
$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
File: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (raw, json)
Hash identifier: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=
Subject key identifier: C6:73:6E:D6:7E:C5:20:50:54:B9:70:AA:4F:AC:D1:5A:C7:5B:8E:9D
Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial: 0E0A617FA4736C5D723112D715BFF0B6C7F0F1BB
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
Signing time: Wed 23 Jul 2025 15:00:00 +0000
ROA not before: Wed 23 Jul 2025 14:55:00 +0000
ROA not after: Wed 22 Jul 2026 15:00:00 +0000
asID: 142339
IP address blocks: 103.169.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 18:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0a:61:7f:a4:73:6c:5d:72:31:12:d7:15:bf:f0:b6:c7:f0:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
Validity
Not Before: Jul 23 14:55:00 2025 GMT
Not After : Jul 22 15:00:00 2026 GMT
Subject: CN=C6736ED67EC5205054B970AA4FACD15AC75B8E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:33:63:05:26:68:1b:75:a9:33:b3:63:b4:
b2:6e:dc:0d:9b:7f:35:dd:d4:ab:89:d5:93:5d:2f:
fb:1d:05:f9:4e:48:b3:ad:fa:f4:f9:66:5b:f3:20:
5e:d1:0a:2c:9b:1e:f7:b4:fd:9f:1f:8c:ae:b8:8e:
78:11:30:c5:69:de:11:26:9e:74:56:0b:52:81:73:
1e:3b:7b:73:e8:11:b4:2c:d3:6b:7d:f8:70:df:93:
5f:bf:3d:81:37:5e:f6:61:5d:5a:8c:30:b6:58:e6:
3e:11:08:10:5a:7b:c0:2c:32:a5:5b:2c:66:64:93:
e0:68:5f:66:72:4e:c6:3c:b5:0a:90:6b:94:88:20:
4a:19:5e:96:87:3c:84:09:5b:30:e7:fc:68:b7:ab:
9e:2c:8f:8d:a1:59:57:7c:b6:62:07:88:fa:f9:e1:
a4:05:72:93:54:b9:26:da:17:c6:e9:79:1e:56:ca:
18:74:c8:12:18:8a:86:c9:a4:c2:4d:91:e2:87:35:
0c:86:e3:93:c8:62:9e:95:57:13:d7:a8:fe:81:46:
a9:77:83:ac:c1:78:dc:ea:e9:8a:27:88:f1:bb:ae:
86:7e:95:48:f6:c8:c6:ad:83:e8:5f:2c:95:d0:4f:
36:0f:87:19:47:7d:61:e8:f5:5d:cd:80:5c:ea:a2:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:6E:D6:7E:C5:20:50:54:B9:70:AA:4F:AC:D1:5A:C7:5B:8E:9D
X509v3 Authority Key Identifier:
keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:94:7c:0c:c0:01:e5:2c:e0:f9:87:ea:96:4d:d0:44:5e:b2:
48:a1:7c:23:7a:0c:d7:dd:c3:e1:77:eb:2d:17:2c:1b:12:5f:
a7:e5:9d:88:4c:1e:75:e6:9e:15:7c:26:d0:0c:d3:74:2e:51:
6e:1e:1d:f3:dc:45:27:d9:c6:86:ea:e0:f8:93:23:f8:e5:4f:
c0:d3:d9:fc:4f:b3:92:92:4d:83:60:18:54:b1:bc:de:df:7b:
e8:94:98:49:33:ea:8c:47:b9:2b:c9:0a:f6:29:64:f7:b5:1d:
be:85:da:ac:76:5a:f7:2e:a0:2f:ff:9e:4b:0f:dd:66:46:6a:
b7:16:aa:58:ff:1f:9a:c3:b1:83:ce:09:f3:06:c0:73:06:5a:
82:60:ef:73:fd:da:4f:9a:47:9a:0f:a7:07:87:9c:aa:f0:0c:
33:ad:29:d5:02:84:01:f9:fa:4f:e4:4f:6c:93:a5:6e:06:71:
c6:37:e4:ac:5b:a7:49:6f:6f:3c:a8:54:57:d9:0d:c4:33:5a:
e9:57:d2:05:eb:a6:38:f9:cd:2a:88:81:01:d8:69:8f:b1:b7:
67:d2:32:7a:d6:8e:6f:e2:16:0f:59:75:07:5a:2e:74:0f:c3:
e5:fd:7a:d7:25:93:62:49:59:82:78:cf:d6:78:78:f2:87:b5:
f2:37:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:34 2025 by rpki-client