
$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
File: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier: FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=
Subject key identifier: 59:A3:39:C2:40:CE:C2:D1:D1:51:C5:F1:62:96:0C:83:CC:70:8D:FB
Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial: 781F5C9422CED3113866746E058AAA00D74C26F2
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
Signing time: Fri 27 Jun 2025 04:00:38 +0000
ROA not before: Fri 27 Jun 2025 03:55:38 +0000
ROA not after: Fri 26 Jun 2026 04:00:38 +0000
asID: 149951
IP address blocks: 103.111.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 21:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1f:5c:94:22:ce:d3:11:38:66:74:6e:05:8a:aa:00:d7:4c:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Validity
Not Before: Jun 27 03:55:38 2025 GMT
Not After : Jun 26 04:00:38 2026 GMT
Subject: CN=59A339C240CEC2D1D151C5F162960C83CC708DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:39:ce:1e:5b:90:77:54:e1:90:4b:23:6d:
4a:f8:15:19:02:a0:84:b5:0e:ec:1e:13:f6:89:82:
47:ea:fb:bc:b0:bb:17:fd:85:11:9f:f8:de:86:31:
37:10:1a:cd:f2:9b:56:4f:06:06:f8:c2:8b:5e:d0:
15:3c:bd:95:f2:40:39:c9:50:e6:36:00:9e:44:6a:
b5:0c:72:6b:09:de:77:ee:4f:16:8d:fd:ae:71:2e:
a6:a3:df:d8:f8:4a:b7:2a:10:d8:83:a1:58:37:ca:
22:9c:b4:0a:59:4e:58:4b:94:3f:44:a5:0e:d0:de:
04:a2:0f:f3:c4:f5:71:30:38:d2:7e:ad:aa:fa:43:
4e:6e:26:36:79:2e:24:c1:df:6f:43:43:fd:2f:d7:
c5:4b:65:51:d4:df:83:2a:99:5d:63:5c:26:41:bd:
b2:71:b0:5b:bb:cf:74:86:8d:1a:be:89:a2:c9:9e:
30:44:bb:d2:ee:41:99:dd:e0:32:42:45:ce:6d:3e:
23:b0:ec:8c:f0:09:d2:a3:96:23:5f:37:90:df:66:
20:cd:59:df:38:65:a2:13:0c:2b:95:7a:82:58:15:
39:a2:b4:6a:11:3b:c9:87:10:50:fb:64:58:e5:48:
f4:e8:6a:2b:29:16:6b:cf:d3:fe:83:41:4a:1a:1d:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:39:C2:40:CE:C2:D1:D1:51:C5:F1:62:96:0C:83:CC:70:8D:FB
X509v3 Authority Key Identifier:
keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:b9:c6:72:82:b2:e7:e4:e1:cd:19:4b:f3:20:17:1f:9f:
db:36:c2:16:ab:da:dd:91:95:4e:54:65:9e:a5:6f:30:36:e2:
7b:ae:49:c4:76:61:39:9a:00:4c:0c:72:33:38:05:ed:14:e5:
5f:db:c3:3d:07:da:37:b0:9f:a6:d5:89:4b:16:ea:f5:b6:65:
d1:de:9a:9f:e1:6b:da:2a:e4:0c:96:17:1c:37:f1:1e:3a:dc:
a4:a1:4c:b1:9d:48:af:08:83:30:ab:47:2b:b7:d0:53:1a:52:
ce:dc:5c:db:4a:4d:51:31:d4:76:6b:76:e8:57:39:72:23:af:
35:c4:8b:36:9d:d2:06:fc:db:2d:2d:a5:04:91:c9:4d:2e:70:
09:00:71:63:b4:ea:86:36:d5:ad:54:23:ec:b6:a8:e1:9e:e0:
a3:1b:ef:3d:c4:54:8b:ab:55:a2:4e:2e:ba:44:6a:a7:d1:49:
f6:5f:f6:ac:4d:4b:01:c5:38:93:2e:cb:a1:3e:0e:db:8d:4a:
bb:7f:1c:d9:5c:cf:cc:e5:bd:f4:3d:d4:d2:c5:14:30:19:12:
f8:c2:41:e2:8d:dd:fd:d0:97:0c:9c:9e:cb:18:71:fb:93:eb:
1f:b2:24:a6:33:3a:ae:37:c5:6d:a1:fc:2e:7b:04:25:a3:31:
a2:4e:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:01:54 2025 by rpki-client