
$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: CjwAdgechVyDEmdpWTYBD8Ris/80uI0UGLAhyRKKJA0=
Subject key identifier: E6:0A:72:54:C3:C3:CA:0D:1E:B2:4B:F6:95:FF:03:43:56:8C:99:A5
Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial: 424F89F20858C0D2C3C657CE0F57D1765664543F
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
Signing time: Mon 02 Jun 2025 02:03:48 +0000
ROA not before: Mon 02 Jun 2025 01:58:48 +0000
ROA not after: Mon 01 Jun 2026 02:03:48 +0000
asID: 38500
IP address blocks: 116.68.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 18:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4f:89:f2:08:58:c0:d2:c3:c6:57:ce:0f:57:d1:76:56:64:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Validity
Not Before: Jun 2 01:58:48 2025 GMT
Not After : Jun 1 02:03:48 2026 GMT
Subject: CN=E60A7254C3C3CA0D1EB24BF695FF0343568C99A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:f1:82:d2:cd:55:25:b5:57:f0:25:69:c5:
82:38:31:ee:ab:23:9e:40:fc:b8:f3:a2:31:9c:99:
65:b4:db:38:62:78:2f:f0:2f:6f:64:8b:88:81:11:
ee:22:6a:f3:5e:6d:23:0d:63:0c:e4:4b:d0:be:d2:
ad:f1:34:1d:fa:31:d1:81:e7:9f:2f:a5:09:ec:ce:
f8:ae:04:c4:51:b7:70:1d:12:e3:db:54:68:c5:ff:
a6:04:14:22:9d:6f:ad:f5:c3:a6:c6:d6:f2:a3:96:
83:bc:ef:c6:a0:fe:31:a8:09:30:39:d2:e5:95:1f:
c9:46:86:81:3f:95:3b:44:32:77:1d:53:74:9d:6d:
31:58:a3:0f:75:6f:e9:99:b7:f7:82:c7:72:e5:55:
e7:b6:a2:e7:b6:7e:6e:aa:81:cf:e8:f6:64:0c:a8:
cd:d8:e9:be:6a:99:1b:40:3a:3f:8a:cf:23:55:d0:
67:ef:c6:df:70:46:f7:fd:e1:72:01:cb:95:ff:94:
28:ac:bc:cf:92:bb:06:a1:3d:4c:6a:84:6c:59:7d:
82:ad:24:d0:fd:46:da:29:a3:17:31:5a:99:95:81:
14:f6:4b:19:56:f4:81:e8:85:0a:8c:ec:f7:e9:d4:
e1:2e:63:d7:2c:ee:42:54:58:81:e7:2b:91:0f:57:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0A:72:54:C3:C3:CA:0D:1E:B2:4B:F6:95:FF:03:43:56:8C:99:A5
X509v3 Authority Key Identifier:
keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.248.0/24
Signature Algorithm: sha256WithRSAEncryption
33:46:ed:a9:ae:2d:7c:8f:1d:28:4c:0d:f8:55:71:e5:14:bb:
69:4f:bd:67:7f:d2:a4:50:98:cb:9d:9d:8d:6e:bd:36:98:b7:
de:70:1e:dd:06:0f:c8:02:db:b7:0e:56:17:c3:7e:dc:5a:bc:
cb:30:a9:77:7a:0d:0d:dc:26:5d:0b:1a:fb:80:72:19:54:65:
bb:0b:e5:0a:0c:b2:ee:80:d2:0d:c6:cf:f6:b8:ac:1c:d5:08:
7d:3a:b0:60:8e:dd:c4:61:30:ff:78:39:52:e0:32:31:2a:e6:
fa:90:5e:f0:87:d9:1a:7e:ab:fb:b0:2b:a7:bc:66:ba:f6:12:
17:68:f9:c9:6b:01:76:40:2d:94:47:da:00:e4:ba:97:c7:5b:
1e:82:fb:1e:7a:07:41:a6:b4:56:a6:71:81:af:3e:23:63:66:
3e:79:7e:dd:94:f7:76:ca:6d:b9:89:f0:a0:cc:66:16:ab:c5:
8b:f2:32:a7:5d:96:5b:36:50:d7:db:81:bc:66:2d:58:d0:8f:
75:04:ff:5a:5b:fe:3e:01:7a:1e:80:1b:63:cb:06:41:94:09:
16:09:0d:50:20:56:f0:04:2e:1f:76:17:56:1c:e0:6e:c1:64:
60:28:be:68:04:fd:b4:7b:41:0c:27:76:09:3b:0e:58:09:4d:
97:0b:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:08:42 2025 by rpki-client