
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
File: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier: 8x2Coc9pifmT+orzQex2GAIyBvhcFaqojB9aD5S8okg=
Subject key identifier: E6:46:2E:6A:FD:03:E9:FE:B9:47:83:47:34:10:D0:09:1B:29:1E:93
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 0B1F3F14E37A8AAF5430ED44C54E74D2B81609C1
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
Signing time: Fri 24 Oct 2025 07:00:01 +0000
ROA not before: Fri 24 Oct 2025 06:55:01 +0000
ROA not after: Fri 23 Oct 2026 07:00:01 +0000
asID: 58378
IP address blocks: 203.83.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 06:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1f:3f:14:e3:7a:8a:af:54:30:ed:44:c5:4e:74:d2:b8:16:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Oct 24 06:55:01 2025 GMT
Not After : Oct 23 07:00:01 2026 GMT
Subject: CN=E6462E6AFD03E9FEB94783473410D0091B291E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:ad:d6:96:ba:40:48:e8:6a:a2:cf:22:02:
cd:2a:34:b1:2a:97:7c:a5:57:b8:0a:17:9f:c4:a3:
ee:69:44:7b:b6:54:ff:b6:10:3d:d9:f6:86:76:fe:
36:a1:46:b3:3a:5f:36:0d:cb:91:cb:5d:4d:5c:2f:
41:f1:48:49:5e:9b:eb:fa:b0:8f:25:24:ad:32:96:
3d:ec:6b:fd:ab:8b:c6:70:21:00:4c:84:44:ef:5d:
e5:db:0f:06:a7:a1:8d:ef:a9:41:3b:1f:5f:91:70:
ad:d1:ea:cd:83:07:4f:e6:05:79:27:68:c8:11:20:
76:52:99:61:d3:16:7c:f4:e1:96:a4:f2:0d:f9:da:
47:a6:e1:15:16:f2:ec:73:27:dd:28:07:d6:45:75:
1b:ba:cb:87:f0:b1:4b:e8:e9:16:54:bf:7a:7f:64:
ad:ff:a8:f0:b3:f9:80:db:fe:17:22:52:2d:6f:1f:
79:89:c6:f4:ef:9d:50:af:a5:7d:11:bd:03:16:84:
03:d4:ee:2f:a0:e1:32:3a:c8:b6:b5:cc:eb:e5:f9:
c7:ce:9c:6a:72:a1:8f:cc:a5:c2:1b:bc:64:95:92:
62:92:07:45:c5:a0:82:38:6a:b1:66:ff:a8:5f:41:
16:14:23:78:85:7e:3e:74:14:8b:4f:1a:95:dc:23:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:46:2E:6A:FD:03:E9:FE:B9:47:83:47:34:10:D0:09:1B:29:1E:93
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.26.0/23
Signature Algorithm: sha256WithRSAEncryption
20:bb:2b:2e:71:19:2e:01:7e:d5:4e:e9:1a:69:cf:ed:e7:03:
92:8c:9a:59:e3:f6:cc:7c:ea:b1:7b:f0:67:b7:f7:f5:dd:a2:
ac:2c:21:d4:5c:e7:1b:99:9d:27:6a:db:a6:a2:65:81:0d:23:
f4:f0:ab:92:95:33:0d:c5:b7:8b:ba:e2:be:37:99:57:0f:7e:
0f:9f:e7:15:76:e6:47:51:c1:9d:93:b2:fe:f0:e4:38:93:ad:
e0:5f:07:2f:eb:5a:34:66:46:6c:d9:24:4a:23:51:7e:4e:71:
c6:31:80:6c:f6:61:cd:31:1f:87:d7:8a:73:de:61:b8:3e:60:
94:15:10:9b:8e:f4:a4:50:cc:f8:aa:42:f0:af:8d:b6:b2:db:
1b:66:2a:ba:3d:a0:21:d7:e6:bf:a5:e3:07:59:eb:d9:f9:ea:
ca:fb:40:12:9f:f8:14:a8:44:04:87:55:ec:73:fd:bc:79:2c:
35:85:96:a8:16:76:66:0d:d6:8c:5d:17:38:45:84:c5:b3:c5:
79:40:b9:0c:58:86:f0:b7:d8:ff:c3:e5:ca:13:25:f4:8c:41:
93:7e:4c:f9:da:80:d8:39:73:2a:26:15:b7:e8:04:a1:02:50:
25:84:a5:c4:8c:69:08:08:72:15:0b:99:b7:fc:a7:5c:17:8f:
af:1a:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:04 2025 by rpki-client