
$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
File: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=
Subject key identifier: D1:60:FF:DD:5E:66:74:BD:5C:7D:AD:98:04:79:0B:6C:79:9F:F6:DF
Certificate issuer: /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial: 47DEB48401E398C5EE258AC588B5D77CB550B308
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
Signing time: Mon 02 Jun 2025 02:03:06 +0000
ROA not before: Mon 02 Jun 2025 01:58:06 +0000
ROA not after: Mon 01 Jun 2026 02:03:06 +0000
asID: 55699
IP address blocks: 160.19.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 22:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:de:b4:84:01:e3:98:c5:ee:25:8a:c5:88:b5:d7:7c:b5:50:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Validity
Not Before: Jun 2 01:58:06 2025 GMT
Not After : Jun 1 02:03:06 2026 GMT
Subject: CN=D160FFDD5E6674BD5C7DAD9804790B6C799FF6DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:39:5c:a1:0a:70:c8:58:35:03:32:59:2d:
07:c3:8e:fe:fb:e9:27:ce:1e:5f:66:d3:63:ba:74:
44:df:90:f7:75:03:1f:4d:f0:77:94:a4:f1:f7:39:
4a:47:75:2d:23:9e:b5:92:56:89:c0:e1:ab:86:bb:
6d:e5:96:4a:dd:55:75:c5:08:b0:48:76:d7:df:da:
54:e8:e9:4e:cc:a0:96:8d:2d:e0:fa:61:ab:85:f1:
3d:40:fa:f2:90:c8:f9:2c:f5:ab:fc:fd:ed:b9:d3:
4a:d5:57:72:83:06:23:a8:fa:da:32:d7:a2:2f:e1:
e7:f7:58:34:8e:0f:08:51:02:61:21:05:f0:9b:4c:
99:fc:9b:21:cf:27:25:47:51:2f:d5:2c:88:11:17:
95:82:8a:b1:cd:2f:51:dc:a3:1b:17:01:e8:22:39:
cb:67:d5:77:b5:45:bb:a1:a4:0e:86:10:5b:ff:d5:
9a:21:af:b1:cf:bd:65:70:dc:fc:2c:3a:25:d7:0b:
38:e8:8b:a6:92:41:28:e5:4f:d3:34:64:a3:b9:72:
66:e0:49:9c:32:70:e2:f0:f2:3a:a7:43:55:10:95:
72:bb:6e:3d:66:f3:70:bf:3b:c3:ff:7b:60:e2:1c:
d1:db:2f:a8:2c:d1:f2:b2:47:d6:2d:6a:d0:21:e7:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:FF:DD:5E:66:74:BD:5C:7D:AD:98:04:79:0B:6C:79:9F:F6:DF
X509v3 Authority Key Identifier:
keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:af:6e:33:f9:2d:c2:87:f9:58:30:f6:8a:3f:f5:2e:26:83:
7e:8e:7b:39:c0:0e:36:10:cc:e9:f9:36:e0:3b:ec:16:c0:d9:
9c:88:54:98:79:cb:7f:73:7b:ed:47:42:d6:b8:96:51:27:e3:
59:cb:17:d0:f4:77:01:e9:6d:f3:40:93:bd:b5:52:d4:1a:21:
93:fd:ca:a8:3e:33:16:3c:53:c6:a6:69:cb:0a:d1:d7:3b:02:
53:9e:45:1d:eb:fc:f8:96:f1:44:14:91:d5:06:87:83:cd:60:
67:58:72:4e:89:d8:a3:37:0d:12:0e:61:e3:47:ea:3b:c1:3d:
ea:ec:da:ba:1c:4a:60:69:7b:3d:d6:16:c8:b0:60:1c:d7:5f:
35:4c:99:cb:e5:bd:3f:76:ca:48:52:7a:2e:f7:43:cc:59:18:
bd:3b:3e:38:da:d3:b8:a6:0b:ef:87:9c:78:d5:36:3e:8b:c9:
3b:a4:a7:25:cf:72:86:21:d1:39:d9:2a:8a:b5:ab:6f:13:8c:
ec:78:4c:06:cc:20:7a:61:86:78:7f:ca:65:19:93:6e:cb:10:
ee:97:1c:3e:4b:56:96:f9:3a:1a:50:6c:48:15:85:7b:57:27:
3d:4e:5d:c1:1e:d1:da:27:21:8e:e0:d1:03:e9:14:82:49:89:
12:a2:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:56:38 2025 by rpki-client