
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136382e302f32342d3234203d3e203436303534.roa
File: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=
Subject key identifier: CC:79:B0:D5:37:FD:E8:AE:E1:F7:10:62:F3:14:C3:26:DF:3B:67:9E
Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial: 48AE4678F40F6698B60DFF6360DCB893BCFE88EC
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136382e302f32342d3234203d3e203436303534.roa
Signing time: Mon 02 Jun 2025 02:04:42 +0000
ROA not before: Mon 02 Jun 2025 01:59:42 +0000
ROA not after: Mon 01 Jun 2026 02:04:42 +0000
asID: 46054
IP address blocks: 58.145.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 18:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ae:46:78:f4:0f:66:98:b6:0d:ff:63:60:dc:b8:93:bc:fe:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Validity
Not Before: Jun 2 01:59:42 2025 GMT
Not After : Jun 1 02:04:42 2026 GMT
Subject: CN=CC79B0D537FDE8AEE1F71062F314C326DF3B679E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:3d:21:1c:16:e8:cc:f8:73:61:58:e0:cc:
37:c0:92:58:92:34:b0:8b:71:53:ff:8b:11:67:fd:
ec:40:23:5a:81:a9:8d:67:f6:e1:ce:2d:7a:36:24:
c2:b4:7e:d9:45:aa:c6:fa:01:47:09:fc:b5:ba:d3:
b2:02:3e:b1:e7:73:22:97:4c:08:5c:e5:84:95:90:
81:7f:4f:7c:44:df:8c:18:a4:95:74:95:32:e6:62:
40:73:f9:44:c4:8b:30:b6:54:81:65:6c:cb:50:76:
63:0f:4f:38:a6:79:f4:28:53:f1:17:a6:d1:3d:11:
58:8e:b6:dc:08:55:c4:66:69:70:5a:63:71:0d:11:
82:e7:75:eb:5a:1f:fd:74:81:e3:ab:c0:f1:9c:c4:
5d:ea:40:4b:bb:ce:6a:31:b7:7d:5b:71:8e:8e:70:
b9:fa:ef:ad:24:ae:fe:a3:75:51:b3:39:75:db:0c:
58:28:e0:dc:b6:cb:89:c2:3c:74:d2:cc:1e:fd:bc:
54:65:2f:4c:0b:71:c4:1a:8b:8f:9e:bc:cd:00:cd:
5c:a9:0f:54:5a:69:77:f5:45:1c:a1:e6:f0:ed:8d:
d0:b4:25:e8:ae:7b:93:f1:8a:91:3f:10:86:69:f7:
8a:8e:98:d5:3d:a9:0e:62:3c:fa:53:c4:7e:13:55:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:79:B0:D5:37:FD:E8:AE:E1:F7:10:62:F3:14:C3:26:DF:3B:67:9E
X509v3 Authority Key Identifier:
keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136382e302f32342d3234203d3e203436303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.145.168.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d0:48:c2:67:46:3e:14:aa:a8:6c:fa:93:48:e9:0b:44:1f:
52:0c:a8:5d:70:c9:7a:9e:68:91:3b:c0:0f:d5:ff:d0:4c:da:
f2:92:c9:8e:4f:75:6a:c9:39:ba:3f:b4:51:f0:10:11:64:68:
9d:4e:fb:69:7d:34:8b:69:9c:06:a2:61:3c:a7:59:f1:f5:13:
2d:50:4d:71:a0:49:77:86:fa:83:be:b7:ba:d5:07:7d:a7:a1:
15:52:28:f3:f5:a7:f1:16:8c:bc:7f:3c:da:b0:ce:24:c0:a9:
07:3a:82:d3:66:4b:58:ae:e2:5f:6f:a2:14:26:e8:cb:90:b9:
66:88:2a:27:37:4d:cd:81:0a:32:58:de:3b:95:a2:d6:7e:ad:
5e:9c:ac:2d:7c:74:44:25:74:6b:df:ca:09:18:f1:56:5b:31:
10:9e:3a:c0:ea:40:5e:b6:98:63:fb:41:9d:09:4d:6a:08:4a:
3f:a2:75:d3:c5:4b:63:83:13:82:94:62:99:08:3c:be:73:f4:
4d:d3:dd:f2:d8:3c:cc:cd:c2:89:d6:3c:a7:d9:e3:0e:ba:14:
dc:5b:c7:7e:2d:74:fa:1a:8e:ac:8e:fb:b4:ab:2a:12:11:6c:
48:b8:0c:7c:b2:5d:54:25:bd:0c:e6:ff:51:19:9f:4d:cf:ca:
c8:66:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:21:23 2025 by rpki-client