
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
File: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (raw, json)
Hash identifier: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=
Subject key identifier: 7E:3B:C8:AC:F4:01:C7:72:57:88:4F:56:AD:FD:42:24:BB:CC:18:CE
Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Certificate serial: 74A571FBCAAE994B707169E0654E7430ADB1D82D
Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
Signing time: Tue 29 Jul 2025 12:00:00 +0000
ROA not before: Tue 29 Jul 2025 11:55:00 +0000
ROA not after: Tue 28 Jul 2026 12:00:00 +0000
asID: 141978
IP address blocks: 103.166.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 02:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a5:71:fb:ca:ae:99:4b:70:71:69:e0:65:4e:74:30:ad:b1:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Validity
Not Before: Jul 29 11:55:00 2025 GMT
Not After : Jul 28 12:00:00 2026 GMT
Subject: CN=7E3BC8ACF401C77257884F56ADFD4224BBCC18CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:ef:25:f2:60:da:12:94:54:6e:fc:ee:16:
f7:44:78:ca:db:c6:7c:19:52:1e:ec:d5:97:9f:5f:
85:be:a4:6e:78:ce:5b:f6:9c:29:9f:c4:72:52:cd:
12:34:a4:40:be:d4:c4:e8:c1:3b:1b:1a:ed:7e:9b:
c3:09:12:cc:bd:b0:83:03:a3:67:21:26:61:07:33:
cb:79:10:24:34:6e:f0:56:37:a3:92:b6:d9:c4:98:
61:f1:8f:9f:23:ad:57:05:fa:0e:81:d3:43:57:63:
eb:cf:a2:e4:89:61:75:a8:2c:6f:c5:63:0a:b0:d6:
85:55:f8:68:46:56:0b:fc:a5:d6:67:99:eb:e4:aa:
e4:a2:d4:90:36:3f:dd:17:1c:cf:8f:ef:f5:58:7a:
29:5d:db:f1:1f:a1:a2:bc:f5:81:f0:8c:dc:6b:9b:
40:a8:e2:ba:a0:51:be:43:17:1f:51:5b:ce:ce:70:
d0:07:bb:94:65:7b:e7:ee:67:7c:10:ba:d8:3f:d6:
b1:7b:96:93:8a:f2:51:43:7c:21:37:94:16:ef:4b:
6b:5d:ec:9b:30:79:0a:20:00:d0:62:24:dd:4d:d3:
ea:26:2c:ab:6c:54:b1:f5:b1:e5:54:c3:f5:67:f4:
bb:a3:47:ff:0c:13:9e:d2:55:88:9c:07:ed:08:54:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:C8:AC:F4:01:C7:72:57:88:4F:56:AD:FD:42:24:BB:CC:18:CE
X509v3 Authority Key Identifier:
keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ec:40:ac:71:fc:c6:d2:dd:6d:76:72:67:44:73:cc:ce:48:
bd:3e:6d:d9:76:08:64:c1:27:b3:89:21:37:fe:7e:6b:1a:19:
64:7b:46:80:14:3b:f0:ba:09:72:7e:6f:eb:1b:05:4a:9e:b2:
61:b5:bb:fa:ea:d0:63:ec:1b:cd:7b:06:2a:ea:ba:0a:5a:57:
09:28:0c:be:a5:52:1c:a1:e6:85:59:1a:71:f4:fc:78:4b:13:
72:48:9f:e4:7e:a5:12:2f:5a:4e:d1:d2:35:31:a7:74:0d:87:
8e:cd:21:02:0e:f8:9f:f9:69:b8:45:24:66:a3:d0:45:32:4e:
31:17:a3:a7:44:92:46:d1:8c:60:c3:50:dc:f3:21:ee:fe:1a:
bd:b4:9f:57:e9:2c:35:2f:96:99:bc:b6:d9:e0:71:8e:0f:f1:
f5:3c:e7:da:ac:38:63:a2:84:da:ee:b4:4a:d9:2c:13:68:8d:
73:70:58:a5:5b:7b:56:81:d8:d9:ce:fa:21:93:8b:d8:0b:0a:
ee:6d:0a:76:1b:b2:f3:82:18:a5:ca:50:2b:5f:36:83:5d:08:
63:26:c3:e0:97:98:3c:e7:22:44:ba:6d:30:45:89:2b:f2:f2:
08:aa:53:b3:93:64:95:4c:5e:c9:10:fe:f7:f7:c9:58:7b:37:
94:4a:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:51:19 2025 by rpki-client