
$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39382e302f32342d3234203d3e203137393130.roa
File: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier: lS1RAb31GjYc1m7ta2BgMoEsUFuw8zYDY4GO22I3IUc=
Subject key identifier: 0A:0E:C7:66:B8:18:09:BC:B4:10:2F:0B:4D:66:94:BD:98:F8:8C:35
Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial: 5C5B228D2176AE2C57FE81553201EC0D67FB8B2B
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39382e302f32342d3234203d3e203137393130.roa
Signing time: Thu 25 Sep 2025 01:02:24 +0000
ROA not before: Thu 25 Sep 2025 00:57:24 +0000
ROA not after: Thu 24 Sep 2026 01:02:24 +0000
asID: 17910
IP address blocks: 202.127.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 11:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5b:22:8d:21:76:ae:2c:57:fe:81:55:32:01:ec:0d:67:fb:8b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Validity
Not Before: Sep 25 00:57:24 2025 GMT
Not After : Sep 24 01:02:24 2026 GMT
Subject: CN=0A0EC766B81809BCB4102F0B4D6694BD98F88C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:d8:be:a8:3e:ae:7b:9e:ea:14:f5:f8:62:
d4:ed:39:0a:61:99:1b:c7:a4:40:8c:32:22:81:0d:
e4:97:9d:a4:1d:5c:15:ee:1a:2a:f2:2b:fd:a0:2c:
4e:6a:ad:8e:d9:a4:a2:20:4c:31:46:77:af:7e:72:
a3:de:e5:b6:77:53:55:18:42:9e:c6:71:8b:12:29:
2e:f0:77:ae:12:d7:03:63:25:fc:8f:13:64:92:19:
47:7b:42:b6:83:66:a1:2b:66:ac:4c:50:b4:3f:f5:
db:01:83:92:66:b1:de:23:25:07:3b:53:57:49:a3:
d3:3b:9a:a8:85:f4:95:5d:4f:5a:8c:3c:ab:62:80:
d0:ab:cc:d1:b6:f5:b1:ad:17:ee:7f:97:4f:16:88:
9c:6f:23:9a:1a:f0:b6:c1:39:e9:f2:ef:43:58:57:
b8:62:47:ff:d8:b5:40:e3:37:8b:84:65:59:08:69:
1c:b2:7b:b4:15:85:e1:46:9f:05:f4:49:7a:71:38:
87:68:74:e4:12:48:d9:54:c7:7e:f2:55:96:32:03:
7f:c7:2e:34:25:76:c2:8a:6d:3b:f5:84:07:a9:25:
98:6b:4d:1a:a2:ac:45:6c:f6:5f:bd:a3:d3:cb:f1:
1b:10:a3:cf:a8:4c:f7:35:55:7c:b5:d5:2c:f5:fd:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:C7:66:B8:18:09:BC:B4:10:2F:0B:4D:66:94:BD:98:F8:8C:35
X509v3 Authority Key Identifier:
keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39382e302f32342d3234203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.127.98.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7a:be:da:18:b6:4a:fb:3d:7f:ee:f1:2e:16:77:c5:07:19:
7d:bd:23:ed:d2:e6:37:09:5d:f3:dc:f9:87:74:dd:52:9e:a9:
b4:84:36:00:03:5b:f9:99:c5:8c:16:66:97:62:f4:c1:da:b2:
14:b8:1e:ad:35:c2:b1:73:d1:a3:36:d1:e8:d0:48:14:17:84:
93:bb:7d:36:4f:49:eb:03:7e:30:22:41:b2:ff:5b:3a:72:a4:
19:0d:08:7d:79:1e:6a:7f:7b:70:8b:a0:d8:43:11:a5:6b:38:
db:c8:80:00:d1:64:b5:1c:c7:71:4c:47:a6:75:4b:12:1a:53:
b9:5a:38:86:b4:7b:6d:54:bb:22:56:a5:ba:18:d8:a2:8d:68:
64:4b:46:e8:cd:9a:57:f2:03:bc:fc:7d:96:d7:92:4e:10:00:
94:63:b7:74:e2:0b:5e:33:a9:14:f4:33:3c:7a:cc:81:84:8c:
5a:24:27:46:e8:7a:65:ca:e9:18:eb:8c:a9:32:c9:de:a1:18:
7e:c8:44:76:c1:a6:4d:53:9f:0e:f9:67:27:db:31:39:1c:7a:
02:cb:5f:ab:fe:d6:1f:52:d3:43:c2:c8:66:a3:a0:42:0d:03:
18:1f:ac:98:08:1b:26:6f:38:8d:a5:1f:11:64:05:2f:28:73:
74:4c:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:28 2025 by rpki-client