
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
File: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (raw, json)
Hash identifier: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=
Subject key identifier: 15:4F:A9:E7:BB:12:38:40:1D:9E:06:41:BA:96:FD:F5:C8:8A:5B:55
Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial: 7B2DF24D9E25DCFB82F8356F3900CD16FA3FC74C
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
Signing time: Wed 02 Jul 2025 03:02:49 +0000
ROA not before: Wed 02 Jul 2025 02:57:49 +0000
ROA not after: Wed 01 Jul 2026 03:02:49 +0000
asID: 149902
IP address blocks: 103.190.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 22:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2d:f2:4d:9e:25:dc:fb:82:f8:35:6f:39:00:cd:16:fa:3f:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
Validity
Not Before: Jul 2 02:57:49 2025 GMT
Not After : Jul 1 03:02:49 2026 GMT
Subject: CN=154FA9E7BB1238401D9E0641BA96FDF5C88A5B55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:55:07:a2:e6:7e:06:45:a4:10:fa:74:e1:
b6:48:93:24:68:af:5b:85:8e:da:e1:8d:19:26:3f:
b7:e7:30:e2:58:09:f3:12:ef:83:1c:ff:4f:2d:43:
ba:01:0c:13:5b:4b:a7:be:80:be:95:f0:63:02:ff:
fd:8e:90:bc:64:63:55:81:e0:9c:89:2d:90:bc:34:
15:a9:d8:88:1a:91:a6:bd:0c:5c:7f:2c:3c:b1:7c:
9a:d4:f2:b2:f0:78:8b:ce:92:1e:8f:6c:2f:d4:38:
eb:a2:27:90:5d:cf:08:b5:54:0b:99:23:62:b9:41:
09:53:3f:93:36:e7:5a:36:5b:18:85:7f:a0:c0:ed:
34:f8:d9:00:a4:7b:01:ab:f9:33:a6:ee:f2:a3:d5:
0c:cb:5c:ca:21:c1:af:bd:36:2f:74:47:be:56:4e:
a2:a4:93:ac:0b:c1:10:59:f8:dd:e6:4d:83:73:a4:
a9:22:9e:88:44:8a:ba:e7:57:16:f9:32:7f:cf:d8:
72:39:a6:bf:80:1e:f2:56:ad:84:37:66:88:90:cb:
2d:fb:11:c1:36:73:80:30:28:82:d4:88:77:83:43:
d7:7e:b5:9b:8d:7e:e5:81:80:b9:30:23:22:6d:80:
b0:a2:4e:4e:3f:9e:5c:80:37:3e:a9:0e:35:cc:c3:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:A9:E7:BB:12:38:40:1D:9E:06:41:BA:96:FD:F5:C8:8A:5B:55
X509v3 Authority Key Identifier:
keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.33.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b4:1c:45:c0:dc:80:80:5e:5f:77:b9:ca:ba:a3:7e:fc:d0:
bd:50:55:a2:36:fd:78:fe:c9:01:25:9e:c3:aa:fa:2f:76:85:
4e:6e:da:a0:a1:9e:27:4d:93:65:f2:f3:b1:5c:39:1e:cf:2d:
ab:67:9d:1a:6c:ea:46:7f:04:8f:83:11:83:4b:74:c3:5c:b8:
0f:39:7e:01:c9:cf:e8:e5:bb:07:19:a4:52:d1:5c:77:5b:ed:
fd:ef:b2:9d:81:75:01:3c:0f:b3:82:f9:ab:5e:3f:38:4a:ac:
27:f7:f5:eb:fc:8a:67:3f:8c:5d:b1:38:08:2d:a4:94:75:68:
ab:fd:0c:49:16:a2:3f:59:11:b3:02:13:bb:7a:da:77:6e:be:
2f:a9:8d:d8:63:96:77:60:d4:3b:c3:d0:28:e0:6c:42:4f:cb:
f6:e4:1d:02:37:a3:17:c7:4e:66:35:1c:28:da:79:b0:3f:d6:
f6:c9:bf:ee:da:6e:62:f8:73:ac:2c:f1:44:2b:36:8d:3f:3d:
fb:ed:d7:1c:23:57:c5:94:09:2f:c2:4a:ef:94:65:21:82:62:
e8:1d:a6:13:83:7a:42:35:8d:78:0b:51:a1:c8:b0:5c:2c:2f:
af:8e:3f:c4:b2:c5:c0:81:b1:7a:2b:b7:1f:81:af:4e:6a:d5:
c1:e9:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:14 2025 by rpki-client