
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: m2kyXLcEZ38H/pCsWVNg2JrOD7sFDK1O4b+vLlcNYlI=
Subject key identifier: 01:1F:BE:F4:EE:04:3A:19:3A:79:38:AB:46:02:B0:07:37:7C:54:AC
Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial: 5094CE4CFE053B6DC4D3512B2FB5E5F36E9668EE
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
Signing time: Mon 02 Jun 2025 01:03:21 +0000
ROA not before: Mon 02 Jun 2025 00:58:21 +0000
ROA not after: Mon 01 Jun 2026 01:03:21 +0000
asID: 4800
IP address blocks: 2400:8000:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 06:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:94:ce:4c:fe:05:3b:6d:c4:d3:51:2b:2f:b5:e5:f3:6e:96:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Validity
Not Before: Jun 2 00:58:21 2025 GMT
Not After : Jun 1 01:03:21 2026 GMT
Subject: CN=011FBEF4EE043A193A7938AB4602B007377C54AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:93:f2:4f:9d:c5:02:8f:b3:8f:05:fe:e1:
4a:31:43:e1:15:f6:52:0c:26:d2:68:88:0b:c3:ee:
76:ea:6a:ae:30:1e:02:5a:99:8a:84:d9:e0:3c:c2:
29:e7:f0:5d:88:85:99:da:df:92:97:63:1a:3b:2d:
4b:1a:43:34:e0:b2:95:af:a6:8d:ea:2e:2d:32:3d:
cd:49:4e:5e:73:4c:5a:40:4d:2d:72:11:7e:b3:0b:
90:26:36:37:70:3d:5b:e8:03:e3:84:5f:58:d9:21:
1c:a3:c3:42:79:92:fb:09:b2:bf:d8:3d:65:49:a2:
45:fb:90:25:7f:36:2c:46:13:27:4e:a8:04:83:9e:
49:10:a0:73:cb:92:cd:08:ef:79:3e:9f:91:7e:76:
ae:8f:5c:c3:be:88:02:b7:de:29:77:dc:da:6f:dd:
f9:22:80:e7:fb:8d:a4:6f:e3:94:d5:8f:4c:bf:13:
ef:28:33:a1:81:6f:51:1f:46:f3:18:9c:3b:5b:85:
14:8a:5a:de:a3:ba:6c:6c:9d:ed:99:f2:ce:fd:d5:
2c:01:e5:fa:09:bd:02:b6:e2:b5:30:89:fd:82:31:
fe:ba:8e:15:76:48:87:16:d0:0a:98:e3:a6:82:9f:
01:19:d8:c7:74:17:ae:cb:99:12:6d:59:ed:98:7e:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:BE:F4:EE:04:3A:19:3A:79:38:AB:46:02:B0:07:37:7C:54:AC
X509v3 Authority Key Identifier:
keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:1000::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b8:85:48:82:3c:e3:15:43:41:ac:a4:f8:64:ef:f7:05:2f:
ef:49:ad:50:ca:16:ac:26:3c:60:4f:9c:82:e6:91:36:75:08:
bc:17:67:c5:ff:18:74:a1:13:2f:17:3e:99:d4:19:0b:fb:d4:
8a:b5:50:a6:24:02:d0:25:f4:9b:be:d2:02:40:32:b1:ed:39:
fb:52:a5:e6:02:85:37:d0:93:7a:ad:0d:39:f9:a0:97:52:ea:
36:0d:7c:ed:c1:40:58:68:d1:fa:f5:e4:b2:92:76:c0:39:1a:
33:28:d4:12:04:1c:3d:ee:48:7c:05:27:10:e4:74:24:8d:1d:
b4:8e:e4:bd:be:61:6b:a4:1c:9f:eb:72:b9:2a:14:23:0c:cb:
d1:a5:bc:2e:38:d8:61:9f:80:b1:28:09:e2:16:e0:52:e4:80:
7d:70:8f:62:ed:ef:5e:90:af:cb:5d:0a:82:2d:7c:d1:f2:d1:
ba:5b:56:de:d5:10:72:83:a2:42:41:fd:d5:66:ad:5a:be:ea:
60:c4:c0:89:46:45:5e:ef:39:ae:ef:f5:9b:54:50:73:00:43:
fe:d5:0c:3c:2d:7b:1b:ee:1a:38:dc:16:30:c1:2c:a2:fd:4e:
68:7c:d6:be:75:bb:89:a7:27:14:2c:49:27:38:8d:b3:11:30:
7c:39:c9:b0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUJTOTP4FO23E01ErL7Xl826WaO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNTA2MDIwMDU4MjFaFw0yNjA2MDEwMTAzMjFaMDMxMTAvBgNV
BAMTKDAxMUZCRUY0RUUwNDNBMTkzQTc5MzhBQjQ2MDJCMDA3Mzc3QzU0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSpPyT53FAo+zjwX+4UoxQ+EV
9lIMJtJoiAvD7nbqaq4wHgJamYqE2eA8winn8F2IhZna35KXYxo7LUsaQzTgspWv
po3qLi0yPc1JTl5zTFpATS1yEX6zC5AmNjdwPVvoA+OEX1jZIRyjw0J5kvsJsr/Y
PWVJokX7kCV/NixGEydOqASDnkkQoHPLks0I73k+n5F+dq6PXMO+iAK33il33Npv
3fkigOf7jaRv45TVj0y/E+8oM6GBb1EfRvMYnDtbhRSKWt6jumxsne2Z8s791SwB
5foJvQK24rUwif2CMf66jhV2SIcW0AqY46aCnwEZ2Md0F67LmRJtWe2YfrgfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUAR++9O4EOhk6eTirRgKwBzd8VKwwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMyMzQzMDMwM2EzODMwMzAzMDNhMzEzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQAgAAQ
ADANBgkqhkiG9w0BAQsFAAOCAQEApriFSII84xVDQayk+GTv9wUv70mtUMoWrCY8
YE+cguaRNnUIvBdnxf8YdKETLxc+mdQZC/vUirVQpiQC0CX0m77SAkAyse05+1Kl
5gKFN9CTeq0NOfmgl1LqNg187cFAWGjR+vXkspJ2wDkaMyjUEgQcPe5IfAUnEOR0
JI0dtI7kvb5ha6Qcn+tyuSoUIwzL0aW8LjjYYZ+AsSgJ4hbgUuSAfXCPYu3vXpCv
y10Kgi180fLRultW3tUQcoOiQkH91WatWr7qYMTAiUZFXu85ru/1m1RQcwBD/tUM
PC17G+4aONwWMMEsov1OaHzWvnW7iacnFCxJJziNsxEwfDnJsA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:43 2025 by rpki-client