
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
File: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=
Subject key identifier: 14:57:7B:42:52:FF:49:E0:17:A2:DB:FC:30:2B:57:A2:55:DB:FC:75
Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036
Certificate serial: 521233E6CFA832464312623A119C11AB99DB7704
Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
Signing time: Wed 29 Oct 2025 13:00:01 +0000
ROA not before: Wed 29 Oct 2025 12:55:01 +0000
ROA not after: Wed 28 Oct 2026 13:00:01 +0000
asID: 136064
IP address blocks: 103.83.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl
rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 13:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:12:33:e6:cf:a8:32:46:43:12:62:3a:11:9c:11:ab:99:db:77:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036
Validity
Not Before: Oct 29 12:55:01 2025 GMT
Not After : Oct 28 13:00:01 2026 GMT
Subject: CN=14577B4252FF49E017A2DBFC302B57A255DBFC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:5e:d0:da:f9:00:cc:87:6b:28:69:2f:a2:
1c:ac:db:eb:8a:c6:3b:0d:26:d7:7e:f8:8a:7a:7c:
f5:5f:25:10:be:3c:f0:e9:f8:e0:2c:a8:23:eb:94:
10:c7:3a:26:ef:6c:70:cb:51:af:f1:58:a8:9b:ce:
ef:a6:44:0c:bd:f1:ad:24:d4:89:e3:84:97:d9:d0:
61:25:f9:74:eb:19:1c:c5:e6:23:b0:62:eb:b3:43:
a5:57:58:07:fe:c3:d5:cc:06:3e:fa:f8:b4:37:d1:
86:1a:a8:5d:1f:cf:0d:9f:93:2b:3f:58:41:14:0a:
b8:b0:4f:c7:20:02:ca:8f:9b:fc:74:1b:84:7a:12:
aa:df:36:8c:c3:5d:90:54:39:a4:6c:70:97:7b:be:
cc:2e:fe:6f:63:69:22:29:b6:df:46:7f:3a:bb:10:
5d:bc:0b:09:d5:e1:94:ad:65:dd:64:3a:6b:80:6b:
cc:09:f4:3e:f4:e7:be:dc:ec:67:33:0c:11:e5:fe:
ca:e3:cf:95:a6:7b:e8:ae:19:8e:37:40:f3:8d:5d:
8c:27:ac:f8:fb:00:71:1b:3b:20:5b:20:f1:03:32:
30:ae:57:7b:bc:4c:bb:80:47:84:00:84:88:a0:64:
71:f3:2c:b2:c0:a7:d1:88:ae:df:0e:21:f9:18:02:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:7B:42:52:FF:49:E0:17:A2:DB:FC:30:2B:57:A2:55:DB:FC:75
X509v3 Authority Key Identifier:
keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.118.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a6:63:b6:19:80:72:b1:fb:90:99:6c:25:26:6e:17:fb:f0:
7b:c1:1d:f9:42:9f:93:98:de:11:31:6c:e9:2e:a8:f1:93:cb:
a1:ef:11:9a:dc:88:af:3b:62:70:ab:1f:54:38:8c:f0:98:ee:
34:c9:d5:69:e9:98:b8:b7:32:ea:bf:df:8a:e2:8f:d1:62:d3:
fa:f3:58:4c:a4:f9:77:3f:ee:66:c6:b0:84:54:7f:5b:15:29:
19:17:15:35:b3:c9:7e:ac:d0:5b:a5:f7:c7:2a:78:4d:87:5b:
c4:9b:e3:f6:1a:d8:1b:d6:c1:76:4e:2b:d5:51:02:e6:05:bb:
fe:1c:8f:f2:17:2a:9c:4a:d5:bd:20:b3:1e:9d:17:9a:53:79:
1f:87:4a:4f:64:e0:01:ff:9e:4c:96:7e:3c:bb:5f:2f:9b:85:
d6:ad:97:da:04:46:89:99:44:00:40:68:91:7b:38:c5:30:fc:
2b:53:0c:2a:7f:7f:59:a9:99:12:91:49:1b:b8:c3:e0:94:a9:
45:cc:48:05:3b:63:18:47:34:f1:c7:6b:78:e9:6a:e8:c9:62:
c5:2a:c3:4f:55:be:22:73:47:ec:14:ca:1c:ce:4e:49:f4:fa:
57:c3:a9:92:90:89:4f:1c:5e:3b:3a:82:8f:4e:6b:19:60:21:
4e:32:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:03 2025 by rpki-client