
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32342d3234203d3e203633383237.roa
File: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: +aCt5+OXK6i1mR1vUsqsKmaPLobmcj6xpzHFr2y248I=
Subject key identifier: E4:CE:69:10:6E:DD:AF:0A:82:5B:8A:E5:EB:CD:F5:9A:F8:E8:7C:61
Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial: 49A90AF70F350BBAB06F374DA0C38B1C98348004
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32342d3234203d3e203633383237.roa
Signing time: Wed 22 Oct 2025 08:00:03 +0000
ROA not before: Wed 22 Oct 2025 07:55:03 +0000
ROA not after: Wed 21 Oct 2026 08:00:03 +0000
asID: 63827
IP address blocks: 43.243.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 10:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a9:0a:f7:0f:35:0b:ba:b0:6f:37:4d:a0:c3:8b:1c:98:34:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Validity
Not Before: Oct 22 07:55:03 2025 GMT
Not After : Oct 21 08:00:03 2026 GMT
Subject: CN=E4CE69106EDDAF0A825B8AE5EBCDF59AF8E87C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:97:91:23:16:07:fc:41:a6:09:91:13:d5:
c3:7b:4f:90:1c:74:29:0f:64:de:75:a7:b7:10:60:
fe:e1:33:56:75:23:54:de:9f:75:33:52:3e:e3:af:
1b:39:e4:f8:87:ed:63:be:c7:10:c6:9b:21:4f:58:
48:c5:11:62:40:05:3d:3c:ea:72:13:77:33:45:ef:
0e:46:6f:13:55:61:26:f2:20:ea:01:94:69:91:5f:
31:64:50:9f:b0:71:f3:52:43:91:3b:ec:81:36:22:
f5:c1:00:32:fb:f9:9a:f2:ba:b6:9d:33:0c:9b:6f:
d7:5f:f7:9e:cd:8e:37:4a:76:60:bc:a2:b3:3a:4f:
5c:d9:34:66:09:11:68:09:4d:6b:2f:3f:06:6f:30:
aa:fd:77:70:fd:6a:5a:a1:6d:40:0a:7d:b9:1c:8d:
76:3f:b5:45:17:c4:4b:a6:ab:f1:11:46:65:61:b2:
13:9b:a3:71:67:8f:cf:59:6c:ac:d4:cf:41:2a:4d:
61:da:77:0a:cf:38:d7:6b:de:6a:38:b4:89:cc:90:
01:e9:87:72:4d:7e:be:b9:a4:18:01:7c:2e:82:29:
3d:6a:e9:41:12:a7:15:02:67:16:38:4d:e0:1e:3e:
b2:3b:aa:1e:5f:a2:ec:3d:e6:cd:4e:ef:db:6e:84:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:69:10:6E:DD:AF:0A:82:5B:8A:E5:EB:CD:F5:9A:F8:E8:7C:61
X509v3 Authority Key Identifier:
keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d5:14:c9:70:be:ae:87:7e:c7:1a:f6:5d:5b:c1:f3:d6:b7:
9a:17:52:2d:57:9c:19:1a:bf:76:d9:81:b0:43:07:d8:f1:37:
e3:cb:e1:a8:61:34:4a:2f:b8:cf:a0:57:c3:50:68:d0:88:2e:
d6:d4:e1:50:d6:68:4f:9d:d2:60:57:87:91:76:7c:66:f4:26:
28:7b:ed:cb:51:be:8b:70:a8:8c:d8:2b:d0:be:39:07:e5:b3:
db:24:49:cf:58:87:74:56:ba:28:3e:e6:6b:3e:ed:73:76:43:
4b:90:0f:fb:34:ec:2d:8b:84:48:96:2f:be:89:b3:ba:63:1d:
35:c1:6e:4e:85:66:ad:a2:a0:6d:4d:dd:75:8f:55:48:70:04:
cf:f2:f0:44:19:03:89:63:37:d8:50:5d:6b:46:d5:f0:ac:29:
27:0e:e9:40:bd:f5:4c:3e:1f:61:be:55:f3:63:b4:f8:76:21:
72:71:27:60:d9:23:66:c1:9b:5c:d4:5e:6b:53:f4:79:2a:64:
23:f1:e7:91:14:3d:3c:be:73:a1:fa:7a:89:32:f8:06:f4:1b:
3b:44:db:ae:58:a3:5e:30:e1:f0:83:69:1d:2f:50:6b:55:49:
86:93:0a:84:55:d3:be:a1:25:66:40:bc:52:ef:d8:4b:6c:fc:
ab:1e:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:45 2025 by rpki-client