
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32332d3233203d3e203538333639.roa
File: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier: l/6nAOjqjGZrtcrrhw7ZuCSQaMYlD7Yflxw07XBPvJ0=
Subject key identifier: 24:86:1E:71:5C:62:8E:C2:0A:30:EC:D7:76:BF:E5:49:06:04:85:0C
Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Certificate serial: 7F0ED535AD69CB6422EF62937DE0EC7A8441454A
Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32332d3233203d3e203538333639.roa
Signing time: Tue 23 Sep 2025 09:02:24 +0000
ROA not before: Tue 23 Sep 2025 08:57:24 +0000
ROA not after: Tue 22 Sep 2026 09:02:24 +0000
asID: 58369
IP address blocks: 115.187.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 02:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:0e:d5:35:ad:69:cb:64:22:ef:62:93:7d:e0:ec:7a:84:41:45:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Validity
Not Before: Sep 23 08:57:24 2025 GMT
Not After : Sep 22 09:02:24 2026 GMT
Subject: CN=24861E715C628EC20A30ECD776BFE5490604850C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:b6:07:63:b8:bc:44:eb:8e:1c:3f:6c:14:
b4:a4:d5:c0:b7:42:8a:b2:2c:33:53:8d:00:61:e2:
d4:8d:e7:9d:4e:3c:21:31:f5:11:d0:73:7d:04:eb:
f1:82:b2:40:6d:13:52:9e:fe:13:84:6b:fa:e3:76:
68:82:c8:80:d6:67:73:3b:b7:aa:60:b5:da:98:c3:
56:43:f5:75:25:f2:73:0a:64:98:bd:42:b0:43:35:
30:06:ff:ae:0e:f9:06:d9:01:52:d1:cc:2d:c6:f4:
35:bf:f7:84:bd:58:f9:00:a5:c3:38:c7:b5:71:ca:
af:41:38:f7:88:62:8e:10:7c:84:ba:00:de:b2:6a:
a5:58:b2:1e:6f:df:4d:39:00:a2:91:25:a9:9d:88:
8f:68:56:b4:93:29:b2:c9:31:c7:ae:c7:74:26:de:
9f:2a:47:3d:0a:17:c5:33:f2:6c:b7:46:f4:04:c4:
df:31:d5:88:f6:0f:62:00:a3:26:b5:63:e9:69:66:
ef:e3:a6:36:de:5f:03:87:23:02:9e:ac:0d:fb:5e:
57:cb:9a:7b:1c:89:89:c6:dd:e1:70:31:4c:b1:9d:
8e:b3:22:10:bd:8f:12:93:07:ca:30:83:d1:22:a9:
83:74:c9:81:d1:f7:d2:fb:f2:2e:d3:65:66:b0:f9:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:1E:71:5C:62:8E:C2:0A:30:EC:D7:76:BF:E5:49:06:04:85:0C
X509v3 Authority Key Identifier:
keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32332d3233203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.187.30.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:86:0b:2e:60:fe:c2:b9:64:a4:b6:fa:d7:fb:30:ec:0f:c7:
bb:99:0e:3c:d8:1e:c9:7c:f7:b8:54:d5:8c:c3:74:62:b2:3f:
f2:81:70:9d:a2:a8:12:40:f1:78:2d:64:dd:1a:82:7d:db:8c:
55:b5:31:8e:29:e2:fa:35:65:ea:93:73:ea:86:d6:d7:7e:f2:
1f:74:01:88:75:af:f5:9c:db:9e:17:36:d7:15:d6:0d:6e:72:
5a:dd:ea:f3:63:35:1f:53:75:fe:d9:3b:02:27:3f:6b:9d:ae:
93:5e:7f:46:6f:ea:bc:f4:62:be:87:00:4d:f8:60:2e:d3:3b:
d9:8d:75:7d:bd:7b:e8:8e:1a:07:32:9d:c9:fc:db:38:12:e6:
a1:e5:73:5c:40:50:0a:06:3d:3a:ac:ec:02:29:1c:a9:c8:cd:
5a:55:cf:d0:54:a7:6f:ce:51:ab:49:b0:2a:88:9a:4e:e7:37:
4f:fd:ea:18:4d:be:76:f3:94:cc:d2:7f:fc:f4:0b:a2:b7:36:
d7:3a:88:bc:8f:36:3c:b6:bb:15:66:0d:a9:30:f2:fe:67:96:
7a:1b:db:8b:33:4d:20:4b:75:dd:11:fd:ad:d6:a1:71:d2:95:
39:a3:21:eb:bf:df:50:c5:27:e6:8d:c1:82:fa:48:ed:4e:a2:
89:04:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:21:23 2025 by rpki-client