
$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
File: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: BBYheiBkB3dBiiEhGQeh9Khilzpm4R8TSiKBpkInNLE=
Subject key identifier: 4F:3A:84:F4:A3:72:A1:B9:AC:19:01:B2:5A:F9:79:27:78:D7:1B:2C
Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial: 0D6B8081890032C67FFFC9231206B0F3A3D6BBD8
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
Signing time: Wed 22 Oct 2025 11:02:26 +0000
ROA not before: Wed 22 Oct 2025 10:57:26 +0000
ROA not after: Wed 21 Oct 2026 11:02:26 +0000
asID: 58477
IP address blocks: 103.56.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl
rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 07:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6b:80:81:89:00:32:c6:7f:ff:c9:23:12:06:b0:f3:a3:d6:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Validity
Not Before: Oct 22 10:57:26 2025 GMT
Not After : Oct 21 11:02:26 2026 GMT
Subject: CN=4F3A84F4A372A1B9AC1901B25AF9792778D71B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:3f:03:9a:16:7b:fa:79:e5:c6:47:ca:ef:
3f:d2:91:23:34:4a:4b:83:5f:af:99:b3:02:e4:d0:
7e:8a:eb:b6:79:6d:78:bc:e5:d8:e5:f0:79:56:6c:
19:5d:87:30:c1:09:af:fc:82:8a:0b:5d:fc:ba:3f:
00:83:a3:95:44:81:94:e5:cc:85:ad:fc:62:4a:e2:
83:29:88:ae:eb:a1:06:e4:6c:bd:c5:70:aa:5b:96:
03:2b:61:34:dc:9c:de:1c:ce:c7:e1:2c:cd:7d:b4:
b7:03:48:a4:ca:d5:67:87:8e:1e:ba:3d:32:2d:ee:
51:b9:a5:e9:04:82:5d:8a:98:e1:d1:d8:9a:c3:3f:
5e:df:f4:d3:c6:cc:0d:a9:47:39:16:5c:1d:66:9d:
1b:31:6b:8e:a1:1d:7d:be:9c:b0:f1:40:2b:16:25:
53:57:13:22:98:fb:2c:8d:1b:dc:be:6d:a7:25:06:
93:62:8e:b5:c1:f2:74:eb:e1:b9:1a:43:3d:69:eb:
44:25:d7:05:29:eb:96:1e:f7:5f:a8:14:b4:7c:ff:
9c:59:c5:19:30:45:73:e6:0d:f4:78:fd:68:34:d2:
f5:85:a4:3d:52:6d:b9:60:fa:ac:1e:0c:d0:d4:d9:
02:2b:bb:96:2a:17:01:44:52:56:ad:9e:b7:f6:48:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:84:F4:A3:72:A1:B9:AC:19:01:B2:5A:F9:79:27:78:D7:1B:2C
X509v3 Authority Key Identifier:
keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.93.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8f:3c:ed:4b:87:9f:63:8e:c9:d3:a5:c7:b4:0b:e4:01:9d:
15:ee:4f:3a:54:8c:12:7e:a7:d5:87:72:fa:b3:a2:9d:1c:de:
fd:33:bf:0d:8f:3c:f2:bd:9e:27:f4:45:38:a6:a3:71:74:12:
85:27:f3:de:17:49:e4:8e:54:59:f9:db:a5:cb:85:6f:40:79:
41:1e:b9:8f:c9:81:f9:f0:bf:1a:49:b7:8f:00:63:83:e0:3e:
46:19:65:76:3b:df:f1:cb:90:56:0f:c1:19:7f:b1:ca:ac:f7:
9f:0f:80:ed:7b:f9:27:be:42:6e:88:09:ec:37:db:09:41:44:
c7:1d:c8:f0:61:aa:82:24:e8:a3:a0:22:c7:b8:e9:41:0c:e0:
5f:b4:fd:6b:c1:49:c6:ad:38:3b:7e:35:a0:44:59:76:58:69:
a8:34:f0:da:f1:e8:55:5d:04:63:0c:41:bd:fd:46:fb:a2:48:
5a:c2:85:2f:d9:53:c1:f5:9b:85:e2:32:e1:1d:c6:43:88:19:
02:92:24:6d:9b:c1:a5:c7:52:6f:be:52:fa:b2:5a:21:83:7f:
91:18:66:f0:17:c5:7e:77:b3:0b:da:cc:85:62:fc:56:15:4e:
69:b8:1c:a5:ba:77:e4:bd:a8:f8:4d:09:13:60:ff:94:b9:9f:
5c:00:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:37 2025 by rpki-client