
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/4/38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa
File: 38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa (raw, json)
Hash identifier: 0aZfjrvYrPLnv3SP6/H4nxpB3qjjpVdF0uWmjdcoqOQ=
Subject key identifier: F9:E6:DF:A8:AA:CA:19:F0:74:1F:5B:13:00:2F:57:73:1B:6E:4B:D6
Certificate issuer: /CN=7D425251D51803E61C820ADEF2945E50184448D0
Certificate serial: 3B30EA1A65CE2865106E08153F810B242A4168FA
Authority key identifier: 7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/4/38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa
Signing time: Fri 31 Oct 2025 12:52:15 +0000
ROA not before: Fri 31 Oct 2025 12:47:15 +0000
ROA not after: Fri 30 Oct 2026 12:52:15 +0000
asID: 210464
IP address blocks: 85.155.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl
rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:30:ea:1a:65:ce:28:65:10:6e:08:15:3f:81:0b:24:2a:41:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D425251D51803E61C820ADEF2945E50184448D0
Validity
Not Before: Oct 31 12:47:15 2025 GMT
Not After : Oct 30 12:52:15 2026 GMT
Subject: CN=F9E6DFA8AACA19F0741F5B13002F57731B6E4BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:0b:e5:84:41:e2:c5:51:c8:e3:f0:12:ee:
e6:9a:83:2c:1e:23:7a:a7:19:1a:97:11:a0:3c:42:
5c:fc:05:29:3a:7a:dc:f2:34:56:52:bb:fe:cd:12:
b2:57:05:b0:55:7d:3f:57:7d:7d:09:8c:bc:d8:dc:
b5:22:e7:fb:34:90:b3:f5:14:47:6c:da:85:a1:49:
44:98:05:9a:9e:04:45:bf:a3:bf:2c:9b:85:d1:dd:
86:c8:aa:a2:81:4d:a1:1d:4c:0d:f2:7e:70:40:1a:
a1:83:93:8d:96:fd:55:23:1d:a8:f1:45:1e:51:01:
0b:87:1e:c5:aa:58:91:07:a1:90:82:08:56:fc:d2:
f5:23:86:28:7e:b0:a6:0d:2c:6e:d2:a6:7f:76:bd:
55:f5:4f:bc:d2:0b:1c:41:d9:f8:e2:73:76:38:99:
23:23:96:43:2f:82:43:e5:cb:0f:91:43:51:39:90:
73:54:5f:7d:ac:0a:44:b5:74:e6:f3:42:45:4b:45:
26:86:1d:8c:65:32:ce:fe:78:f1:94:49:68:eb:70:
e9:c6:5b:f7:33:ee:16:22:09:e9:92:48:b5:7d:01:
5d:5f:fa:69:b1:7b:14:10:c7:a6:b4:42:ce:d9:4e:
ec:88:a7:be:87:73:0c:81:65:5c:60:1e:bc:4a:6f:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E6:DF:A8:AA:CA:19:F0:74:1F:5B:13:00:2F:57:73:1B:6E:4B:D6
X509v3 Authority Key Identifier:
keyid:7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/4/38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.228.0/24
Signature Algorithm: sha256WithRSAEncryption
44:48:ef:cd:f8:c4:09:38:9b:d3:27:09:c4:50:69:81:6d:83:
9d:28:d1:f3:5b:81:80:93:ca:3a:91:a0:74:a8:05:d2:b6:27:
15:b1:2d:ce:08:8b:c7:a2:08:b1:24:96:3d:5c:49:d0:1f:48:
f7:3e:3b:bb:f6:7d:71:90:24:92:e1:2b:a0:76:68:2b:2f:af:
1d:38:a1:4b:03:35:68:a0:41:48:6e:39:31:29:ec:3e:98:b1:
ea:c7:be:5f:d9:e6:5e:1c:a9:2f:07:dc:7e:a6:9f:2f:0a:ac:
5a:db:73:9c:17:5d:95:42:27:30:03:63:a5:ae:76:81:29:b0:
c2:9c:62:66:34:3c:7c:ee:e8:49:cf:83:2f:3a:e4:4f:19:10:
8e:61:34:f6:b0:29:b1:bd:6a:aa:9f:04:11:5d:4d:69:89:ed:
10:02:db:c3:2c:ab:2d:0d:4e:a2:5a:59:54:ea:2c:75:54:e6:
00:36:5c:aa:45:dd:37:d6:fe:c7:81:36:4e:ed:55:ab:9d:99:
49:69:14:c2:8f:f3:c0:94:24:03:f0:6c:06:02:ba:4d:5d:dc:
3e:69:34:5e:e6:f0:84:c0:82:ac:79:97:db:a1:7c:e4:19:7a:
cd:69:f9:ac:bf:f6:e0:88:8e:14:d9:8d:ff:6a:b0:c2:92:d0:
53:f8:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:52 2025 by rpki-client