
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
File: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=
Subject key identifier: 0C:23:59:21:21:97:B6:C1:24:B0:B1:D9:60:81:D3:70:D9:F2:58:AC
Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial: 7F9D0EF5340AE3D4FB7B5C4D43F111EE5B455E90
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
Signing time: Fri 15 Aug 2025 08:00:23 +0000
ROA not before: Fri 15 Aug 2025 07:55:23 +0000
ROA not after: Fri 14 Aug 2026 08:00:23 +0000
asID: 136842
IP address blocks: 103.100.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 00:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9d:0e:f5:34:0a:e3:d4:fb:7b:5c:4d:43:f1:11:ee:5b:45:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Validity
Not Before: Aug 15 07:55:23 2025 GMT
Not After : Aug 14 08:00:23 2026 GMT
Subject: CN=0C2359212197B6C124B0B1D96081D370D9F258AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:d4:8a:b8:77:e6:b1:3f:2a:88:ca:2e:af:
e2:a2:ba:d8:ac:57:2f:3f:d8:b0:1f:38:24:bf:ca:
fb:b1:a5:5c:cf:41:7a:2a:ba:29:86:a0:e9:a3:2a:
3e:e1:c1:bb:1a:9f:86:30:36:74:3a:39:fb:af:3e:
61:9e:f5:ab:3a:f3:67:84:d5:6a:33:18:0f:10:27:
45:84:9b:d9:b7:ea:2d:5b:15:c9:c3:c3:d8:05:83:
5a:2e:7b:36:29:13:10:88:be:4a:4f:40:b3:a6:bb:
e0:5e:65:b5:9d:d5:65:1c:70:30:0f:44:08:74:e5:
f9:57:b5:de:ec:62:4b:f9:27:64:51:67:4f:cc:cb:
92:a8:ae:e1:db:74:04:eb:89:42:46:5e:f9:8f:09:
41:80:1a:c9:dc:29:5e:ed:72:ad:8c:83:ed:ef:cc:
40:ee:f1:a5:11:3b:d1:21:45:f0:81:52:9f:57:8f:
e6:65:0e:52:8f:6c:8d:d4:6d:d0:ec:61:e5:df:1c:
06:8f:eb:5b:20:f7:da:47:0b:65:3b:dc:b2:4b:4c:
09:1d:4e:e0:90:8b:91:67:fe:6e:ed:a9:32:a1:a2:
af:47:ed:3b:1d:96:e7:8f:ed:85:fb:3f:39:cd:1f:
c4:db:d4:16:1c:19:66:d3:5f:5b:0d:ae:c0:7c:85:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:23:59:21:21:97:B6:C1:24:B0:B1:D9:60:81:D3:70:D9:F2:58:AC
X509v3 Authority Key Identifier:
keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:20:5d:25:88:1f:8e:9f:33:d5:d9:bd:40:77:54:49:01:f1:
b0:8e:44:a1:97:19:28:f5:3b:0f:63:47:d1:b1:c5:ed:c7:04:
f1:7d:33:11:ca:e9:8a:31:fb:cb:96:61:f3:dc:9b:14:02:0d:
4c:b4:d1:5c:5e:a3:0c:74:29:ff:5e:e0:f9:cb:ae:b1:93:4c:
f3:45:ab:00:b8:e8:b9:43:49:f9:87:dd:11:58:29:ad:05:7e:
48:48:14:88:c3:32:00:ff:24:39:2b:56:fb:c0:64:ee:4b:c3:
cb:90:dc:8f:de:67:b9:d4:a6:a9:9c:0d:5f:12:92:52:23:85:
c7:d6:55:86:17:1e:ed:dc:f4:58:6e:c5:9a:cd:09:3b:39:7d:
c1:af:95:f2:65:a8:1b:13:75:06:87:bc:d5:db:52:86:5a:d5:
8e:89:a6:6b:c5:0e:d6:c1:3a:01:87:ec:31:c6:f0:2e:4f:5e:
68:95:76:b7:13:f1:ba:7d:be:b0:8a:54:a3:2e:18:81:06:46:
07:1a:3a:37:6a:8d:be:75:a0:41:38:fd:15:51:3c:bd:16:a8:
db:64:b6:ba:75:90:71:0e:96:ed:44:5d:d6:f1:4b:53:7a:bb:
7c:1d:dc:28:f9:d8:04:02:ad:d8:a8:21:2c:0e:98:bb:8f:47:
90:c9:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:50:48 2025 by rpki-client