
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
File: 3132322e3132382e32392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: gO+XqMix9826G/E8qpAnmBWc+ZFELcs5/EN5bzmKtHM=
Subject key identifier: F9:46:61:40:8F:ED:26:2B:D9:18:B1:C7:D6:E0:40:A1:DF:83:00:B0
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 364D20255CE60B07D4276FE42866D7337871F156
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
Signing time: Thu 25 Sep 2025 04:02:54 +0000
ROA not before: Thu 25 Sep 2025 03:57:54 +0000
ROA not after: Thu 24 Sep 2026 04:02:54 +0000
asID: 18059
IP address blocks: 122.128.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 11:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4d:20:25:5c:e6:0b:07:d4:27:6f:e4:28:66:d7:33:78:71:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Sep 25 03:57:54 2025 GMT
Not After : Sep 24 04:02:54 2026 GMT
Subject: CN=F94661408FED262BD918B1C7D6E040A1DF8300B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:4d:9c:35:e6:71:6b:df:3c:13:12:e3:d0:
a2:63:a8:c7:19:78:77:9d:9a:ff:f4:a5:cc:4e:a1:
e0:7c:4e:5e:68:ed:b9:bf:d1:45:f3:06:15:b8:4e:
26:0b:c4:72:cf:2e:81:c8:60:b5:be:b9:a3:b3:2b:
24:76:35:79:04:dc:21:6b:5a:e3:73:76:f4:e8:ca:
09:9c:66:5a:60:d9:ff:78:56:df:88:67:a7:80:af:
81:ec:33:7f:10:2d:6b:cb:37:6b:da:3b:23:3c:e0:
df:e1:b4:2c:8b:77:f6:19:a9:37:6b:6f:83:17:dd:
99:fc:a6:b9:66:28:6c:36:16:99:b3:c8:ac:f6:86:
39:a8:e9:34:75:95:1f:ee:60:11:b5:88:c1:23:ce:
b3:c1:3e:97:a9:ce:6e:b1:27:75:cd:92:69:24:51:
e5:fe:95:7b:7e:c9:37:92:78:96:48:be:98:08:f0:
ee:4b:e7:5d:a1:dd:28:52:83:ec:1a:da:60:e5:b7:
8a:ae:79:aa:dd:33:55:2a:a1:fc:3c:db:78:68:38:
d7:5b:18:19:54:17:d7:70:f4:e8:14:63:d7:a7:30:
cd:35:89:f7:9f:61:e9:bc:a4:66:f0:84:5d:54:0e:
c6:48:07:de:a7:0c:c2:46:5e:da:e6:a4:a7:20:7a:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:61:40:8F:ED:26:2B:D9:18:B1:C7:D6:E0:40:A1:DF:83:00:B0
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.29.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d7:2d:ae:52:05:f3:a2:bd:22:80:e4:b3:ba:fd:79:ed:71:
fe:b3:9e:a4:06:0d:33:ba:df:29:de:ae:46:5f:21:11:5e:12:
d8:75:ea:e5:bf:0c:2f:76:f0:ce:aa:a4:2c:21:a3:b4:a6:37:
1f:f9:e1:52:44:ed:f6:72:0a:b4:a5:07:c2:70:17:8e:39:2a:
1b:2c:95:08:d3:3f:fd:6b:8f:1b:8c:73:19:d1:d3:d9:0b:74:
30:f3:cc:6b:7a:0f:d0:36:b4:c4:62:cf:6e:4a:9a:53:4c:fb:
2b:72:17:8c:4e:e8:f1:71:1e:6d:0d:d3:3b:ac:a2:60:fd:6e:
1d:32:ad:e8:be:50:b3:b0:55:9d:ae:aa:a1:4c:4a:c8:92:dc:
43:65:b4:7c:ed:c2:40:7b:10:11:9d:08:b3:da:b4:cc:6e:37:
aa:d8:e8:b1:6b:0c:e8:8c:79:12:d7:e1:4f:ed:8f:8f:82:b6:
35:4d:1d:34:26:4a:8d:69:e2:51:f6:d1:2b:7e:12:11:cb:c6:
b9:6c:fb:8d:6c:e8:9f:87:81:91:a6:54:11:e8:4a:d4:b3:74:
88:4d:c4:be:d5:8c:bc:97:89:1f:8c:04:7e:9e:15:9d:c2:76:
6e:bb:e4:29:00:b4:fe:b6:9e:33:4d:41:9b:e6:59:69:de:41:
67:f8:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:42 2025 by rpki-client