
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3139362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: kAFWGEgcj+aoq1nJ7jJTmcPpx2Lob5XwRwg+6UtLFGg=
Subject key identifier: AC:6E:A0:E1:66:3C:6E:25:9C:55:A6:1A:14:55:CD:1E:4B:42:CA:E0
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 0121B81C66E2F53EB4122B33DD7336F9337315AC
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
Signing time: Fri 26 Sep 2025 04:03:00 +0000
ROA not before: Fri 26 Sep 2025 03:58:00 +0000
ROA not after: Fri 25 Sep 2026 04:03:00 +0000
asID: 18059
IP address blocks: 202.78.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 10:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:21:b8:1c:66:e2:f5:3e:b4:12:2b:33:dd:73:36:f9:33:73:15:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Sep 26 03:58:00 2025 GMT
Not After : Sep 25 04:03:00 2026 GMT
Subject: CN=AC6EA0E1663C6E259C55A61A1455CD1E4B42CAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:4d:e2:16:c5:ff:54:05:12:80:38:b7:af:
d9:8c:ea:bc:63:7f:f3:c6:07:73:5b:82:ba:a9:87:
29:39:71:ef:78:d5:ce:9b:b3:4d:3b:a4:6c:a6:0f:
37:f6:c3:e2:25:d2:73:01:de:86:5e:75:00:f2:69:
df:6c:6e:6e:89:cb:a7:4e:ae:61:42:76:97:51:8b:
1f:e5:fd:76:ba:19:73:2d:25:8c:f3:80:aa:de:ba:
9b:a8:e3:6e:c9:86:d7:ec:a6:f8:e5:e7:06:48:4b:
a8:8b:9f:d3:17:a5:1b:07:a3:4d:e1:b3:47:79:98:
1a:a4:7c:50:7f:3f:e2:48:15:59:e2:96:47:7b:13:
87:4e:89:ee:85:f2:d6:f2:4e:cf:33:0b:07:d3:0e:
6b:46:c5:31:48:bf:43:aa:c2:64:1e:c5:26:3e:0f:
e1:db:28:3d:48:8b:d2:28:be:58:ac:c3:09:e5:a5:
7c:33:2a:9a:05:b8:3b:19:c3:7e:88:4e:f2:ca:1f:
11:94:36:c8:71:9b:05:9c:cd:41:18:3e:75:57:33:
16:08:5e:40:86:69:10:ce:5e:81:2a:f2:ae:89:43:
68:20:2a:27:15:63:c5:64:69:1b:37:1d:d7:18:d4:
46:10:1c:ee:0b:c9:cf:5c:75:05:29:87:24:af:fe:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:A0:E1:66:3C:6E:25:9C:55:A6:1A:14:55:CD:1E:4B:42:CA:E0
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4c:6a:08:75:0f:7e:92:db:5a:91:3c:04:97:76:e0:e5:1d:
5a:bf:f8:28:c5:c0:c4:b8:7e:e4:4e:29:80:d9:96:71:2c:81:
61:e4:34:12:cc:6f:27:02:a8:df:e9:ec:6b:87:ba:ba:f5:78:
04:63:14:10:dc:9e:0b:eb:8d:a6:90:f9:f3:f5:cf:6c:6a:08:
17:c9:70:7f:53:9f:f6:0f:15:88:1d:8f:28:21:86:60:92:a7:
1c:41:3e:fb:eb:1d:ab:2d:df:ad:69:b6:2c:65:b6:72:a4:2a:
51:5a:3d:2c:14:85:1b:5b:da:d8:40:b5:cd:ba:ad:54:4a:5f:
7a:45:b2:83:70:42:44:b1:31:af:7d:88:11:c6:eb:1d:e1:c7:
0a:4b:52:5b:f3:03:6d:ff:a8:f9:1c:c7:44:cd:2e:cd:a0:80:
4b:9c:1f:a1:55:24:be:e2:26:90:b8:c0:41:a0:89:b6:1f:91:
21:a9:73:5e:97:7c:bd:0b:66:b3:f9:c9:b9:90:50:a8:b5:a7:
37:ec:33:d6:7c:64:30:11:65:81:2c:3f:41:b1:80:e3:28:64:
ff:6f:c8:39:a4:f6:80:ee:eb:fd:5f:eb:19:00:5d:69:20:4a:
c4:4d:d0:93:5a:77:0b:97:cc:2c:89:b7:9d:84:3a:19:d1:be:
06:ff:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:05 2025 by rpki-client