
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
File: 3131362e39302e3137322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: Y0oiG6OqqEV+YLFYfSWX8whZUk39EChZcG2je0zGPHs=
Subject key identifier: 9D:2D:A4:E5:25:99:D3:03:E0:14:6C:FA:A6:9C:22:77:2B:03:5C:8D
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 78A63DE7F7AD42A17FC00146F061E71EEA33D660
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
Signing time: Fri 26 Sep 2025 04:03:01 +0000
ROA not before: Fri 26 Sep 2025 03:58:01 +0000
ROA not after: Fri 25 Sep 2026 04:03:01 +0000
asID: 18059
IP address blocks: 116.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 10:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a6:3d:e7:f7:ad:42:a1:7f:c0:01:46:f0:61:e7:1e:ea:33:d6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Sep 26 03:58:01 2025 GMT
Not After : Sep 25 04:03:01 2026 GMT
Subject: CN=9D2DA4E52599D303E0146CFAA69C22772B035C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:8e:86:c7:0e:37:88:14:0f:e9:e8:04:1f:
9b:d1:6b:93:71:e3:d1:05:5b:e0:eb:c1:ce:14:b6:
95:12:21:e5:c1:f9:64:b2:c5:74:4f:34:39:21:f2:
6f:10:09:00:2b:2a:7d:ef:70:30:ce:0a:0c:e5:20:
83:56:06:9a:33:c3:59:6e:3d:7d:31:47:f0:c0:a7:
5e:ad:2c:4f:98:be:1f:79:ee:cd:51:73:6a:ec:cd:
d0:ab:dc:c1:59:26:54:f7:ca:e6:36:53:d1:ce:9a:
dd:d9:81:94:73:2c:ae:c5:1b:4b:44:9e:02:5a:62:
9c:67:0a:24:a7:dd:7a:3a:09:27:69:3f:be:85:77:
3a:cc:01:6b:df:91:65:5a:96:d8:87:60:fd:7f:0a:
4b:a6:ac:54:fa:97:88:69:fa:75:72:54:82:03:c4:
78:c0:c5:10:43:a4:79:9d:1e:03:39:56:e2:a7:83:
bf:3b:34:2f:8f:be:ef:d0:1d:72:16:eb:86:98:bd:
ae:f8:a4:b5:98:88:9b:e7:96:21:01:4f:c3:c0:b9:
44:2e:e4:10:7c:ef:7f:86:ee:11:67:aa:84:c4:a2:
e5:ca:64:4a:4e:14:05:1c:d5:14:97:54:f9:9b:96:
02:e2:06:a9:0d:8d:80:cf:68:65:40:f3:d2:d3:04:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:A4:E5:25:99:D3:03:E0:14:6C:FA:A6:9C:22:77:2B:03:5C:8D
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.90.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:98:4f:80:a2:28:69:d1:2c:6d:1a:95:0b:5f:fc:e6:27:32:
ea:9d:78:94:68:bd:47:fc:ee:af:08:21:52:4e:ab:1f:ca:a7:
c9:59:87:44:b6:91:6a:d5:d8:c7:90:99:ff:2f:a9:8d:fc:c4:
21:62:8a:9d:16:36:8f:07:07:1f:f0:5b:4d:f0:e2:83:4a:67:
20:fa:41:be:66:71:81:a6:ff:48:eb:92:6f:3a:ae:46:d1:93:
e4:4f:f3:72:af:21:c9:e7:18:e5:90:64:9e:03:cd:a3:3a:7d:
4d:67:ac:a7:53:6f:f1:78:de:3b:ac:2a:7c:a1:03:26:f9:08:
85:66:7a:ff:3b:84:fe:99:25:6c:b5:a8:2f:6f:b6:74:95:39:
64:00:09:cc:12:c2:4c:75:c0:dd:43:22:d8:d2:a3:2b:b1:f3:
44:db:75:ad:ec:64:03:2b:3f:f7:ea:70:91:d8:04:fa:9b:31:
9f:43:f1:bb:38:16:10:db:c9:63:b8:94:12:89:bb:74:a8:e5:
37:57:f9:b5:b3:e5:42:91:d5:7c:de:88:b6:19:f4:27:6e:fc:
9e:53:2b:be:9f:af:ce:35:47:98:1d:be:a8:ef:69:87:92:c4:
7f:ac:60:12:d4:52:69:8a:f2:96:17:ff:5f:d8:be:03:46:77:
e8:22:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:35 2025 by rpki-client