
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231382e302f32342d3234203d3e203138333933.roa
File: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier: iyyv0v9FPRc4OP+Ae13xeuXUyw/NcmfDBPRlMwPk3Tc=
Subject key identifier: 6E:53:2F:79:A7:3C:3F:3A:DA:08:79:11:1A:01:F3:76:B1:18:AE:2C
Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial: 38861AA1E9EEB077BCA5C02449C13E87D81E9AE7
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231382e302f32342d3234203d3e203138333933.roa
Signing time: Wed 15 Oct 2025 12:44:19 +0000
ROA not before: Wed 15 Oct 2025 12:39:19 +0000
ROA not after: Wed 14 Oct 2026 12:44:19 +0000
asID: 18393
IP address blocks: 203.77.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 23:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:86:1a:a1:e9:ee:b0:77:bc:a5:c0:24:49:c1:3e:87:d8:1e:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Validity
Not Before: Oct 15 12:39:19 2025 GMT
Not After : Oct 14 12:44:19 2026 GMT
Subject: CN=6E532F79A73C3F3ADA0879111A01F376B118AE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:6d:7d:f1:b8:81:4d:77:b4:45:6a:bf:d8:
f3:33:31:c7:f4:d5:b3:38:58:df:98:ca:61:8d:37:
28:e2:32:43:04:83:91:1e:75:85:ef:d5:bd:d9:93:
bf:23:d2:5a:b5:6c:6b:06:7c:53:c9:a1:cf:64:a4:
e0:2c:3e:1c:31:c8:be:8f:70:38:25:15:07:77:78:
a0:0a:90:c7:88:b5:70:5e:09:ac:6b:19:3f:b1:94:
74:92:3d:65:b4:ad:63:8c:7e:b9:6b:8f:17:f4:3a:
f1:73:5e:0c:ad:9e:bc:bb:da:ac:4a:f4:aa:9c:82:
45:62:60:59:8e:c3:82:bb:ed:9f:ed:be:50:08:05:
20:4a:cc:f8:98:b6:e5:01:10:53:42:36:07:b0:63:
24:14:92:72:f0:4a:11:ea:cd:48:99:05:3a:37:de:
5a:85:5d:bc:14:6f:a3:9e:a4:77:48:1c:b9:55:58:
34:4c:68:04:3a:3e:13:a5:8b:a6:bb:ad:60:84:32:
50:75:27:10:c2:e9:4b:f5:36:ad:29:42:6f:bb:17:
2d:ec:69:be:87:6c:07:0b:43:df:59:a6:a5:95:1c:
b4:12:c9:9f:cd:55:97:21:45:76:b1:00:92:ac:37:
18:77:39:53:0e:28:86:4b:3a:73:27:e4:37:3e:b2:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:2F:79:A7:3C:3F:3A:DA:08:79:11:1A:01:F3:76:B1:18:AE:2C
X509v3 Authority Key Identifier:
keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231382e302f32342d3234203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.77.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:65:43:64:58:1c:51:14:ee:a8:bf:e2:bd:67:71:0f:55:b3:
34:d4:81:0f:24:15:c4:53:94:08:7e:ca:70:db:be:0c:8a:ad:
0a:df:43:58:17:96:e1:3b:10:98:37:c4:86:95:b9:3c:c0:d3:
7b:e9:66:57:44:f1:67:75:b0:aa:f9:2e:f0:12:76:3f:02:6d:
9f:fb:67:80:5c:a0:6b:77:5b:5e:44:4c:be:2c:73:11:79:ee:
43:e9:40:64:b9:91:79:ec:ef:8b:af:20:5c:c5:e6:1c:4f:1f:
3a:5e:a6:26:f8:a6:ab:87:5c:3d:43:36:3a:7a:b7:e2:fc:bd:
94:b4:55:4d:d0:70:2a:dc:03:00:d4:7d:e8:c1:d0:2d:3b:5e:
3b:c3:dc:f9:ff:fc:b6:c0:3b:f5:a7:ac:9d:db:87:d5:be:2f:
14:00:a3:8d:e3:17:43:2f:bb:b6:b3:bf:07:89:13:b4:f9:71:
14:3e:a3:a6:8b:9f:cd:f3:23:a7:4e:08:b2:86:0c:6c:36:bf:
a5:95:ac:72:8d:87:46:ac:24:1e:ec:42:61:45:ee:aa:d3:55:
5d:5c:af:4f:fe:df:65:ce:86:91:de:20:0a:09:40:47:fd:43:
be:56:85:d1:aa:72:7c:57:aa:f9:bb:10:8d:95:d6:43:15:c4:
99:a2:a9:f6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOIYaoenusHe8pcAkScE+h9gemucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4
NEZBNzVBODAeFw0yNTEwMTUxMjM5MTlaFw0yNjEwMTQxMjQ0MTlaMDMxMTAvBgNV
BAMTKDZFNTMyRjc5QTczQzNGM0FEQTA4NzkxMTFBMDFGMzc2QjExOEFFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0G198biBTXe0RWq/2PMzMcf0
1bM4WN+YymGNNyjiMkMEg5EedYXv1b3Zk78j0lq1bGsGfFPJoc9kpOAsPhwxyL6P
cDglFQd3eKAKkMeItXBeCaxrGT+xlHSSPWW0rWOMfrlrjxf0OvFzXgytnry72qxK
9KqcgkViYFmOw4K77Z/tvlAIBSBKzPiYtuUBEFNCNgewYyQUknLwShHqzUiZBTo3
3lqFXbwUb6OepHdIHLlVWDRMaAQ6PhOli6a7rWCEMlB1JxDC6Uv1Nq0pQm+7Fy3s
ab6HbAcLQ99ZpqWVHLQSyZ/NVZchRXaxAJKsNxh3OVMOKIZLOnMn5Dc+sqaTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUblMveac8PzraCHkRGgHzdrEYriwwHwYDVR0j
BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG
NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB
NzVBOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYyLTBjZjAtNDNjNi1i
MjgyLWM2OWZiYTEzYTE0YS8wLzMyMzAzMzJlMzczNzJlMzIzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtN2jANBgkqhkiG
9w0BAQsFAAOCAQEAf2VDZFgcURTuqL/ivWdxD1WzNNSBDyQVxFOUCH7KcNu+DIqt
Ct9DWBeW4TsQmDfEhpW5PMDTe+lmV0TxZ3Wwqvku8BJ2PwJtn/tngFyga3dbXkRM
vixzEXnuQ+lAZLmReezvi68gXMXmHE8fOl6mJvimq4dcPUM2Onq34vy9lLRVTdBw
KtwDANR96MHQLTteO8Pc+f/8tsA79aesnduH1b4vFACjjeMXQy+7trO/B4kTtPlx
FD6jpoufzfMjp04IsoYMbDa/pZWsco2HRqwkHuxCYUXuqtNVXVyvT/7fZc6Gkd4g
CglAR/1DvlaF0apyfFeq+bsQjZXWQxXEmaKp9g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:08 2025 by rpki-client