
$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e36372e34392e302f32342d3234203d3e20313431363732.roa
File: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (raw, json)
Hash identifier: BDIVxvQovejwSTdQVoThOksyexqcbmKKBcpAZUy8WSU=
Subject key identifier: 46:67:91:E2:B3:6D:27:5C:D5:5D:F3:A7:40:84:6C:4F:CD:59:0E:6C
Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343
Certificate serial: 1FDB3E6EB4FC0CE8776DF9A7A32325900CBCB1DC
Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e36372e34392e302f32342d3234203d3e20313431363732.roa
Signing time: Wed 29 Oct 2025 07:01:45 +0000
ROA not before: Wed 29 Oct 2025 06:56:45 +0000
ROA not after: Wed 28 Oct 2026 07:01:45 +0000
asID: 141672
IP address blocks: 103.67.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 10:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:db:3e:6e:b4:fc:0c:e8:77:6d:f9:a7:a3:23:25:90:0c:bc:b1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343
Validity
Not Before: Oct 29 06:56:45 2025 GMT
Not After : Oct 28 07:01:45 2026 GMT
Subject: CN=466791E2B36D275CD55DF3A740846C4FCD590E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7c:23:dc:06:bc:98:ec:00:29:1c:d5:e5:d3:
4c:77:ea:3b:fc:16:d1:0f:3b:21:cf:00:10:0b:fe:
38:de:eb:bb:fe:f8:c0:12:c5:1e:bf:2c:16:4f:b1:
f7:cf:f5:fe:1d:d0:59:8c:a4:8e:c6:06:3c:c1:da:
03:9f:3e:b2:2a:75:a5:8a:86:dc:f0:b7:7a:0e:19:
79:82:cf:6e:9f:12:32:79:50:ce:8a:0c:a8:6a:a7:
39:33:ec:ae:98:80:2b:82:21:07:40:a5:f5:2d:9c:
e6:66:3f:0a:e1:42:a7:13:5e:54:f8:cc:22:68:85:
a6:75:db:0d:20:db:3f:7c:b3:d3:3a:45:3b:bc:f8:
83:1c:0a:f8:0f:7f:56:5c:73:f4:ca:eb:e0:a9:6d:
71:0d:d6:c8:31:48:84:42:3a:f4:82:ea:c0:66:1f:
a8:7b:d0:04:68:68:bb:86:a7:dd:bc:ef:bd:2a:77:
91:d4:9f:57:3c:b9:df:15:72:8e:18:03:a7:fe:99:
6d:2e:25:c5:5b:04:19:88:49:9e:43:1a:1f:93:a4:
8a:af:db:46:b8:32:70:bc:dd:e1:fe:3d:4f:eb:52:
94:52:98:1a:2b:d3:8e:d7:d5:9a:d0:b9:bd:24:0b:
0b:ce:c2:a2:4d:a0:da:42:ca:b3:26:fc:5e:4e:49:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:91:E2:B3:6D:27:5C:D5:5D:F3:A7:40:84:6C:4F:CD:59:0E:6C
X509v3 Authority Key Identifier:
keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e36372e34392e302f32342d3234203d3e20313431363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a7:3b:13:c8:67:3e:43:38:66:19:2e:5d:26:4d:64:43:2d:
0c:98:13:66:cc:d2:75:78:55:dc:00:31:b5:af:e1:8d:ae:5f:
90:8e:84:76:42:ba:d8:8c:56:b9:fa:12:43:37:13:b8:2f:9b:
bc:cd:e4:43:3e:0b:ef:da:82:c3:01:50:44:92:72:4c:54:ad:
bd:4b:fc:d2:b1:f4:5a:0d:74:b9:79:01:be:3b:14:40:d1:e7:
76:4a:56:6f:a1:f3:98:30:09:5a:63:49:c1:c1:16:e3:d2:ff:
1b:3f:06:34:38:3a:43:03:f9:9e:14:62:c9:07:6c:dc:65:53:
9e:c9:f1:c8:38:61:a0:b3:94:d9:6b:ba:67:8c:fa:e0:20:ef:
5d:b5:e8:06:5a:45:8d:a5:be:1e:9d:0b:1d:01:a8:08:fb:75:
c4:eb:93:6d:83:ed:b6:90:64:a8:a6:41:74:29:fc:2d:9d:af:
8d:5f:38:65:dd:15:27:76:0c:38:e8:87:39:80:aa:76:43:19:
4d:df:b4:89:24:ff:56:a6:84:a1:ec:6f:b4:62:bb:6b:7c:bb:
2f:89:bd:de:dd:77:bb:8e:78:ad:25:cc:6b:5d:75:65:e1:a6:
b4:70:71:37:6e:20:7d:53:5b:ac:26:21:f8:2c:0b:eb:e4:6a:
63:d7:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:15:02 2025 by rpki-client