
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136362e302f32342d3234203d3e203233363731.roa
File: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier: Oy5e7U/30QVlyKxMTN7vJxNvo6wTwC5oIUWauMMWfdo=
Subject key identifier: 4B:D3:F1:28:FE:74:DC:D8:78:6D:C6:2A:D2:B9:CE:1B:B7:53:E3:FD
Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial: 61E3A7FCD40B2985A636A31A42EF78CD20D33BF3
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136362e302f32342d3234203d3e203233363731.roa
Signing time: Wed 27 Aug 2025 05:00:01 +0000
ROA not before: Wed 27 Aug 2025 04:55:01 +0000
ROA not after: Wed 26 Aug 2026 05:00:01 +0000
asID: 23671
IP address blocks: 111.92.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 00:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e3:a7:fc:d4:0b:29:85:a6:36:a3:1a:42:ef:78:cd:20:d3:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Validity
Not Before: Aug 27 04:55:01 2025 GMT
Not After : Aug 26 05:00:01 2026 GMT
Subject: CN=4BD3F128FE74DCD8786DC62AD2B9CE1BB753E3FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:02:da:7a:11:14:36:ab:e6:fb:98:7a:f1:
25:e2:63:d7:95:62:cc:8d:62:fc:ce:90:73:66:65:
12:61:40:93:2f:33:88:25:4a:49:5b:e3:0d:6d:2a:
c4:3e:8e:35:6a:1f:13:7f:57:d2:4d:41:80:2c:f1:
99:af:51:b1:1c:7a:da:7f:67:8f:e3:fb:18:2b:26:
ae:37:8f:b4:a3:55:f2:0c:52:12:e1:ed:ba:b4:02:
72:85:f8:d3:1f:42:8d:d0:b1:39:d3:ce:92:d1:07:
34:fa:1d:f3:88:b6:5a:de:09:8f:d0:b3:c8:e1:93:
20:fc:08:cd:8a:c5:98:27:41:72:1b:9b:19:4d:05:
ac:49:0b:4f:38:88:1e:ab:90:f5:23:ce:56:f4:53:
f8:62:aa:74:01:17:1c:9b:71:df:0c:8e:10:f6:ec:
db:fd:ed:d8:aa:f8:8e:2f:1a:e5:34:7c:37:ef:c8:
d9:aa:c0:5d:d9:70:0f:f2:38:cc:19:85:dd:25:7d:
21:7e:3c:63:9f:bb:81:ed:62:76:9f:19:2a:84:23:
e6:78:50:58:e2:be:91:8d:f9:33:d0:e5:38:31:ce:
bb:93:4d:5c:d9:0c:3d:0f:5b:9a:d4:ca:14:da:f2:
46:42:bf:29:af:b9:f4:b2:ef:f2:68:91:32:ff:bc:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D3:F1:28:FE:74:DC:D8:78:6D:C6:2A:D2:B9:CE:1B:B7:53:E3:FD
X509v3 Authority Key Identifier:
keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136362e302f32342d3234203d3e203233363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.166.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a1:bf:97:f9:46:a4:ed:e6:9e:bd:c2:2f:48:32:1d:e2:21:
4e:66:da:0e:7e:c1:cb:3f:66:86:77:a5:c4:08:35:e3:83:f5:
fc:b0:9e:90:a3:cb:62:cb:cb:7e:84:c1:75:61:d4:1a:45:cc:
8d:94:73:d9:07:20:38:bb:b6:98:66:41:42:93:26:61:48:6d:
26:40:1d:dd:f5:27:b3:5e:c0:d5:f2:88:30:29:c1:29:ae:a9:
6e:76:1c:8c:f5:e5:cc:3a:c7:01:96:e5:b4:9d:d7:46:65:31:
d3:92:3a:0c:0c:e5:39:d2:60:81:a9:66:2f:89:c4:ef:5d:50:
71:bb:7c:9f:79:7d:47:cc:2d:32:a8:d9:3e:a6:fe:d7:e8:39:
43:c0:f6:d6:10:e7:62:c7:b2:4d:9c:1f:ea:8c:09:77:15:40:
04:13:f8:42:c4:8e:d6:c0:a9:b5:20:28:9b:63:ad:80:19:f7:
f5:2f:d9:a0:d7:0b:e6:52:59:dc:76:73:12:25:1f:d4:0d:0c:
55:65:57:ae:c5:44:af:d2:0c:f2:5b:be:0f:36:f9:89:aa:d8:
1d:90:96:48:5c:35:62:75:ec:66:bd:7e:09:53:fa:46:f2:58:
d0:8b:39:98:09:6c:21:d9:1b:04:82:4b:e5:f0:c5:37:a0:44:
87:af:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:27 2025 by rpki-client