
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa
File:                     3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (raw, json)
Hash identifier:          dOmtQ8xQIM/OxqNbVqEyr7os+kU4sc0vVqyQb/jy+M4=
Subject key identifier:   60:70:5A:2D:BB:C5:83:43:E2:CF:81:3F:98:FB:7D:2B:6C:EA:DF:C8
Certificate issuer:       /CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Certificate serial:       43140338B60A9A21FF4E7BEC3345042569231F6C
Authority key identifier: E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa
Signing time:             Wed 22 Oct 2025 01:00:01 +0000
ROA not before:           Wed 22 Oct 2025 00:55:01 +0000
ROA not after:            Wed 21 Oct 2026 01:00:01 +0000
asID:                     150508
IP address blocks:        103.126.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
                          rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 01:59:56 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:14:03:38:b6:0a:9a:21:ff:4e:7b:ec:33:45:04:25:69:23:1f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
        Validity
            Not Before: Oct 22 00:55:01 2025 GMT
            Not After : Oct 21 01:00:01 2026 GMT
        Subject: CN=60705A2DBBC58343E2CF813F98FB7D2B6CEADFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:3d:74:16:59:cd:07:cd:08:3e:96:7f:8d:
                    3e:13:55:ac:5a:0f:4c:ac:86:09:7c:d1:5b:06:ed:
                    8d:02:c7:ed:2c:f9:b9:da:ba:bf:38:49:7d:bc:f6:
                    25:51:6c:9e:da:dc:31:5b:c0:e9:ce:bb:0f:82:e9:
                    7b:aa:7f:77:0c:d0:8a:4f:f7:61:c8:76:fd:90:41:
                    b4:10:ed:2c:3e:0d:ed:8e:29:82:51:8b:b4:5d:1d:
                    9b:3f:ea:f4:56:28:08:3f:91:79:9b:d3:3e:66:c6:
                    b6:50:01:d4:38:ac:08:23:58:9b:c8:a8:f8:39:4a:
                    62:cd:72:98:c3:49:d6:9c:42:5f:bb:1d:e1:71:ab:
                    3d:f0:04:5d:45:a2:e7:36:6f:0f:c1:66:de:a4:51:
                    9c:1e:fc:12:02:51:5a:e2:a0:b8:ab:07:30:6b:1a:
                    1d:64:b7:2e:98:05:fb:74:50:ca:9a:85:96:7d:8f:
                    67:f0:24:cf:4d:e5:1f:ab:c8:02:16:4c:ef:ba:95:
                    9d:c8:e2:4e:89:64:bc:f6:e9:02:cf:7d:1c:2d:54:
                    77:db:18:88:53:b2:de:e9:4b:9c:33:24:a6:eb:ce:
                    16:74:b6:3e:4f:16:13:b5:e4:91:d1:cf:28:4f:59:
                    25:e6:f8:9d:49:00:8b:0d:3b:35:0c:c0:24:08:d2:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:5A:2D:BB:C5:83:43:E2:CF:81:3F:98:FB:7D:2B:6C:EA:DF:C8
            X509v3 Authority Key Identifier:
                keyid:E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.26.0/24
    Signature Algorithm: sha256WithRSAEncryption
         34:e2:d7:08:02:de:52:ae:37:0b:1b:ab:3f:fb:9a:e4:80:33:
         75:ed:d4:73:c2:7c:1a:b0:02:51:97:71:37:e8:f2:92:e5:6c:
         e4:81:18:a9:6e:b5:19:99:c1:d8:d2:5f:e5:ab:37:64:46:90:
         c5:a3:f7:e4:6d:41:7f:22:5d:75:bf:b8:a1:92:5d:51:10:18:
         2e:74:53:00:31:51:3a:a9:9b:dd:3a:34:1b:e7:45:22:68:fe:
         dc:1a:47:de:71:33:fb:7e:8c:5f:2c:2d:11:5f:a7:f4:f3:83:
         3e:f6:41:05:1c:f8:38:62:a6:e5:b7:01:f0:38:c1:14:9b:d8:
         d7:6c:1f:ba:42:f9:c8:ac:33:24:3c:50:c3:2f:8b:b5:97:66:
         81:6d:de:02:c4:f6:e5:6e:95:12:bc:49:63:f3:73:c9:e5:01:
         ff:20:db:23:cb:92:67:70:42:3c:0b:08:19:92:b6:e1:7a:8d:
         6d:29:c0:42:f7:c0:1f:b6:1b:bb:ec:3a:33:99:6c:f4:5e:66:
         85:d0:b2:d1:9c:44:df:e1:ed:23:3e:3f:ec:b2:f6:d7:a7:0e:
         25:a2:fa:d2:1a:8b:44:6a:10:91:3a:5c:b0:13:f1:a6:f9:2a:
         8f:ac:6c:23:c4:a2:21:e6:98:de:61:2d:0d:25:a5:06:b7:6a:
         3d:cb:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:26:13 2025 by rpki-client