
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa
File: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (raw, json)
Hash identifier: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=
Subject key identifier: 3A:6D:26:F8:FF:DA:9D:87:DF:E4:4D:BF:45:AA:07:19:6B:81:5E:2E
Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial: 6A50800C129C9386C69D31DA1F880F5D44698139
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa
Signing time: Mon 23 Jun 2025 15:00:02 +0000
ROA not before: Mon 23 Jun 2025 14:55:02 +0000
ROA not after: Mon 22 Jun 2026 15:00:02 +0000
asID: 153064
IP address blocks: 160.25.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 20:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:50:80:0c:12:9c:93:86:c6:9d:31:da:1f:88:0f:5d:44:69:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Validity
Not Before: Jun 23 14:55:02 2025 GMT
Not After : Jun 22 15:00:02 2026 GMT
Subject: CN=3A6D26F8FFDA9D87DFE44DBF45AA07196B815E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8f:90:bd:10:29:8a:45:19:0e:2b:58:3b:dd:
2b:41:b8:9e:01:38:a7:41:c8:6c:96:f4:53:0d:93:
b4:41:4b:96:c2:56:6c:00:e6:e4:f2:7f:6f:4b:72:
7c:06:3d:fa:55:be:94:60:d3:72:7c:21:ea:72:75:
76:2e:d8:44:0c:f5:b6:01:bf:24:4f:20:d1:c6:80:
1d:54:fc:55:49:5c:52:8f:18:3f:71:f8:48:8e:14:
6f:38:4f:15:3b:e0:1c:6e:d3:ef:06:4e:64:03:51:
fe:04:7e:5d:99:cb:32:0f:20:c5:fa:2c:4c:c8:0b:
3e:02:84:5f:52:e6:5a:b4:a9:bc:e9:39:7b:bb:9a:
e9:d5:b0:41:5f:4f:3b:2c:a0:a0:33:80:77:18:70:
66:6c:7e:31:00:76:04:49:b3:5a:64:c1:52:2e:be:
c9:8b:01:ef:09:48:0e:a9:0e:db:6f:f9:8a:91:26:
ad:79:97:69:1a:c2:8d:9b:08:f7:ff:af:cb:75:7a:
d6:d3:15:a2:5b:35:f9:af:91:91:67:a3:e3:1b:52:
02:52:20:d7:5b:77:68:5b:2a:03:e9:52:49:ad:68:
f4:44:dc:40:ff:41:15:49:f7:97:d8:5a:3f:7f:fd:
18:fd:20:37:98:06:85:cf:c7:38:75:31:92:a0:a7:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:26:F8:FF:DA:9D:87:DF:E4:4D:BF:45:AA:07:19:6B:81:5E:2E
X509v3 Authority Key Identifier:
keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:09:e8:72:54:31:0b:71:2b:da:54:1e:20:55:0d:f1:d1:
38:96:c4:d1:c7:f5:12:65:87:85:04:6f:b1:65:f3:e6:b6:e3:
b0:38:c4:b8:a1:ba:81:8a:3b:0a:55:03:c9:ed:2a:4a:0e:5c:
68:58:28:44:a0:de:5e:c6:fb:1e:e4:7c:79:7a:71:17:09:39:
86:59:97:fd:48:b8:70:ac:a3:30:a8:ee:74:00:f5:dd:ff:42:
13:41:35:07:b6:d4:00:a9:24:d1:e1:18:28:3a:0b:3a:49:6f:
48:9f:ac:dc:58:a0:17:18:26:ac:b3:47:2c:14:27:41:5b:dd:
4e:11:2e:3f:8d:02:31:c8:4f:5e:ab:aa:47:c0:c0:77:75:bf:
38:05:db:6d:d5:31:c0:75:e8:42:dc:5e:77:2d:21:fb:10:3e:
af:0b:b1:a2:d3:17:ac:29:a1:fe:77:f6:19:72:95:5c:27:01:
e8:f3:9f:2b:d9:cb:ba:e4:c9:b6:b5:37:d4:ae:cb:29:bf:ae:
b6:d0:ba:90:33:ea:e0:6d:d2:c7:27:08:60:61:c2:d7:a3:de:
71:7b:a6:69:01:44:c7:f2:0b:9a:50:4d:de:18:33:0a:ea:c3:
43:48:41:a5:68:66:77:70:45:6c:83:7d:11:a2:a7:b4:90:de:
f6:8e:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:44 2025 by rpki-client