
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa
File: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier: Fw/0AJDMHBUjrTpFISAUnqnpVom/VzAtOWBqxJyUap0=
Subject key identifier: AE:50:86:54:09:D8:F1:A1:50:41:62:0B:66:8E:88:70:4B:2B:67:B7
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 22B5B82A3F2B36203E098D1244ED8C46DEC5B5B2
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa
Signing time: Mon 23 Jun 2025 18:00:00 +0000
ROA not before: Mon 23 Jun 2025 17:55:00 +0000
ROA not after: Mon 22 Jun 2026 18:00:00 +0000
asID: 4787
IP address blocks: 116.206.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Oct 2025 22:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b5:b8:2a:3f:2b:36:20:3e:09:8d:12:44:ed:8c:46:de:c5:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jun 23 17:55:00 2025 GMT
Not After : Jun 22 18:00:00 2026 GMT
Subject: CN=AE50865409D8F1A15041620B668E88704B2B67B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:ff:1a:92:67:28:18:31:50:26:02:bb:50:
1e:d0:a0:61:e3:53:38:da:1c:45:c8:8c:45:d4:78:
9d:45:87:8a:08:93:c7:66:35:af:32:25:64:4e:78:
67:15:21:b4:fb:e2:18:e9:7e:9b:b0:b2:83:71:00:
26:03:aa:13:8b:a3:e2:90:df:f7:44:b5:1a:8d:5e:
7c:1b:02:85:bf:97:f5:d3:d2:1b:e2:4b:da:ed:dd:
59:7c:86:ed:d0:2b:b7:7e:01:bb:71:db:7b:aa:ed:
d6:2e:a0:c4:4e:cf:16:27:f0:61:27:9e:40:96:43:
ed:34:d5:e2:e9:f9:54:45:3c:73:1b:2d:7b:84:4a:
f8:75:84:54:50:a2:ae:95:08:0d:df:5a:1d:29:6d:
7b:43:30:51:3e:c3:fb:5a:d7:c4:61:ed:22:33:e7:
79:b5:59:64:fb:e7:1d:a3:9f:d8:31:20:0d:bf:c3:
3d:2e:54:6c:ba:77:38:ef:5b:d0:ee:74:56:cb:24:
e6:4c:56:b4:67:26:23:52:90:e9:5c:a1:d1:0c:10:
e9:4b:a7:7f:e4:2d:44:ef:a9:8f:a4:60:5e:47:a7:
4c:b0:79:8d:37:91:b6:2b:3e:c9:d6:11:b2:6b:db:
fb:03:0c:4a:7d:91:41:a2:2c:b3:c4:47:83:62:e2:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:50:86:54:09:D8:F1:A1:50:41:62:0B:66:8E:88:70:4B:2B:67:B7
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.240.0/22
Signature Algorithm: sha256WithRSAEncryption
25:5e:e9:64:df:1d:6e:6a:e2:00:5a:f7:4b:65:41:3f:68:42:
2d:94:b3:9f:2b:ac:79:32:57:74:ce:7f:c4:ac:ac:40:48:fe:
cb:de:3b:45:7a:4f:f2:2f:f7:44:23:2d:cc:0c:d7:fe:59:b4:
df:1a:e8:02:7e:c7:15:da:7a:f8:d0:8e:6b:36:3c:cd:29:8d:
8b:dd:72:4a:6a:a6:b8:eb:0b:78:9d:da:cc:30:7a:d1:04:78:
f8:65:5b:2e:10:5d:95:ae:7c:09:01:e7:45:14:77:ac:84:40:
66:bf:50:2a:89:da:25:72:63:34:6a:b4:94:63:72:47:28:1d:
96:31:19:ab:7e:ba:ec:a5:b0:1f:59:6c:ce:8f:d1:39:40:cf:
b5:04:d3:b7:f9:92:dc:62:75:5d:3b:47:b2:f8:72:c0:a1:69:
01:16:04:8e:d8:b8:0a:95:b8:a5:ce:16:e7:8f:bf:63:01:af:
a7:e9:6e:e9:69:cd:28:18:4b:d7:29:b5:03:f8:35:46:2f:5b:
54:f6:ea:5e:6b:26:28:2d:c5:cc:b9:13:58:14:a0:9d:4d:71:
a3:32:fa:6b:78:d9:09:5b:0c:f5:b3:1a:23:db:ae:b4:ff:30:
7c:43:fe:7e:11:c7:83:cc:08:c1:69:ff:51:6b:6d:2b:78:26:
9d:9f:dd:b7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIrW4Kj8rNiA+CY0SRO2MRt7FtbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNTA2MjMxNzU1MDBaFw0yNjA2MjIxODAwMDBaMDMxMTAvBgNV
BAMTKEFFNTA4NjU0MDlEOEYxQTE1MDQxNjIwQjY2OEU4ODcwNEIyQjY3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1v8akmcoGDFQJgK7UB7QoGHj
UzjaHEXIjEXUeJ1Fh4oIk8dmNa8yJWROeGcVIbT74hjpfpuwsoNxACYDqhOLo+KQ
3/dEtRqNXnwbAoW/l/XT0hviS9rt3Vl8hu3QK7d+Abtx23uq7dYuoMROzxYn8GEn
nkCWQ+001eLp+VRFPHMbLXuESvh1hFRQoq6VCA3fWh0pbXtDMFE+w/ta18Rh7SIz
53m1WWT75x2jn9gxIA2/wz0uVGy6dzjvW9DudFbLJOZMVrRnJiNSkOlcodEMEOlL
p3/kLUTvqY+kYF5Hp0yweY03kbYrPsnWEbJr2/sDDEp9kUGiLLPER4Ni4mi/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUrlCGVAnY8aFQQWILZo6IcEsrZ7cwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzEzNjJlMzIzMDM2MmUzMjM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnTO8DANBgkqhkiG
9w0BAQsFAAOCAQEAJV7pZN8dbmriAFr3S2VBP2hCLZSznyuseTJXdM5/xKysQEj+
y947RXpP8i/3RCMtzAzX/lm03xroAn7HFdp6+NCOazY8zSmNi91ySmqmuOsLeJ3a
zDB60QR4+GVbLhBdla58CQHnRRR3rIRAZr9QKonaJXJjNGq0lGNyRygdljEZq366
7KWwH1lszo/ROUDPtQTTt/mS3GJ1XTtHsvhywKFpARYEjti4CpW4pc4W54+/YwGv
p+lu6WnNKBhL1ym1A/g1Ri9bVPbqXmsmKC3FzLkTWBSgnU1xozL6a3jZCVsM9bMa
I9uutP8wfEP+fhHHg8wIwWn/UWttK3gmnZ/dtw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:21 2025 by rpki-client