
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32342d3234203d3e20313335343539.roa
File: 3130332e36382e302e302f32342d3234203d3e20313335343539.roa (raw, json)
Hash identifier: eVMNZeAJ7cLVIjMPZBDtZxBLsAOFJHtMe9ME5u9mIlo=
Subject key identifier: 40:4C:0B:72:66:9D:37:A3:68:F8:D8:20:A4:81:18:09:B0:4D:7C:0B
Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial: 3AB7BD7E443488020A6EA1D0D9B8D2A5F5B28152
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32342d3234203d3e20313335343539.roa
Signing time: Wed 22 Oct 2025 18:00:01 +0000
ROA not before: Wed 22 Oct 2025 17:55:01 +0000
ROA not after: Wed 21 Oct 2026 18:00:01 +0000
asID: 135459
IP address blocks: 103.68.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 11:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b7:bd:7e:44:34:88:02:0a:6e:a1:d0:d9:b8:d2:a5:f5:b2:81:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Validity
Not Before: Oct 22 17:55:01 2025 GMT
Not After : Oct 21 18:00:01 2026 GMT
Subject: CN=404C0B72669D37A368F8D820A4811809B04D7C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:84:8b:00:e2:3f:74:c9:ca:bd:83:f9:83:
ed:dd:13:7e:ea:bf:71:6e:bb:9a:0e:6a:4c:59:7a:
57:06:46:75:e0:d2:ca:e9:14:35:8f:5d:ab:8a:c7:
ff:d3:21:57:e3:a3:f9:7e:55:4c:5c:6c:98:a8:8e:
58:64:4c:90:1b:2b:69:a8:9c:ed:1a:95:d6:13:26:
7f:e0:02:02:31:10:36:46:d0:96:b4:c0:a5:e8:d7:
58:22:91:5b:cc:9d:c6:56:5a:64:1c:c6:bd:ae:c9:
64:2d:82:0a:a9:54:d4:7f:66:4d:5a:d3:7d:da:d4:
92:86:13:14:78:75:1e:b3:da:9f:b0:3d:86:a3:17:
f6:df:bd:d5:04:7f:4a:da:75:33:0c:ab:56:4b:19:
5f:f1:2e:c1:ca:e9:8d:9f:bf:0b:80:4d:66:3b:29:
f7:55:b4:76:75:41:e2:65:57:0c:3b:83:f5:0f:a5:
6c:87:c8:7f:07:66:23:f8:76:92:51:dc:8e:8d:f7:
6a:55:7f:34:e5:4c:31:14:29:b5:b3:ad:63:e1:7f:
b8:14:08:10:a7:79:bb:e1:00:52:e1:f6:c9:d2:a5:
40:97:e2:ff:97:39:19:cf:85:98:88:9c:68:bb:58:
02:af:09:4a:e1:9c:40:12:13:e2:f6:d1:d1:c7:36:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4C:0B:72:66:9D:37:A3:68:F8:D8:20:A4:81:18:09:B0:4D:7C:0B
X509v3 Authority Key Identifier:
keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32342d3234203d3e20313335343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.0.0/24
Signature Algorithm: sha256WithRSAEncryption
49:14:a5:d9:3d:62:a1:6d:88:07:8c:e1:5f:d7:e5:0b:7c:75:
05:dc:f8:57:18:a4:0c:ab:33:ac:eb:68:82:15:e6:9c:51:db:
d5:98:2f:d8:02:89:c6:b6:fa:d9:f6:ee:c1:a2:60:27:40:b5:
62:18:6a:71:9b:7a:b9:95:a7:d8:d0:eb:4e:45:47:c2:c1:a9:
ff:ca:9d:3e:01:78:70:82:2e:3f:e4:92:82:2c:2a:5b:ae:ab:
c1:a9:06:a2:a7:3c:19:f3:4b:97:57:91:22:47:90:6b:0f:42:
45:e8:38:7f:21:6d:75:57:ef:ca:e6:a3:b6:e9:da:1a:0d:6b:
77:d7:5b:f8:0f:c5:da:b3:e1:b2:14:3e:26:ba:75:b1:77:12:
3d:40:99:d1:46:72:9e:ec:41:b7:78:40:39:46:74:c0:3e:fd:
47:54:31:2d:17:d5:82:83:fb:7f:4d:d7:3d:cf:7e:db:00:f1:
70:26:bd:a4:da:ed:58:a1:81:bc:41:09:1f:d8:3e:a5:2f:8c:
23:0a:f6:07:16:2f:53:c9:a3:75:81:34:5a:93:5b:09:c3:68:
8a:c6:77:59:14:e6:a1:61:fd:f5:28:d0:11:69:5c:2c:35:ed:
28:d7:a0:af:39:bd:9b:22:b4:fa:22:da:c9:6a:bc:85:1d:67:
82:f9:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:43:29 2025 by rpki-client