
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
File: 3230322e352e39362e302f32302d3234203d3e20323635353430.roa (raw, json)
Hash identifier: WX8MAbfv/5iNN1hW6AorxbHTD7thUorfIA11rC75Fi0=
Subject key identifier: 1D:C7:25:C8:80:B1:A9:AF:EC:D4:8E:70:63:92:A9:B2:DE:54:28:84
Certificate issuer: /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial: 04352128BBB3C87D506F26FEF9CBFFCE4CE95A8A
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
Signing time: Wed 07 May 2025 06:17:54 +0000
ROA not before: Wed 07 May 2025 06:12:54 +0000
ROA not after: Wed 06 May 2026 06:17:54 +0000
asID: 265540
IP address blocks: 202.5.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:35:21:28:bb:b3:c8:7d:50:6f:26:fe:f9:cb:ff:ce:4c:e9:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Validity
Not Before: May 7 06:12:54 2025 GMT
Not After : May 6 06:17:54 2026 GMT
Subject: CN=1DC725C880B1A9AFECD48E706392A9B2DE542884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:a9:10:24:cf:21:66:b4:85:17:30:da:cf:
8a:0a:41:b4:ac:91:9d:96:70:1d:a0:5e:92:4f:e4:
f1:f7:29:67:45:c0:8f:6a:43:8b:fa:c6:00:ee:e3:
35:96:f1:5a:4e:4a:71:18:34:f1:e4:03:db:3a:a3:
b8:4e:db:6a:28:6c:ba:6a:94:bf:c7:1e:51:b9:07:
d1:2b:8b:4f:48:66:02:40:8e:93:da:b9:ec:34:08:
fe:f4:b0:c5:df:05:5f:46:92:a6:6d:ce:fd:ae:bb:
bb:07:7a:60:20:fc:5e:bd:a5:3f:99:ab:30:0b:76:
0e:c8:2a:0a:47:4d:0a:54:c1:b6:4d:3a:68:16:d9:
f5:18:39:3d:15:49:cb:49:e3:88:b6:e7:10:94:a5:
8f:f3:52:ac:00:25:68:91:c3:70:06:29:cd:64:fc:
cc:74:d1:47:a4:65:05:2b:6e:82:ed:aa:33:55:cc:
71:da:28:58:b5:41:24:b1:e6:13:23:56:1c:89:34:
70:e2:47:c4:4e:b4:07:a0:bf:c3:01:25:77:4b:35:
6b:15:51:ba:90:83:6c:c7:7c:8e:8d:fe:14:10:fc:
0f:ba:a4:eb:8b:d3:20:55:c5:50:b0:26:44:33:d4:
4b:ec:92:0e:13:1c:7f:f1:16:c3:9b:dd:a1:4c:33:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:25:C8:80:B1:A9:AF:EC:D4:8E:70:63:92:A9:B2:DE:54:28:84
X509v3 Authority Key Identifier:
keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.5.96.0/20
Signature Algorithm: sha256WithRSAEncryption
16:4b:d4:2d:df:bf:98:bf:d2:63:4c:45:be:14:51:ab:44:9f:
7c:80:66:2f:dd:32:36:ff:22:f7:a8:89:48:76:13:ed:cc:eb:
eb:08:98:c1:3c:29:2e:77:c1:a1:ad:4f:a9:1a:c8:7d:93:6a:
32:3d:1e:a6:43:70:3f:79:bc:08:e1:12:16:e9:70:7b:4d:6f:
c1:51:26:c4:63:8a:27:57:0d:b6:79:4f:78:15:b1:b0:42:0b:
1e:6a:25:40:bd:8d:fa:16:09:f3:44:11:c2:e5:dd:db:fe:e3:
