
$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
File: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c=
Subject key identifier: E1:81:AA:F0:83:8E:4E:22:52:6A:74:81:B7:5A:A0:FA:91:F3:8B:61
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 650E46FC6859F7DC9B9FD01E11479FAFE54CBD84
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
Signing time: Mon 02 Jun 2025 01:03:18 +0000
ROA not before: Mon 02 Jun 2025 00:58:18 +0000
ROA not after: Mon 01 Jun 2026 01:03:18 +0000
asID: 45706
IP address blocks: 150.107.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 21:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0e:46:fc:68:59:f7:dc:9b:9f:d0:1e:11:47:9f:af:e5:4c:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Jun 2 00:58:18 2025 GMT
Not After : Jun 1 01:03:18 2026 GMT
Subject: CN=E181AAF0838E4E22526A7481B75AA0FA91F38B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:f1:cd:86:48:e2:59:7e:ff:c7:a5:26:37:
5c:ef:16:27:4f:43:40:f8:21:a5:fd:da:23:d0:5b:
b2:66:a2:6d:ec:bb:d3:78:4e:f5:c7:d8:36:1f:ec:
3d:de:d8:25:0e:4a:a1:69:7f:1f:83:9c:47:b4:51:
06:a6:5d:59:4e:fb:af:47:bf:7e:ba:41:39:36:a0:
1c:c5:6c:61:38:e7:7e:35:c0:82:71:76:cd:d2:ac:
e6:04:b3:96:6b:03:fa:34:e1:5f:29:16:94:28:cc:
ff:09:a5:4f:f5:09:73:9f:55:ac:8b:15:25:d9:8a:
40:cc:e4:bd:09:8e:62:81:36:e9:11:e4:cc:14:9f:
bd:c5:89:74:c3:91:d1:9f:71:8c:52:b1:5a:c0:0d:
63:6a:df:e8:72:16:f1:ef:31:7d:6d:76:72:ca:f9:
ac:fe:62:89:46:09:a4:72:fe:89:71:ca:75:66:44:
d1:76:7b:f3:da:24:9e:42:58:a5:3c:b0:97:52:f2:
0a:c0:e0:a2:7a:67:da:a1:72:43:38:df:d1:fa:dc:
68:05:2a:7b:9b:22:04:a6:4c:96:76:a9:f5:44:ea:
d4:0c:79:c9:7c:8c:cb:4f:57:ed:f2:e6:5f:fa:74:
b5:70:73:5e:f3:8d:3c:b8:84:76:96:da:07:7d:89:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:AA:F0:83:8E:4E:22:52:6A:74:81:B7:5A:A0:FA:91:F3:8B:61
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.248.0/22
Signature Algorithm: sha256WithRSAEncryption
70:2b:b8:7c:22:4d:83:45:8e:18:54:a0:b0:43:3c:51:20:85:
03:f1:87:1f:11:c6:54:74:51:f4:4e:df:15:b2:23:52:6f:22:
fd:f4:42:cb:a8:e4:6a:ee:ef:bb:f9:21:69:3d:e3:c7:2d:52:
c2:7c:a6:02:67:e3:85:f9:74:3a:84:d6:84:61:82:a9:7f:27:
68:bd:15:a7:f4:6d:ee:91:ff:f8:16:23:01:cf:84:62:eb:7b:
33:12:95:09:e1:44:de:3f:53:ac:b1:36:df:21:d6:1c:52:a7:
ac:e7:8d:f4:5a:84:67:f9:31:78:10:fb:61:c6:1c:78:45:05:
d8:06:56:42:85:68:bc:38:fe:6e:dc:79:96:41:e8:11:a3:c6:
39:f9:25:a0:20:38:49:fe:31:f3:a1:06:7a:f1:45:6b:6e:24:
2f:10:d9:1b:9e:fe:f7:55:6c:82:19:db:56:94:9f:27:85:32:
71:09:14:93:d0:ec:2a:2a:80:06:a5:f9:91:31:eb:75:ce:51:
ae:51:98:ac:4b:92:90:29:13:c9:c4:cf:1f:40:24:c3:7f:9c:
22:26:17:6e:0b:ee:cb:a8:70:fd:30:d5:c6:e0:07:5b:64:0b:
14:11:2d:4d:98:36:7a:74:19:a7:5a:9f:1b:bd:17:25:15:d4:
7f:91:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:33:01 2025 by rpki-client