
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
File: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=
Subject key identifier: 82:46:8E:41:4C:EF:18:FD:DD:D8:34:C7:1F:15:96:4D:F4:89:B6:DA
Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial: 6D59BF0A28E62D45965CAFF1FB04E8C139E0A543
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
Signing time: Tue 18 Feb 2025 16:00:00 +0000
ROA not before: Tue 18 Feb 2025 15:55:00 +0000
ROA not after: Tue 17 Feb 2026 16:00:00 +0000
asID: 139365
IP address blocks: 103.141.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:59:bf:0a:28:e6:2d:45:96:5c:af:f1:fb:04:e8:c1:39:e0:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Validity
Not Before: Feb 18 15:55:00 2025 GMT
Not After : Feb 17 16:00:00 2026 GMT
Subject: CN=82468E414CEF18FDDDD834C71F15964DF489B6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:4e:64:0c:c8:4d:7a:a3:d2:79:05:74:d2:
08:fb:a8:d0:55:f8:43:4c:5e:93:25:d6:63:72:7b:
64:71:98:01:d0:21:de:0b:7e:f4:a1:13:cc:cd:fb:
97:4e:b8:e0:a6:19:08:47:7b:99:25:79:94:d4:2f:
bb:b2:39:28:bd:c1:ff:90:39:52:52:9e:bb:cb:74:
a9:ba:4d:7c:4c:e2:c0:11:4a:e4:19:d1:5a:d5:d9:
ab:44:91:97:9a:e3:2a:03:49:28:8f:09:cc:0e:b1:
00:b8:6e:2d:74:02:64:51:1d:73:57:9b:2b:d1:86:
ab:83:56:0c:5f:c6:af:ec:c9:0a:4f:86:b6:4e:9b:
2d:5b:7d:c5:c4:e3:fe:da:eb:da:88:50:c9:5d:0f:
d3:73:d7:53:10:95:bf:af:1c:0f:c2:21:ab:93:6c:
7c:24:58:e4:ad:72:ca:0c:51:4a:39:ce:19:ca:f6:
15:99:c4:53:a9:df:a8:1e:70:36:0e:ce:ff:25:04:
af:16:40:f2:0c:3a:ce:a7:fc:38:27:4a:22:ad:e4:
91:f1:21:14:7b:6f:85:da:bd:ae:1c:ea:b6:bc:0b:
88:c3:8a:93:1b:3b:64:dc:14:8b:0d:57:ea:c7:cf:
49:3b:eb:70:40:6c:73:a7:28:e2:25:16:4b:5a:16:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:8E:41:4C:EF:18:FD:DD:D8:34:C7:1F:15:96:4D:F4:89:B6:DA
X509v3 Authority Key Identifier:
keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.244.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a4:4c:82:54:06:0a:8d:26:92:94:32:c4:e0:6a:c9:48:d9:
bd:b8:65:c4:d3:31:7e:3b:89:ea:ec:9b:49:fc:96:64:bd:91:
e6:a7:70:0d:6f:65:16:ef:77:e3:5c:b2:eb:d6:e2:27:df:1c:
8c:69:b4:64:65:90:72:14:eb:35:b4:2b:55:cf:83:56:7b:cf:
81:f0:4a:b1:2e:7b:ac:f5:a5:ed:ba:54:71:ef:3e:2e:eb:02:
32:4c:15:22:1c:62:d5:f5:2d:be:b2:1d:84:e3:ea:eb:d1:15:
e5:1a:45:85:a1:a0:7b:f9:f9:91:65:60:2f:e6:0a:4c:71:0d:
73:11:9c:ec:41:c0:5b:83:ad:b1:ca:b4:7b:e7:ec:7a:36:76:
4c:2b:c1:d3:84:bf:7d:dd:37:78:b1:2c:3e:85:58:c2:66:ce:
d7:db:f0:a1:04:c7:6c:2b:52:d2:d8:f9:87:8a:77:19:4c:c1:
5e:cc:d9:f5:06:55:9e:6b:d5:38:f5:77:10:fe:3e:02:07:e6:
05:84:61:13:93:e0:f4:61:8f:01:3f:4c:94:4f:29:a6:65:13:
82:f8:21:0f:4c:3b:c4:d8:b6:eb:b1:b9:10:31:b4:9e:06:63:
47:9e:9f:3c:29:ab:48:9a:ec:2c:24:7c:2e:99:d1:07:6a:44:
ba:3e:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:43:34 2025 by rpki-client