
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3230352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: 4LTx4Ox+H6HTjwtHtdD0nVmmcDVaXj1pGwVOaA9o88E=
Subject key identifier: C0:86:45:78:AD:28:06:6D:35:3B:4C:AB:3B:1E:A9:8C:55:86:DA:7C
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 62916D9D7E0F8B9C4FDB10750FD715C6398F85B4
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
Signing time: Fri 26 Sep 2025 04:02:55 +0000
ROA not before: Fri 26 Sep 2025 03:57:55 +0000
ROA not after: Fri 25 Sep 2026 04:02:55 +0000
asID: 18059
IP address blocks: 202.78.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 10:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:91:6d:9d:7e:0f:8b:9c:4f:db:10:75:0f:d7:15:c6:39:8f:85:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Sep 26 03:57:55 2025 GMT
Not After : Sep 25 04:02:55 2026 GMT
Subject: CN=C0864578AD28066D353B4CAB3B1EA98C5586DA7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:1c:b9:e2:14:eb:6c:4d:da:ee:f3:cb:a2:
78:e3:9f:fd:6d:0f:a8:90:74:81:54:47:97:42:2d:
0c:6e:ff:af:5b:21:fd:69:38:2f:3f:1b:9e:01:a0:
7d:d2:72:f5:28:43:29:a1:18:49:df:8c:17:c4:5c:
bd:d5:37:6d:82:6b:af:79:e8:76:62:93:41:e0:7e:
67:23:96:4e:8a:fa:bc:b6:51:c3:34:09:7c:fe:4c:
e3:75:ed:af:62:52:23:61:69:ed:7d:9a:df:f2:46:
a1:65:63:74:91:77:57:7f:2e:e6:79:4d:20:9e:c5:
dc:9f:78:31:60:9c:53:59:12:61:f9:8a:1e:aa:1b:
f8:95:93:17:0d:c5:bb:e0:93:ef:fd:4a:1a:52:67:
90:90:91:1b:82:59:ce:aa:3c:ad:70:9b:09:de:18:
62:73:2f:33:b0:61:d1:04:32:65:7a:1d:3d:34:db:
9b:72:3b:e0:e1:7f:75:65:1a:9d:7d:35:03:dd:bb:
07:90:f3:e2:c3:ce:c8:b0:16:fe:4a:d3:78:1e:47:
7e:b6:3f:5d:62:9e:08:dc:2f:26:de:f6:ef:ff:39:
21:21:c5:68:00:99:af:d7:ab:1a:f2:41:de:22:34:
3d:25:c3:79:5d:24:ae:af:67:06:85:86:79:dd:1a:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:86:45:78:AD:28:06:6D:35:3B:4C:AB:3B:1E:A9:8C:55:86:DA:7C
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.205.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b5:2e:5b:9a:12:36:0d:1b:de:77:66:00:aa:84:4c:ee:55:
cc:24:32:31:af:c7:8e:13:06:8e:ca:08:90:91:11:ac:73:b4:
b6:25:82:25:7e:84:ad:49:98:ec:14:33:5f:2a:ca:dd:ba:5f:
41:96:7c:a4:7f:54:ec:b5:a0:22:0f:93:e6:2c:8f:cb:33:6f:
b3:9a:60:f4:00:bd:3c:19:2c:27:dc:9e:1c:06:52:57:7a:9f:
9a:4b:b8:50:0a:6e:b4:9e:c5:0a:7d:2e:b4:7d:b7:a3:67:df:
56:92:0d:13:af:83:2a:2a:7e:42:72:d3:ab:ed:b8:a9:58:39:
6b:a3:df:e1:aa:81:b6:42:10:6c:34:8c:38:26:a0:5e:0d:48:
84:9e:e2:eb:ad:ed:ac:d4:f7:b4:5c:92:eb:f0:fa:e6:02:e8:
14:db:27:76:cd:b6:00:b7:08:e2:2e:30:7c:47:f0:61:ea:7a:
95:2d:72:d5:84:1f:39:74:94:f4:6a:00:78:72:08:29:84:c0:
50:1a:f6:cf:25:56:65:e6:24:d0:32:6f:6e:11:43:43:b7:de:
9f:32:2e:82:ef:0d:33:1c:92:25:a7:80:dd:62:b5:ab:09:4d:
8a:12:02:73:69:a8:a6:12:a9:28:9e:4e:bd:3b:10:a7:d9:4e:
4d:df:72:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:21 2025 by rpki-client