
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa
File: 3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa (raw, json)
Hash identifier: pkEXO9z6ueQK4Zfm+Nf2SnX0XqqCEAzcqWTKKEbP/J8=
Subject key identifier: 92:8D:09:BE:9F:9F:DC:54:83:D8:33:07:68:C2:42:59:AF:FD:BB:8D
Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial: 0C5B22E1BE9FBEED04EFA84D47C588D53A2BDCE4
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa
Signing time: Sat 04 Oct 2025 16:44:53 +0000
ROA not before: Sat 04 Oct 2025 16:39:53 +0000
ROA not after: Sat 03 Oct 2026 16:44:53 +0000
asID: 63868
IP address blocks: 103.112.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 18:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5b:22:e1:be:9f:be:ed:04:ef:a8:4d:47:c5:88:d5:3a:2b:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Validity
Not Before: Oct 4 16:39:53 2025 GMT
Not After : Oct 3 16:44:53 2026 GMT
Subject: CN=928D09BE9F9FDC5483D8330768C24259AFFDBB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:4e:d3:99:ca:eb:62:00:a8:f8:50:d2:52:
ae:a3:74:1b:da:e7:0b:2a:ae:f3:1f:23:95:28:fb:
c9:42:45:da:bd:25:78:7c:01:90:e7:9d:b0:4d:67:
41:a7:be:d5:70:12:e9:76:0e:99:64:64:08:1c:37:
e2:17:c2:95:15:00:c2:72:2d:90:5a:81:07:e7:b3:
ab:8b:6a:47:93:c1:49:25:8b:3a:87:6c:a6:a4:f7:
71:f2:0f:b2:11:4d:1f:25:85:83:c9:3d:6d:28:0e:
15:da:30:43:27:ae:6f:e5:5b:7f:5e:79:3c:b0:55:
41:c2:0f:5a:fe:5d:01:4d:49:9d:02:c4:a3:a6:ff:
04:18:7c:6d:d2:f3:f2:08:ae:83:cb:24:50:e1:ec:
9b:0f:cf:61:b2:c7:bf:4e:b8:ec:37:09:e6:41:1b:
9e:c7:fe:14:99:02:d9:03:f7:a0:a4:35:64:6e:9e:
15:71:7a:12:dc:b0:1c:1d:37:9f:54:8c:b3:94:26:
bb:46:c3:3d:c1:4e:75:6b:5d:c5:d6:6b:19:83:b2:
75:e5:08:c9:3a:05:7c:2c:8c:25:0d:45:47:54:11:
b2:cc:30:c1:78:82:98:f5:52:a7:65:8e:2d:42:b7:
ec:27:58:ca:59:4f:af:2e:62:55:cc:61:a1:b2:86:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:09:BE:9F:9F:DC:54:83:D8:33:07:68:C2:42:59:AF:FD:BB:8D
X509v3 Authority Key Identifier:
keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.136.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ba:51:4d:96:7c:8f:99:8f:0e:11:43:d4:01:dc:5b:e0:ee:
54:97:1e:8c:e5:7b:f2:f6:41:54:b7:d9:2b:90:b1:da:2f:8d:
19:2b:de:93:78:7b:02:02:fb:28:f9:80:58:81:96:cf:ed:44:
a8:83:e2:0a:cb:57:a2:80:ae:3f:9d:af:77:cf:b3:d4:d0:d8:
82:27:8c:b7:cb:cc:a4:81:c9:87:e7:d0:65:04:af:32:5a:70:
81:6b:dc:de:9c:6f:85:5b:c6:a3:a2:c6:9e:ed:ae:ce:ab:27:
37:72:9f:09:29:4e:34:84:52:cf:75:75:dc:be:e9:25:60:82:
86:c0:3c:4c:18:5c:69:20:93:1f:27:d5:9e:88:d4:7c:2f:2b:
1e:23:6e:70:1d:ea:80:19:aa:5a:90:a9:a4:ca:3e:92:43:96:
4d:6c:7e:65:04:16:fd:65:c7:34:4f:ba:26:60:10:c7:5d:eb:
2b:21:76:81:03:fd:0a:a9:c4:fe:40:ec:ed:3c:d0:29:87:55:
b0:73:9a:4e:25:1e:1c:73:2a:aa:b8:15:3a:3a:3f:33:58:70:
13:29:ed:a8:bf:c0:33:af:01:ce:67:8c:5c:8f:39:70:d4:0a:
46:a4:fc:58:c0:f7:52:03:f7:b9:ba:59:7b:3b:e0:bd:f6:80:
cc:d4:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:38:58 2025 by rpki-client