
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
File: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=
Subject key identifier: D9:22:57:E3:66:DD:34:23:64:ED:BE:6A:C8:01:7B:D4:81:7B:70:A5
Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial: 6C9B2D9A65F2275137403D4FF765C42F6599132A
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
Signing time: Mon 02 Jun 2025 02:02:48 +0000
ROA not before: Mon 02 Jun 2025 01:57:48 +0000
ROA not after: Mon 01 Jun 2026 02:02:48 +0000
asID: 131775
IP address blocks: 202.74.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 00:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9b:2d:9a:65:f2:27:51:37:40:3d:4f:f7:65:c4:2f:65:99:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Validity
Not Before: Jun 2 01:57:48 2025 GMT
Not After : Jun 1 02:02:48 2026 GMT
Subject: CN=D92257E366DD342364EDBE6AC8017BD4817B70A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:4d:74:fc:b3:6e:cf:72:40:e9:b5:a3:02:
ed:61:d9:53:c0:bc:cd:82:e5:fb:42:a9:c7:a8:99:
61:4f:00:30:f2:c1:bc:41:1c:66:bb:79:b9:b8:a3:
9d:0c:27:12:2a:fb:67:5a:b4:5c:ae:9c:b9:6c:c4:
0c:26:0c:06:02:82:49:1a:d1:e4:c0:8d:cc:80:f9:
bd:2d:42:91:3b:ae:88:1e:42:d1:6c:ba:80:a9:86:
f4:e3:4d:bf:fc:76:a5:0c:ef:d2:49:9f:38:d7:95:
c4:12:c6:5a:08:09:d7:0f:e3:74:ea:76:b8:e7:c2:
ed:22:dd:ba:3d:27:e9:70:ca:48:3b:ad:62:68:96:
ee:1b:95:83:89:b4:6c:3f:41:7f:87:cd:fd:66:53:
18:61:b5:3f:35:fe:c0:64:14:47:a8:20:f4:45:16:
7b:36:98:07:68:b8:14:db:11:c5:dd:d0:73:3c:df:
9d:3a:95:fc:5d:bf:8d:59:36:9f:1c:f5:8e:fb:5b:
2f:9f:a4:bd:b6:74:7b:2d:8f:66:d0:94:fd:33:91:
b1:54:84:8b:ae:db:fb:21:fc:83:6a:4a:bf:50:6f:
d1:94:93:ed:15:a9:03:66:f5:e6:da:f0:f9:f0:3b:
97:b3:cb:2a:31:a8:89:67:1c:43:f0:5d:fd:95:92:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:22:57:E3:66:DD:34:23:64:ED:BE:6A:C8:01:7B:D4:81:7B:70:A5
X509v3 Authority Key Identifier:
keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.74.237.0/24
Signature Algorithm: sha256WithRSAEncryption
30:27:a2:cf:f9:b8:76:cd:92:13:dd:31:5f:cc:bb:c8:d1:03:
03:1c:3e:fb:cd:8b:3a:4b:1c:57:e1:e6:b7:bd:4e:4f:6c:38:
14:34:7d:6d:ef:4e:f1:a1:a1:6a:70:6d:91:ba:94:ba:5d:2f:
16:c4:d5:23:bb:ef:36:b9:a7:6e:85:df:e2:cd:86:fe:f5:1e:
b3:06:bf:74:69:63:62:ab:69:bf:c9:2c:44:84:a2:2b:6a:6c:
27:14:21:cb:9f:72:9a:88:4a:73:f8:98:24:aa:a7:21:ed:11:
b2:e2:e0:27:7b:14:a7:19:0a:08:0c:ee:e6:b2:3b:c3:fe:0a:
c4:69:e9:74:f4:ff:2b:c4:1b:eb:b1:db:66:50:e5:41:b4:ea:
44:cf:67:4a:bf:8b:38:a2:ed:3f:f3:4c:9c:a0:e3:26:0c:25:
52:da:65:4a:29:fa:90:79:a5:38:2b:34:c4:ed:31:17:13:12:
70:5f:69:0b:9d:ea:86:ce:22:67:ed:d3:97:64:fd:ff:54:35:
18:83:fb:0d:fe:d0:5d:7e:24:fb:63:4d:b8:25:ed:2a:08:94:
d0:d0:6d:60:fb:3e:14:59:d7:62:33:4a:5f:7d:d0:76:b4:83:
c2:7e:55:e9:13:f0:b2:a3:bf:ef:df:db:2b:ae:28:c4:d3:1b:
dc:91:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:51 2025 by rpki-client