
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa
File: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (raw, json)
Hash identifier: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=
Subject key identifier: AC:86:A8:2A:A3:14:C1:17:0E:28:69:C5:E6:DF:34:F7:65:5F:F8:72
Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Certificate serial: 246677855DB675E33999255FDE0D021489C658F7
Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa
Signing time: Mon 02 Jun 2025 01:02:58 +0000
ROA not before: Mon 02 Jun 2025 00:57:58 +0000
ROA not after: Mon 01 Jun 2026 01:02:58 +0000
asID: 136126
IP address blocks: 103.95.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 06:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:66:77:85:5d:b6:75:e3:39:99:25:5f:de:0d:02:14:89:c6:58:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Validity
Not Before: Jun 2 00:57:58 2025 GMT
Not After : Jun 1 01:02:58 2026 GMT
Subject: CN=AC86A82AA314C1170E2869C5E6DF34F7655FF872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:19:11:f4:dd:2e:47:62:57:ca:cb:b1:a4:
d8:9d:55:28:a7:fb:b4:c3:17:bb:ed:01:ce:e5:4a:
28:c2:b6:f5:25:e8:9a:0e:a9:82:e9:8f:6f:31:af:
7e:20:1f:e6:94:68:d9:fc:c4:9e:65:2c:ab:79:9d:
4e:a8:5b:55:f6:29:df:25:66:d6:74:1b:93:13:69:
28:a1:9a:fd:f4:2c:7a:f9:b2:b2:04:31:8c:6f:2c:
ab:3f:9d:1b:39:1c:87:39:7c:03:76:df:be:91:90:
4d:5e:c7:b4:87:9e:2e:0d:27:ca:90:3d:99:db:6d:
57:46:9c:5f:0f:54:c3:bd:8d:04:b5:e7:8c:1d:87:
43:57:32:f8:39:cf:7d:36:31:0d:53:24:5f:26:bb:
43:e5:60:86:bd:b7:c1:e9:e6:72:9a:48:c6:42:f8:
bd:dc:73:3d:0d:f8:ce:46:0a:fb:5c:d8:97:8d:5c:
33:51:a0:20:84:a3:95:dd:5f:51:80:dc:14:5f:12:
97:2d:06:19:cf:ae:5b:52:fb:0e:09:19:f3:9b:63:
65:71:13:bb:b0:c5:14:ea:e3:49:4a:f2:34:8a:50:
9d:97:0e:1a:50:eb:75:f9:ed:60:b6:cf:bf:42:16:
71:3b:36:3a:54:9d:48:ca:aa:b5:02:2b:ea:35:d6:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:A8:2A:A3:14:C1:17:0E:28:69:C5:E6:DF:34:F7:65:5F:F8:72
X509v3 Authority Key Identifier:
keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.160.0/23
Signature Algorithm: sha256WithRSAEncryption
02:98:c1:a5:f4:14:94:6c:2b:90:f0:36:fb:3c:c0:09:9a:0b:
b7:d7:11:e8:8e:1a:0c:3e:be:b0:73:34:66:2a:ef:1d:f3:9c:
e8:dd:4b:c4:b5:9a:f6:48:dc:52:94:e0:22:56:ed:49:0c:d9:
60:26:fe:02:b0:13:b8:a9:e4:11:58:7c:07:2c:ec:ff:da:49:
28:27:6f:3c:e6:f2:89:5d:bb:71:9f:78:9a:f5:60:f4:65:b6:
90:49:dd:e4:fe:82:b7:c8:d8:92:e0:25:83:13:af:80:49:c6:
27:88:0b:e0:ce:5e:3f:b2:2a:b6:e6:00:90:f1:a0:ef:ad:84:
e4:0f:72:89:d0:9a:1e:31:50:4f:5f:c1:b0:70:a4:1a:b7:4a:
87:38:76:40:19:87:5b:b4:d5:54:4f:48:af:bb:8a:f8:4e:f9:
7d:f5:8d:f1:5f:01:6f:5d:2c:51:fa:c0:d4:3e:94:3e:53:87:
29:f1:5f:68:89:74:f0:ef:0a:2f:ea:ec:0b:a5:05:34:1d:d5:
fa:75:0e:d4:94:5d:3e:e9:b9:15:23:5d:04:59:a8:a9:b3:3d:
67:c8:66:b1:0a:66:f7:30:35:fc:35:7b:e7:8c:ed:b7:dc:d1:
db:ab:40:d0:38:3e:d8:8d:c5:56:02:8b:da:ec:1e:30:11:65:
21:c7:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:45:16 2025 by rpki-client