
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
File: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=
Subject key identifier: 6D:D5:A7:E8:A4:B7:A6:C5:98:9B:DA:A6:DC:BF:BA:6A:49:95:C0:39
Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial: 6FEE773C8E2EE7E72C6247B7C9CB146DCD85BEC2
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
Signing time: Mon 02 Jun 2025 02:04:41 +0000
ROA not before: Mon 02 Jun 2025 01:59:41 +0000
ROA not after: Mon 01 Jun 2026 02:04:41 +0000
asID: 46054
IP address blocks: 58.145.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 18:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ee:77:3c:8e:2e:e7:e7:2c:62:47:b7:c9:cb:14:6d:cd:85:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Validity
Not Before: Jun 2 01:59:41 2025 GMT
Not After : Jun 1 02:04:41 2026 GMT
Subject: CN=6DD5A7E8A4B7A6C5989BDAA6DCBFBA6A4995C039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:ca:f1:bc:63:f1:6d:a0:c9:c8:a7:2b:41:
f6:89:5e:ac:cb:79:a3:e0:a1:11:5f:53:22:58:9b:
20:68:66:62:67:e3:4f:0f:f0:d3:bb:23:71:c1:75:
fe:b2:f5:86:5a:d3:b0:38:05:ec:d0:b4:95:2d:fd:
b6:1f:46:c4:74:3a:c6:4a:1c:ff:51:ca:98:04:cc:
69:32:6c:f1:df:a8:4d:63:bb:1c:17:a0:2a:c8:aa:
80:6c:85:58:f6:7c:6d:5b:53:eb:fb:9e:62:ff:74:
b3:e8:c6:f0:82:cb:2a:19:4a:6a:12:ac:4e:66:d6:
78:da:de:1b:eb:5e:9c:5a:50:0c:e7:49:84:b1:c3:
3c:22:5c:f9:97:8b:66:94:73:0a:19:0f:f7:65:bb:
29:b3:90:c1:1a:f2:00:4b:89:5b:79:1f:2b:4b:f6:
10:10:ed:eb:37:8e:75:15:c4:8d:c1:f4:3e:1a:d1:
96:f4:d7:d3:ff:05:db:eb:ec:ec:78:68:62:82:8f:
48:ba:38:ec:32:0e:b1:7b:4d:9f:d3:1b:e4:be:b9:
fc:4d:6c:fc:cc:bf:be:71:49:16:5e:c4:1b:7f:b3:
c6:8e:a7:ab:1b:4a:26:65:05:d6:38:42:8b:d4:fe:
4a:f5:c9:55:85:ed:a7:c6:61:41:c4:2e:4c:18:a2:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D5:A7:E8:A4:B7:A6:C5:98:9B:DA:A6:DC:BF:BA:6A:49:95:C0:39
X509v3 Authority Key Identifier:
keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.145.174.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:57:47:42:e9:3a:0b:be:1b:d6:ab:af:8e:5f:8e:90:85:
53:49:d4:9d:69:4d:fc:67:1a:fa:1a:8a:ee:87:f0:d8:b4:68:
83:d2:c3:e8:b8:ea:b6:ec:fe:16:03:3b:17:8d:41:f2:37:38:
0f:60:95:58:56:dc:91:c0:48:1b:84:89:ea:f9:85:56:96:09:
7b:70:e8:2e:9e:6a:d0:7d:34:eb:c9:6e:f5:25:5c:99:3e:52:
04:40:d7:53:03:f3:8c:91:8a:92:80:e8:19:76:a6:0a:a1:2f:
ad:85:3a:4b:fc:ee:48:d8:23:bc:f1:6a:cf:19:a9:c0:00:c0:
31:5f:01:76:88:a3:6f:c6:d8:64:92:32:b5:d7:54:99:15:f9:
a9:b2:3b:9e:f2:59:c5:fd:1a:f3:85:77:73:c6:42:18:e5:17:
7a:b6:5c:e6:7b:83:b2:7d:4d:1c:b2:5b:b0:ab:52:48:6e:29:
5a:a2:8a:2e:71:c5:89:4b:d5:1d:d4:a8:8f:2a:83:8f:cd:b1:
ae:9f:39:64:b7:33:49:ca:5b:89:fd:8f:46:ab:95:54:f1:d6:
14:b4:91:79:b8:a5:3f:fa:b6:d9:ea:b7:ec:3d:6f:4d:f4:fb:
54:cc:b0:a1:70:42:12:cd:98:7b:ff:39:74:67:ba:3a:c3:f2:
70:e2:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:21:08 2025 by rpki-client