7:b4:03:1d:82:b5:40:0e:8c:e1:42:62:c6:05:
9a:4b:47:0c:8f:5b:07:95:a3:22:c9:b5:95:e5:e2:
8d:9e:f0:f1:fe:9c:a5:e1:e1:cb:57:a9:1a:d9:a4:
a7:ed:c1:96:2a:b0:95:d7:cc:41:14:5c:63:46:4c:
93:aa:d5:48:08:8f:dc:c1:8b:ed:d2:56:44:b9:8d:
b6:9c:06:9e:25:c2:a8:1b:2a:92:6e:f9:14:9b:4e:
89:59:3c:da:d4:ca:e9:dc:64:16:f3:94:2c:08:61:
87:35:92:95:01:2c:52:dc:cb:08:a4:dd:c7:41:ca:
17:c4:46:e2:35:16:e9:4d:4b:f8:f6:9e:cb:19:b3:
3f:13:47:7c:7d:cc:01:13:b5:1a:d6:6b:78:2a:e1:
f1:83:11:de:60:84:df:7f:23:43:e8:27:17:da:33:
c9:29:d7:94:3a:ab:2d:e0:96:43:e2:ed:1f:d0:48:
72:94:06:f6:d3:65:db:2f:f5:c6:16:44:f8:02:4b:
e5:1b:6c:a8:f7:33:f1:03:8a:55:45:23:81:f8:7d:
1b:4f:c0:28:24:e8:ab:1c:d6:21:85:67:cc:d7:b4:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5F:6D:6A:B0:9F:79:F9:FB:96:4E:33:4B:18:A9:A2:34:02:0E:1F
X509v3 Authority Key Identifier:
keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.184.0/22
Signature Algorithm: sha256WithRSAEncryption
42:3b:45:79:a7:0c:10:5d:dc:e8:52:7d:21:1d:bf:af:6e:f6:
0b:df:96:57:40:2a:f3:45:b4:42:b1:58:bf:4a:33:88:51:23:
78:90:36:af:40:04:31:cf:75:47:78:a7:f5:a2:79:8e:c3:ff:
47:60:a9:29:06:a3:a3:84:0c:1e:6b:6d:82:b8:70:34:85:27:
77:21:6c:92:04:4e:14:4d:73:25:7d:56:a5:d4:e8:66:37:64:
b0:c5:72:56:17:7d:96:6d:80:2b:7e:ac:d4:44:ca:1a:6a:d1:
7e:2a:c2:5e:e5:f6:02:2c:42:14:af:8e:5c:34:1a:23:cb:83:
45:7e:be:3d:42:79:f5:51:85:20:ea:33:be:7f:23:d6:ad:b5:
88:f7:d5:ca:2d:3b:b4:fd:f4:94:88:ea:ee:9a:cc:36:a0:49:
e9:31:16:32:2f:5a:16:8f:7f:d7:74:25:56:08:d4:f7:8e:21:
71:eb:1e:1c:c8:c9:ab:9f:84:67:db:55:9a:d0:34:1c:1e:3b:
62:e1:d5:14:d9:0b:01:78:3d:b6:4c:0d:fa:4a:91:2b:7f:60:
d1:d9:70:86:28:cd:d2:b2:93:a0:7a:a6:f6:38:f7:98:f3:87:
85:92:05:41:bf:77:25:18:55:4e:23:c8:d6:c8:6b:d4:fc:c1:
fc:c4:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:03 2026 by rpki-client