95:77:77:86:50:91:ea:3e:e0:2c:8f:b6:fc:3c:16:0c:e0:09:
c2:56:69:06:3a:01:76:34:57:47:01:56:9f:37:7e:99:68:40:
e1:32:8a:3c:14:ea:78:df:83:0a:7d:b2:02:4e:25:c1:1e:33:
26:69:66:32:42:b1:b7:1d:6c:0c:53:ee:c5:84:c9:2f:82:6b:
08:b3:0f:15:2e:f6:75:83:18:0f:ce:63:6e:cb:8a:7e:db:15:
99:41:5c:ff:2c:ff:91:e0:91:ab:e3:65:6a:f3:6e:03:4b:06:
df:b7:13:78:4c:73:d6:ca:d4:f5:57:4d:ec:2c:19:4b:27:03:
5e:d1:7a:a2:b4:9c:d2:9f:06:5a:00:f7:41:8e:de:a3:c8:0b:
c8:17:2b:69
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBDUhKLuzyH1Qbyb++cv/zkzpWoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFEOTBBMDNCMEJCNDlBMzRDN0JGOUE1Qzg4Q0NDNEM2
MUE3QjNFQzAeFw0yNTA1MDcwNjEyNTRaFw0yNjA1MDYwNjE3NTRaMDMxMTAvBgNV
BAMTKDFEQzcyNUM4ODBCMUE5QUZFQ0Q0OEU3MDYzOTJBOUIyREU1NDI4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEXKkQJM8hZrSFFzDaz4oKQbSs
kZ2WcB2gXpJP5PH3KWdFwI9qQ4v6xgDu4zWW8VpOSnEYNPHkA9s6o7hO22oobLpq
lL/HHlG5B9Eri09IZgJAjpPauew0CP70sMXfBV9GkqZtzv2uu7sHemAg/F69pT+Z
qzALdg7IKgpHTQpUwbZNOmgW2fUYOT0VSctJ44i25xCUpY/zUqwAJWiRw3AGKc1k
/Mx00UekZQUrboLtqjNVzHHaKFi1QSSx5hMjVhyJNHDiR8ROtAegv8MBJXdLNWsV
UbqQg2zHfI6N/hQQ/A+6pOuL0yBVxVCwJkQz1Evskg4THH/xFsOb3aFMM0KXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHcclyICxqa/s1I5wY5Kpst5UKIQwHwYDVR0j
BBgwFoAU+tkKA7C7SaNMe/mlyIzMTGGns+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDM1RjY4RTkyMjdDQ0VBQUVBODAwQ0U4MEU3MEM5MkY0
Q0VDNTIyRTRDRDZCQTQzNjIzRTREMjI5MDc0MjNFLzAvRkFEOTBBMDNCMEJCNDlB
MzRDN0JGOUE1Qzg4Q0NDNEM2MUE3QjNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQUQ5MEEwM0IwQkI0OUEzNEM3
QkY5QTVDODhDQ0M0QzYxQTdCM0VDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzNUY2OEU5MjI3Q0NFQUFFQTgwMENFODBFNzBDOTJGNENFQzUyMkU0
Q0Q2QkE0MzYyM0U0RDIyOTA3NDIzRS8wLzMyMzAzMjJlMzUyZTM5MzYyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMjM2MzUzNTM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKBWAwDQYJ
KoZIhvcNAQELBQADggEBABZL1C3fv5i/0mNMRb4UUatEn3yAZi/dMjb/IveoiUh2
E+3M6+sImME8KS53waGtT6kayH2TajI9HqZDcD95vAjhEhbpcHtNb8FRJsRjiidX
DbZ5T3gVsbBCCx5qJUC9jfoWCfNEEcLl3dv+45V3d4ZQkeo+4CyPtvw8FgzgCcJW
aQY6AXY0V0cBVp83fploQOEyijwU6njfgwp9sgJOJcEeMyZpZjJCsbcdbAxT7sWE
yS+CawizDxUu9nWDGA/OY27Lin7bFZlBXP8s/5HgkavjZWrzbgNLBt+3E3hMc9bK
1PVXTewsGUsnA17ReqK0nNKfBloA90GO3qPIC8gXK2k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:26:49 2025 by rpki-client