
$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3130332e332e34372e302f32342d3234203d3e203536323338.roa
File: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (raw, json)
Hash identifier: R9+89SgRY/t0tmu72BY2SfLfNg/9wdtNupYFgMHeobM=
Subject key identifier: 01:63:E5:D5:9B:A6:24:F5:20:29:2F:6C:D9:D6:3D:90:6A:68:92:85
Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186
Certificate serial: 60E3202C87C70DDA4758695C0F9140FD39BD9F84
Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3130332e332e34372e302f32342d3234203d3e203536323338.roa
Signing time: Tue 28 Oct 2025 03:02:24 +0000
ROA not before: Tue 28 Oct 2025 02:57:24 +0000
ROA not after: Tue 27 Oct 2026 03:02:24 +0000
asID: 56238
IP address blocks: 103.3.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl
rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 20:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e3:20:2c:87:c7:0d:da:47:58:69:5c:0f:91:40:fd:39:bd:9f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186
Validity
Not Before: Oct 28 02:57:24 2025 GMT
Not After : Oct 27 03:02:24 2026 GMT
Subject: CN=0163E5D59BA624F520292F6CD9D63D906A689285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:86:46:14:b5:bd:38:80:ea:b3:c1:dc:56:
92:b1:56:72:a2:b5:b3:6a:b7:ac:5b:45:3c:d5:38:
eb:09:36:4b:85:44:80:82:a7:a7:97:7d:e4:6a:ef:
5a:84:20:c9:42:19:97:b8:80:a3:f0:52:3e:65:6d:
4f:49:86:1e:29:9a:d3:1b:d1:cb:75:f3:d6:b9:1f:
64:44:00:48:eb:ce:58:c4:fe:ab:0e:c2:48:f2:94:
ab:64:6e:55:31:36:ad:1f:31:ee:62:45:05:57:e2:
9f:46:7a:9c:eb:36:48:7d:3d:f3:fb:87:1e:c6:b8:
79:93:5c:cf:ad:62:5c:6b:2f:55:7f:fc:90:97:32:
c5:ef:cb:4f:4f:9b:f8:05:8c:23:77:98:e8:d9:07:
4b:83:19:46:8f:60:7a:2a:bb:a1:69:f9:47:27:88:
2e:a0:7b:01:60:4f:7d:34:6b:e6:13:0e:3d:57:42:
74:79:ae:fb:17:d9:43:cb:18:00:d7:ca:6e:50:49:
d7:11:a5:3b:45:49:42:43:bb:02:05:d0:2a:51:3c:
c9:f2:f7:a3:54:05:2a:80:f2:72:96:9a:f0:3b:bd:
e9:79:a3:a1:1a:18:22:a6:47:da:5f:bc:6e:2b:72:
8c:81:bf:ff:a1:53:c7:7d:46:32:c7:89:a0:25:7c:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:E5:D5:9B:A6:24:F5:20:29:2F:6C:D9:D6:3D:90:6A:68:92:85
X509v3 Authority Key Identifier:
keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3130332e332e34372e302f32342d3234203d3e203536323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:94:6f:0b:07:54:21:09:f8:da:b8:ca:94:7e:df:3d:f7:42:
5c:64:e1:23:db:e7:46:30:1d:52:c3:9f:71:a5:7d:ff:bd:48:
dd:45:23:17:af:1d:42:da:03:93:07:14:4d:14:a2:d1:f0:ee:
ff:da:51:1f:36:d5:5e:6d:82:0f:0f:d9:88:ab:9d:aa:19:49:
f6:04:02:9a:6c:29:b6:48:41:5e:01:44:c5:42:ef:4b:f3:f7:
7b:61:f4:a6:32:31:4a:f5:a4:ad:38:00:93:09:84:0b:11:e5:
c4:7e:0f:ef:09:ff:77:50:f3:97:ec:cb:99:be:43:3f:4a:bb:
d2:d1:55:07:ce:5d:89:ff:d7:5a:15:0d:d2:a9:34:a8:79:7b:
dd:86:ed:b8:0d:0f:79:32:79:b2:79:88:55:83:7a:74:f7:58:
51:fe:4a:ca:2c:29:85:8e:fe:85:04:a7:8a:4e:b0:10:04:41:
1f:71:ae:9b:b7:86:45:34:80:e4:62:00:58:a0:fb:2f:4c:63:
15:d8:e4:24:1a:e9:eb:d2:f4:a3:da:bc:48:43:77:5c:88:e8:
d9:91:ff:38:89:c6:30:58:67:7a:b6:9f:e5:95:c0:7e:b0:c9:
e6:04:ec:00:bd:8b:53:11:67:95:79:42:cb:f9:10:49:8d:c4:
2e:1f:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:46:09 2025 by rpki-client