
$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
File: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=
Subject key identifier: 8C:C2:E6:E7:60:29:77:9B:50:58:DA:5A:C1:1A:B2:64:BB:56:EB:1A
Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial: 0138E536B59A62939A9BFD2A4AB7CE6754934B15
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
Signing time: Wed 04 Jun 2025 20:00:00 +0000
ROA not before: Wed 04 Jun 2025 19:55:00 +0000
ROA not after: Wed 03 Jun 2026 20:00:00 +0000
asID: 59273
IP address blocks: 103.226.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 07:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:38:e5:36:b5:9a:62:93:9a:9b:fd:2a:4a:b7:ce:67:54:93:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Validity
Not Before: Jun 4 19:55:00 2025 GMT
Not After : Jun 3 20:00:00 2026 GMT
Subject: CN=8CC2E6E76029779B5058DA5AC11AB264BB56EB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:09:47:ca:22:cc:89:17:d0:0a:e6:4e:41:
17:9e:34:d4:c1:c7:48:e8:13:38:9e:e0:9e:27:6d:
13:7c:18:49:54:fa:6c:c9:92:dc:ad:1c:02:ec:f9:
d1:c4:5a:b4:8c:1d:66:ec:e6:76:c5:97:17:16:cd:
ec:1f:51:56:7f:90:59:5d:0a:92:59:a8:c9:f2:ef:
2d:43:16:ac:0b:8e:e7:3d:94:ad:b2:de:30:c0:60:
38:19:df:a2:8b:55:3e:62:55:34:ea:85:69:f4:6d:
ca:79:61:fe:19:af:ac:a3:78:09:7c:e2:52:b0:bf:
c4:c5:0b:9a:2b:45:e8:33:91:2c:89:19:8c:7d:b6:
4a:23:ed:0d:1f:db:34:9b:50:70:8e:8d:a0:26:f1:
c9:2a:69:bc:8d:08:50:3f:bf:5a:20:b3:32:3a:70:
6e:ad:0f:d4:29:61:c7:a4:7a:2f:1c:e6:40:82:35:
46:e8:b6:97:c6:78:99:1d:e1:03:06:f3:4f:5f:fe:
93:ee:e6:ae:81:84:a0:8b:58:cf:cb:dd:8d:ce:90:
da:fe:ff:cf:a9:c1:3a:5c:68:9b:f5:92:16:63:45:
37:ab:34:71:fc:b7:23:7e:25:09:29:17:8d:16:54:
99:50:36:2c:61:4f:9c:b5:44:0d:f9:ce:ba:04:26:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:E6:E7:60:29:77:9B:50:58:DA:5A:C1:1A:B2:64:BB:56:EB:1A
X509v3 Authority Key Identifier:
keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.50.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a8:10:e2:51:bc:74:52:1a:01:93:41:89:0f:da:41:bd:f4:
8f:88:63:ce:d0:48:6d:38:94:4c:b2:f5:4a:9d:66:94:68:fa:
9c:82:5b:84:55:21:f3:77:a6:3b:af:92:e9:4a:b5:63:48:72:
6b:44:a6:c2:24:8f:a2:bb:05:1f:6f:3b:0b:67:8a:39:91:3c:
cc:fb:2f:3f:38:c4:de:63:b5:6f:85:c6:54:04:fc:36:22:18:
3f:3a:15:cc:3b:20:2f:61:eb:76:6a:35:c7:9c:c9:46:30:fb:
22:65:6c:e1:de:a9:4d:40:9b:0d:24:64:0c:71:37:43:fc:ea:
22:0b:30:e4:a1:5c:e7:77:54:f5:26:ee:33:1f:c4:97:b3:f4:
bf:a2:83:68:6a:69:50:73:12:e9:30:e6:7d:90:c9:45:9b:db:
77:f8:33:ec:cc:7e:11:e7:f3:7d:3b:01:2d:24:f9:6f:6d:a3:
e3:40:d0:75:31:99:86:e7:75:a7:99:b2:7a:b3:9a:07:5b:b3:
ca:ca:65:93:2f:b4:e5:36:29:85:f5:5b:17:eb:bc:86:7b:c5:
bc:a8:63:a3:5b:76:af:19:4b:8b:13:85:55:62:7e:09:9a:ed:
36:7b:38:b6:c4:45:88:b1:62:bc:6d:6e:18:1f:72:3a:c2:f9:
76:d3:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:25:40 2025 by rpki-client