
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa
File: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=
Subject key identifier: 6E:63:30:5D:13:F5:B1:49:E2:18:C6:6E:65:EF:87:37:C2:8A:8C:07
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 26CFB0CD849B6E177C60099A593A2D41326FA8D4
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa
Signing time: Thu 03 Apr 2025 00:00:00 +0000
ROA not before: Wed 02 Apr 2025 23:55:00 +0000
ROA not after: Thu 02 Apr 2026 00:00:00 +0000
asID: 138090
IP address blocks: 103.124.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 18:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cf:b0:cd:84:9b:6e:17:7c:60:09:9a:59:3a:2d:41:32:6f:a8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: Apr 2 23:55:00 2025 GMT
Not After : Apr 2 00:00:00 2026 GMT
Subject: CN=6E63305D13F5B149E218C66E65EF8737C28A8C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:d1:e1:2c:c3:19:2e:c8:67:19:76:25:6d:
fc:39:c4:31:a4:a2:44:65:f8:18:71:fe:03:fa:f6:
c9:59:5b:85:a9:ad:a2:da:b1:51:82:84:01:57:5a:
cd:62:11:be:47:ba:82:c7:59:de:21:6c:20:36:e4:
f6:a5:c1:cf:32:54:8b:30:56:37:e8:68:1f:b7:b0:
cb:c5:90:99:45:b7:e6:ff:62:df:ed:fd:e0:60:a4:
e4:a0:b0:dc:5b:0b:a7:78:fe:63:44:10:c1:e5:fe:
83:06:cd:4a:4a:08:61:6e:a7:c5:8c:f7:81:e1:63:
af:4f:3c:77:8e:30:ac:a9:51:dc:04:b2:88:9a:90:
a5:81:05:c8:bd:cc:60:7c:62:0b:05:9e:34:6f:63:
38:f0:b4:eb:e1:11:03:d0:45:13:a4:19:2c:b3:bb:
f0:4c:1a:1a:e3:6c:a3:61:c5:1e:dc:90:cc:5b:ab:
96:1f:54:2e:14:4d:17:5d:98:1b:9e:f0:90:3c:a3:
37:95:72:5c:7f:79:46:85:a6:4a:37:ba:7c:1c:dc:
74:35:f6:e2:92:d0:e3:bf:c9:56:dd:eb:b4:09:3d:
53:30:55:8b:75:a4:5f:80:4d:b1:0b:f5:a5:8a:d0:
38:3c:50:15:0a:4a:0e:d8:b7:56:f7:61:58:ad:53:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:63:30:5D:13:F5:B1:49:E2:18:C6:6E:65:EF:87:37:C2:8A:8C:07
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:79:05:0a:3b:23:87:92:63:fe:9f:f7:c3:c8:06:04:bd:76:
85:6d:90:32:06:ce:37:83:08:ef:84:1f:65:e0:c6:38:70:05:
70:a5:4f:d4:25:30:5d:cc:cf:bc:38:4f:b1:0c:94:f8:d2:b2:
ec:e6:26:84:89:da:00:9f:d6:bc:ba:69:96:d5:8d:be:74:37:
79:5d:74:3f:f6:c7:c7:6f:ee:23:85:18:cd:46:4d:ff:50:2a:
7f:96:04:be:37:97:0e:61:05:80:74:89:51:8d:97:22:45:9a:
9e:8a:d6:c6:90:6c:1c:51:52:24:39:ee:51:60:1f:9e:e7:f0:
d4:5a:c0:34:3e:d3:87:2f:a9:50:2f:02:d5:06:74:bc:ab:fc:
19:d1:ac:c0:69:e0:83:f1:55:9b:54:a9:34:44:ec:ab:b8:09:
1d:f3:62:8c:e0:70:1e:ca:2f:0b:f4:2c:21:58:ca:6b:3c:4c:
cc:c2:95:5b:03:8c:b8:93:4b:f6:2b:ac:1f:fd:99:a6:48:04:
4a:31:59:83:93:d3:23:f7:92:35:c1:f2:f1:94:23:97:9c:5b:
39:44:1d:bc:f9:e5:6d:66:fa:fe:7c:1f:ef:88:e3:ad:78:37:
b6:eb:96:63:31:da:bc:1f:21:2b:41:af:74:8a:0b:fb:47:66:
3e:3d:2a:aa
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJs+wzYSbbhd8YAmaWTotQTJvqNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF
M0I3OTQxQjAeFw0yNTA0MDIyMzU1MDBaFw0yNjA0MDIwMDAwMDBaMDMxMTAvBgNV
BAMTKDZFNjMzMDVEMTNGNUIxNDlFMjE4QzY2RTY1RUY4NzM3QzI4QThDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+9HhLMMZLshnGXYlbfw5xDGk
okRl+Bhx/gP69slZW4WpraLasVGChAFXWs1iEb5HuoLHWd4hbCA25Palwc8yVIsw
VjfoaB+3sMvFkJlFt+b/Yt/t/eBgpOSgsNxbC6d4/mNEEMHl/oMGzUpKCGFup8WM
94HhY69PPHeOMKypUdwEsoiakKWBBci9zGB8YgsFnjRvYzjwtOvhEQPQRROkGSyz
u/BMGhrjbKNhxR7ckMxbq5YfVC4UTRddmBue8JA8ozeVclx/eUaFpko3unwc3HQ1
9uKS0OO/yVbd67QJPVMwVYt1pF+ATbEL9aWK0Dg8UBUKSg7Yt1b3YVitU9LFAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbmMwXRP1sUniGMZuZe+HN8KKjAcwHwYDVR0j
BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw
OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3
OTQxQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMmM5Mjg1LWMwOWEtNDUwNi1h
MzIwLWZkYTFhMDdmZDllYy8wLzMxMzAzMzJlMzEzMjM0MmUzMjM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfPQwDQYJ
KoZIhvcNAQELBQADggEBAKR5BQo7I4eSY/6f98PIBgS9doVtkDIGzjeDCO+EH2Xg
xjhwBXClT9QlMF3Mz7w4T7EMlPjSsuzmJoSJ2gCf1ry6aZbVjb50N3lddD/2x8dv
7iOFGM1GTf9QKn+WBL43lw5hBYB0iVGNlyJFmp6K1saQbBxRUiQ57lFgH57n8NRa
wDQ+04cvqVAvAtUGdLyr/BnRrMBp4IPxVZtUqTRE7Ku4CR3zYozgcB7KLwv0LCFY
yms8TMzClVsDjLiTS/YrrB/9maZIBEoxWYOT0yP3kjXB8vGUI5ecWzlEHbz55W1m
+v58H++I4614N7brlmMx2rwfIStBr3SKC/tHZj49Kqo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:06 2025 by rpki-client