
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
File: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (raw, json)
Hash identifier: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=
Subject key identifier: 12:63:B9:50:B5:0F:F8:CB:17:A2:EA:05:1F:7A:9C:0C:9E:FA:DF:F2
Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB
Certificate serial: 2A555C78399E530FBEFB1F952FA8AE5964348973
Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
Signing time: Mon 14 Jul 2025 15:00:01 +0000
ROA not before: Mon 14 Jul 2025 14:55:01 +0000
ROA not after: Mon 13 Jul 2026 15:00:01 +0000
asID: 150222
IP address blocks: 103.88.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl
rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 21:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:55:5c:78:39:9e:53:0f:be:fb:1f:95:2f:a8:ae:59:64:34:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB
Validity
Not Before: Jul 14 14:55:01 2025 GMT
Not After : Jul 13 15:00:01 2026 GMT
Subject: CN=1263B950B50FF8CB17A2EA051F7A9C0C9EFADFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:8c:98:be:eb:91:22:c8:db:d3:53:e0:b0:
20:7a:75:1e:6d:9e:a0:0c:e4:8d:c5:21:ed:52:92:
3a:77:a9:dd:c8:39:aa:bd:bd:a0:ab:f8:1f:00:5a:
e6:01:07:94:99:59:93:e4:53:b3:cb:95:a2:2f:e9:
46:7e:e6:2d:b3:88:f5:ab:19:22:6d:89:bc:ee:40:
fc:e0:a6:c2:82:d5:9c:f6:8c:0d:21:2f:1d:5c:93:
6e:f2:fc:4d:b7:e5:da:3a:ef:1c:22:c4:52:cc:92:
ed:32:fd:9a:07:e4:d6:d5:3e:ce:8f:c2:93:b0:f9:
7e:65:20:1f:9c:72:f8:5d:88:1f:1c:fe:e3:1f:19:
96:06:95:c5:36:8b:f8:32:67:ba:df:da:90:74:d9:
8f:1b:a3:0d:05:fe:ac:36:4a:71:26:87:17:54:7f:
16:d5:27:88:d6:a7:c0:24:60:ec:77:ef:ad:48:db:
8a:99:21:5d:f4:44:1f:8a:86:86:32:e6:4c:e3:cb:
b4:86:44:02:bf:3c:1d:fe:89:31:71:29:8c:bf:c9:
6f:a1:17:4f:54:21:d7:7e:31:e5:9e:ac:1d:df:ff:
7e:43:4e:26:2e:66:1d:25:ff:dc:29:2e:94:82:4e:
1b:c5:fe:eb:47:11:ac:5e:7f:cc:1d:b6:17:af:d2:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:B9:50:B5:0F:F8:CB:17:A2:EA:05:1F:7A:9C:0C:9E:FA:DF:F2
X509v3 Authority Key Identifier:
keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.88.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d8:1c:e3:63:fe:21:9e:e5:be:21:5a:07:1e:b7:2a:18:51:
5e:41:cd:2d:f0:0f:2c:81:cb:eb:04:4f:aa:10:06:21:07:fa:
ad:0a:1f:73:0b:c7:77:0e:68:3c:81:f2:c1:c0:65:95:4b:27:
42:8c:47:99:a8:77:42:a1:bd:6c:07:e9:48:4e:59:f3:4b:77:
46:b7:ba:bd:52:cf:2b:c1:d6:f5:6a:1b:bd:05:2f:73:f8:47:
5d:aa:c3:38:bb:df:d7:31:7f:92:e6:85:32:8e:7c:a0:b6:bd:
25:56:72:07:10:5a:a8:42:6c:d0:fb:2a:10:c0:b4:e6:e6:67:
4c:19:d1:f1:2d:fc:77:7f:b4:af:b9:02:50:af:1f:09:be:05:
15:c1:a3:21:68:ae:00:7e:a7:b3:45:00:42:30:69:b8:c5:b4:
7a:b9:64:de:c8:6f:1e:46:de:d0:b0:2e:25:61:fd:50:9f:e7:
96:5b:b3:37:63:70:b9:38:bf:b1:62:4e:d6:45:d0:83:39:1c:
c3:71:e8:20:0e:13:bc:17:88:31:3b:4b:e6:a1:0b:eb:ad:c4:
0d:5b:d2:f8:e0:89:31:92:cc:ec:62:15:bd:7c:65:c2:df:0f:
20:6b:c5:a6:40:9b:87:53:68:97:73:9f:37:e8:53:37:08:1b:
7c:80:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:53:46 2025 by rpki-client