
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
File: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (raw, json)
Hash identifier: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=
Subject key identifier: 7E:8F:56:BB:E8:0A:7F:DE:B6:DD:12:9E:F2:8F:30:24:CB:3B:29:14
Certificate issuer: /CN=C79C17C4F5C843791A7028B499932A84B65CD399
Certificate serial: 4ED3E4465A5A553DD17392FFC6E7C4EE581970E7
Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
Signing time: Wed 04 Jun 2025 12:00:02 +0000
ROA not before: Wed 04 Jun 2025 11:55:02 +0000
ROA not after: Wed 03 Jun 2026 12:00:02 +0000
asID: 152800
IP address blocks: 2001:df3:dfc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d3:e4:46:5a:5a:55:3d:d1:73:92:ff:c6:e7:c4:ee:58:19:70:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399
Validity
Not Before: Jun 4 11:55:02 2025 GMT
Not After : Jun 3 12:00:02 2026 GMT
Subject: CN=7E8F56BBE80A7FDEB6DD129EF28F3024CB3B2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:24:0c:41:d2:fb:e4:08:50:6f:2f:e4:92:
c3:4e:14:ce:0e:a1:5e:fe:84:9b:1c:5f:d7:0f:c0:
30:b6:ee:a0:42:02:b4:04:aa:6f:27:4c:38:8e:81:
dc:9c:f5:86:f0:c6:21:56:5f:c5:5a:10:0e:97:88:
00:e4:10:41:ec:3f:ed:81:f3:42:87:32:3c:7a:ec:
c5:29:15:31:94:50:e1:c6:fb:0d:0b:59:45:28:1c:
aa:da:61:32:f4:46:38:df:d0:40:9d:7f:3e:c3:ca:
8f:de:67:ff:66:70:d0:ac:2f:7e:8c:e9:f6:be:e8:
01:f0:6c:13:b6:eb:4f:71:2f:37:2e:a3:29:61:5f:
94:f0:5a:37:7d:d1:d5:ab:0d:9c:11:88:82:77:96:
e8:8e:93:87:05:52:49:bb:1a:4f:72:3b:40:ed:ed:
ef:b7:67:5c:cd:06:41:7c:7b:e2:21:84:40:53:2e:
0b:7d:2e:c8:88:dd:4b:51:3f:b3:90:17:c3:ea:2b:
cf:57:57:47:2f:14:64:70:bf:2b:21:0d:1b:b2:fc:
56:6e:09:cc:84:63:c5:e1:54:f9:f8:5a:5d:2c:20:
db:af:3e:f0:fb:fd:a0:b4:95:f1:91:0f:fb:40:6a:
8d:da:12:23:6d:56:f5:de:84:5e:b1:74:60:ae:d4:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:56:BB:E8:0A:7F:DE:B6:DD:12:9E:F2:8F:30:24:CB:3B:29:14
X509v3 Authority Key Identifier:
keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:dfc0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:85:d1:c8:fc:e7:35:ea:cc:4d:f5:23:6f:6b:cc:ae:36:04:
c8:b5:e7:2f:50:19:59:6f:7a:69:0a:db:e8:1b:7d:fb:b5:96:
db:11:08:a2:23:7a:a2:fd:d9:6c:85:ff:2f:48:c1:32:6c:4f:
d9:04:98:a9:93:fa:d9:00:2b:89:5e:08:74:c0:42:d6:66:a6:
0f:85:60:d9:62:e8:eb:a1:02:e1:ad:72:ab:8d:c4:a5:dc:5d:
51:ac:92:7e:a0:0d:96:4f:82:44:5b:5b:5a:f5:f2:0b:00:61:
45:0a:66:80:92:78:cd:c8:7d:20:28:af:c4:f8:87:29:0d:c9:
55:7a:0b:85:0a:78:f5:51:df:e3:8c:46:5a:08:9f:a1:b5:4f:
57:b6:c5:51:d6:92:1a:29:9b:7c:d9:09:26:01:f0:37:f1:28:
47:26:37:ae:e2:82:cc:2c:ef:61:31:61:71:c7:b8:55:d5:6f:
1c:20:2c:cc:73:35:a2:89:0a:49:99:19:bf:2b:7f:32:aa:15:
e2:58:c5:24:17:97:6d:67:42:37:d2:d3:b1:11:15:99:76:0a:
6e:fd:7c:5e:ad:78:82:55:e9:da:02:f7:43:1b:91:d3:1c:cd:
65:48:6d:8c:20:31:c3:73:ef:ad:20:21:42:b9:7b:0d:33:80:
5f:ea:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:30:34 2025 by rpki-client