
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa
File: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=
Subject key identifier: 8B:64:70:E3:E8:60:7F:C2:09:A8:93:CF:0C:16:DC:A4:0E:0D:25:AC
Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14
Certificate serial: 4CEBD7721F0636FB12225F92551AA5060ECE69E2
Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa
Signing time: Mon 30 Jun 2025 05:00:00 +0000
ROA not before: Mon 30 Jun 2025 04:55:00 +0000
ROA not after: Mon 29 Jun 2026 05:00:00 +0000
asID: 4800
IP address blocks: 103.239.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 15:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:eb:d7:72:1f:06:36:fb:12:22:5f:92:55:1a:a5:06:0e:ce:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14
Validity
Not Before: Jun 30 04:55:00 2025 GMT
Not After : Jun 29 05:00:00 2026 GMT
Subject: CN=8B6470E3E8607FC209A893CF0C16DCA40E0D25AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:e0:0b:5b:d3:65:33:7d:ae:3f:c3:d9:95:
d6:e9:24:d9:d6:b5:8a:6a:df:dc:7e:e3:e4:09:c7:
3d:7b:d0:75:f8:fc:51:95:c2:c3:e7:78:05:5c:b1:
4a:c1:2d:3c:27:b1:15:97:4e:b2:7c:98:48:f5:37:
e7:70:d6:ac:fd:aa:f6:56:54:74:27:69:ef:a0:86:
79:02:19:9e:bc:33:63:7d:30:7a:f3:62:a5:65:de:
95:cb:07:98:de:3c:01:2f:fd:84:6c:64:d9:a7:00:
c8:23:67:2b:84:eb:49:39:30:4a:be:64:10:03:e5:
07:27:00:7f:dc:cc:73:0d:12:93:31:5a:dd:b8:50:
4f:10:d6:21:db:5b:e5:21:8c:57:87:84:9c:8b:67:
bd:6a:93:69:1d:f5:ba:2d:0e:80:e2:66:62:17:5f:
f6:9c:e7:6d:e1:8c:01:f2:8c:06:80:0e:94:2b:dc:
af:95:b8:ea:7c:c5:12:85:93:51:da:9a:fc:be:4c:
d0:4d:62:62:8a:af:4c:87:1d:e9:9e:cd:aa:50:9c:
5f:94:94:e3:2b:9e:81:07:af:a5:40:d5:22:02:73:
ae:49:6c:8a:e2:bb:69:bf:cc:c6:17:52:e1:1d:42:
22:9b:6c:04:95:26:16:2c:2e:c7:68:8b:2a:f9:0f:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:70:E3:E8:60:7F:C2:09:A8:93:CF:0C:16:DC:A4:0E:0D:25:AC
X509v3 Authority Key Identifier:
keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.214.0/23
Signature Algorithm: sha256WithRSAEncryption
91:3e:94:86:29:6c:ab:1f:c7:a5:b2:c2:e8:7a:05:01:5b:69:
03:33:29:f3:ab:1e:2e:76:fd:09:7c:9c:f7:3d:03:d5:bb:29:
25:83:bb:5f:32:f7:3b:44:65:06:6b:2b:29:ee:de:c7:ff:cf:
94:a2:e5:96:56:6a:d9:31:41:e7:96:1e:21:20:59:95:f0:ef:
7b:28:bc:0d:18:cc:16:45:95:08:5e:0b:5b:07:b9:9e:03:7d:
bb:d8:c4:b7:d7:29:49:21:be:37:55:87:9e:14:61:54:ed:3f:
7e:c8:c4:53:0b:56:cc:81:ea:d0:06:fe:fb:16:cf:bd:33:39:
94:de:a5:67:fc:7e:c5:6f:38:a2:02:19:50:38:a8:29:e8:52:
a5:5b:e5:f3:12:ec:0f:4f:22:2f:07:ee:c1:19:04:82:b2:72:
8d:8f:91:5b:96:a9:1b:47:7d:d0:b3:43:e9:6f:a7:61:d8:48:
9a:9c:d3:68:9a:88:94:a0:9f:0c:41:e8:5e:3a:9e:65:4e:5c:
8c:dd:17:b0:e1:c4:aa:f4:05:52:8e:3c:66:71:de:e0:41:a3:
d1:14:a5:83:6a:f7:f6:5e:07:e2:ef:d2:58:f7:d8:90:29:6f:
ca:a8:58:85:ff:60:bd:a7:24:96:ca:ea:be:d3:c8:fa:ab:fd:
98:7d:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:28 2025 by rpki-client