
$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
File: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier: Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=
Subject key identifier: F3:D3:AF:2F:9D:DB:E3:DB:D1:B5:0B:94:21:D2:37:9B:1D:6E:5E:2B
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 200239CBEEAE9D4ACBD36897282558AB08D9D641
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
Signing time: Fri 06 Jun 2025 03:00:00 +0000
ROA not before: Fri 06 Jun 2025 02:55:00 +0000
ROA not after: Fri 05 Jun 2026 03:00:00 +0000
asID: 45706
IP address blocks: 103.18.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:02:39:cb:ee:ae:9d:4a:cb:d3:68:97:28:25:58:ab:08:d9:d6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Jun 6 02:55:00 2025 GMT
Not After : Jun 5 03:00:00 2026 GMT
Subject: CN=F3D3AF2F9DDBE3DBD1B50B9421D2379B1D6E5E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ce:34:cc:d6:3e:1c:14:58:b0:44:24:d3:a4:
21:07:79:3d:b0:ae:06:32:43:28:0c:1f:44:e3:3d:
c6:b9:d5:4d:a1:6f:79:e0:6c:de:b9:c7:ca:c0:96:
10:f0:ae:80:e8:a4:7f:73:3c:ce:a5:f5:45:36:c8:
35:c9:89:1b:05:63:bf:9f:c7:76:53:9a:f4:a1:f8:
7a:e1:cd:ee:8b:2b:33:1d:4b:7f:55:0d:94:30:4d:
22:a6:ce:56:d9:a2:df:56:53:15:59:da:51:79:90:
a1:f6:6d:bb:c7:79:28:36:2a:d4:1a:59:2f:84:ab:
b8:4d:98:c1:14:76:2f:3d:c5:99:89:23:47:ab:a0:
62:be:ee:1d:33:a6:84:89:30:01:e1:f3:e1:04:c3:
86:b7:63:21:c2:87:4a:e4:81:39:91:45:c1:e9:f6:
3e:c6:e5:5b:e0:54:c9:dd:a0:85:df:3d:1a:1a:05:
32:66:96:52:95:cf:5f:20:a3:aa:36:f1:24:a9:7f:
9f:99:0a:19:23:05:0f:27:b7:28:c0:11:26:57:87:
d5:11:fb:fb:3b:be:e3:fd:8a:3c:be:18:ba:2b:2c:
c9:32:15:b5:57:25:15:73:9d:01:67:4f:c7:df:bb:
92:a6:90:f6:f7:70:c7:76:0b:a7:40:4e:73:ca:6d:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:AF:2F:9D:DB:E3:DB:D1:B5:0B:94:21:D2:37:9B:1D:6E:5E:2B
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:6a:79:b1:c7:32:d7:7c:ef:23:ce:89:03:9d:d9:f1:32:a8:
58:62:ce:38:f4:c5:fd:a5:db:24:98:73:ff:25:7e:3d:43:36:
cc:9a:81:80:04:61:41:3a:9c:bc:c0:53:a5:0e:7e:81:a5:d9:
b7:86:80:76:e4:82:a7:c0:63:4d:91:5b:6f:9a:a4:98:06:a9:
15:0a:e5:3a:db:73:9d:fd:4d:67:23:f5:2c:0a:ca:5e:bf:ff:
bd:6f:37:d7:bd:d6:36:59:d4:91:62:9f:8c:10:2d:2b:e9:c8:
d3:e8:06:83:ae:a2:55:28:80:06:06:ca:d5:6e:73:2c:68:69:
14:cb:df:29:c7:2a:b8:55:52:4d:3d:34:10:9c:b0:d2:0a:f7:
76:84:c3:2f:9d:9a:ca:aa:2b:ae:87:ff:c1:26:87:c7:17:8e:
e3:1c:15:c0:91:ff:62:4b:23:8d:53:77:f8:e1:1c:f0:aa:c8:
22:b2:a5:38:6a:6a:cf:0f:05:89:9b:e0:04:ba:6e:dc:32:44:
5a:09:4e:69:39:09:62:35:7f:23:ee:cd:1e:e1:f6:e7:79:56:
32:d3:11:97:0b:51:0e:0f:5c:19:52:21:c7:10:a1:42:0d:67:
4d:38:7f:f1:c2:45:59:4a:7d:b2:a4:00:9a:f6:d5:e0:92:90:
38:1d:db:d0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUIAI5y+6unUrL02iXKCVYqwjZ1kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1
MDU3QUNFNTAeFw0yNTA2MDYwMjU1MDBaFw0yNjA2MDUwMzAwMDBaMDMxMTAvBgNV
BAMTKEYzRDNBRjJGOUREQkUzREJEMUI1MEI5NDIxRDIzNzlCMUQ2RTVFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzjTM1j4cFFiwRCTTpCEHeT2w
rgYyQygMH0TjPca51U2hb3ngbN65x8rAlhDwroDopH9zPM6l9UU2yDXJiRsFY7+f
x3ZTmvSh+Hrhze6LKzMdS39VDZQwTSKmzlbZot9WUxVZ2lF5kKH2bbvHeSg2KtQa
WS+Eq7hNmMEUdi89xZmJI0eroGK+7h0zpoSJMAHh8+EEw4a3YyHCh0rkgTmRRcHp
9j7G5VvgVMndoIXfPRoaBTJmllKVz18go6o28SSpf5+ZChkjBQ8ntyjAESZXh9UR
+/s7vuP9ijy+GLorLMkyFbVXJRVznQFnT8ffu5KmkPb3cMd2C6dATnPKbWTPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU89OvL53b49vRtQuUIdI3mx1uXiswHwYDVR0j
BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2
RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3
QUNFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h
ZWU0LTNlZjRiOGQzMDJkZC8wLzMxMzAzMzJlMzEzODJlMzIzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzUzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnEhwwDQYJKoZIhvcN
AQELBQADggEBALdqebHHMtd87yPOiQOd2fEyqFhizjj0xf2l2ySYc/8lfj1DNsya
gYAEYUE6nLzAU6UOfoGl2beGgHbkgqfAY02RW2+apJgGqRUK5Trbc539TWcj9SwK
yl6//71vN9e91jZZ1JFin4wQLSvpyNPoBoOuolUogAYGytVucyxoaRTL3ynHKrhV
Uk09NBCcsNIK93aEwy+dmsqqK66H/8Emh8cXjuMcFcCR/2JLI41Td/jhHPCqyCKy
pThqas8PBYmb4AS6btwyRFoJTmk5CWI1fyPuzR7h9ud5VjLTEZcLUQ4PXBlSIccQ
oUINZ004f/HCRVlKfbKkAJr21eCSkDgd29A=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:53:21 2025 by rpki-client