
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
File: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (raw, json)
Hash identifier: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=
Subject key identifier: 10:84:F6:D9:C6:AE:BB:DC:4D:00:0C:7B:4D:03:BE:48:A0:BB:41:23
Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial: 5925AA2BB4A29B362A626DB807FA9C2E9742379F
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
Signing time: Mon 23 Jun 2025 15:00:02 +0000
ROA not before: Mon 23 Jun 2025 14:55:02 +0000
ROA not after: Mon 22 Jun 2026 15:00:02 +0000
asID: 153064
IP address blocks: 160.25.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 22:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:25:aa:2b:b4:a2:9b:36:2a:62:6d:b8:07:fa:9c:2e:97:42:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Validity
Not Before: Jun 23 14:55:02 2025 GMT
Not After : Jun 22 15:00:02 2026 GMT
Subject: CN=1084F6D9C6AEBBDC4D000C7B4D03BE48A0BB4123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:5b:42:36:f4:4e:d7:1d:a1:24:83:c3:a8:
e2:6d:cf:5d:1f:bd:e0:69:be:eb:35:0a:60:68:36:
40:4a:63:8d:0f:a9:b3:22:66:91:fc:2d:0c:a2:9c:
ee:07:48:da:31:2e:7f:a0:62:39:c4:9a:a5:75:1f:
d8:6c:2c:80:b8:12:9c:19:9e:0c:3c:66:7b:87:07:
c3:9d:f6:7d:a2:e2:6e:a7:aa:6c:76:58:2b:9e:04:
19:26:48:97:89:24:7b:94:aa:b2:0c:3b:11:96:46:
e6:99:3c:81:56:ed:23:54:db:b8:d2:29:d1:1a:dc:
cd:57:b6:68:b3:5e:80:cb:1c:c0:f1:33:1b:07:88:
1f:96:81:98:95:97:24:72:9c:ee:86:e2:9b:35:9a:
36:a5:35:04:bb:5a:18:ed:1a:74:0d:17:47:34:5b:
e1:23:c1:ab:88:9d:84:8f:8c:3f:97:a4:bc:69:bc:
39:32:7d:1a:1f:1e:1e:87:2e:26:fa:af:37:fb:a7:
b5:18:80:4f:ad:da:0c:f7:ad:9c:b8:6f:ba:4e:b3:
a3:e5:64:67:e6:17:89:25:30:5e:e0:a3:a7:9b:3e:
b0:05:a3:20:9b:84:1f:32:06:28:99:87:9a:4a:37:
29:36:21:86:dd:f4:95:ca:54:bc:7d:10:cf:1a:0f:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:F6:D9:C6:AE:BB:DC:4D:00:0C:7B:4D:03:BE:48:A0:BB:41:23
X509v3 Authority Key Identifier:
keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.48.0/23
Signature Algorithm: sha256WithRSAEncryption
82:3c:f5:c2:f3:df:9b:64:f6:ab:35:10:2d:88:6c:38:32:c6:
01:ec:73:28:b2:65:ad:d7:5b:a6:7f:80:c6:29:53:17:fa:16:
ec:9a:0d:11:e8:b2:c1:e7:24:83:0d:47:48:81:bd:f6:f3:f0:
0a:2c:c2:b7:49:fc:3c:7f:7a:ce:d1:10:b0:93:d7:4c:5b:53:
5e:79:cc:6f:d1:38:22:76:2c:2f:53:2f:a3:bb:fd:4f:cb:0f:
75:17:e0:50:2a:99:99:d3:71:29:24:06:36:24:f3:3b:82:00:
cc:d2:aa:ae:5c:c4:ed:94:78:6b:73:2b:bc:05:9b:e8:17:75:
d8:60:34:55:be:bb:95:38:0a:79:7a:82:ea:94:69:b3:dd:2e:
f1:c2:0d:15:83:74:ba:d5:8a:dc:3d:90:73:37:95:b3:39:85:
a3:00:23:fe:17:14:d8:56:e6:4c:99:13:6d:10:00:77:c8:67:
d2:16:22:5c:a5:6e:32:a0:38:58:17:11:f7:1f:ca:1f:d7:6a:
51:d2:1b:df:10:a1:8f:c5:2b:af:19:c5:4c:f3:e4:8f:be:f9:
fa:c3:83:ee:c4:32:fe:ed:4b:73:c7:0a:6e:1e:c5:c9:3b:a3:
9a:d9:19:97:eb:a0:4b:97:31:be:66:53:7a:52:9f:84:2a:ad:
12:fc:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:03:41 2025 by rpki-client