
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32342d3234203d3e203338353234.roa
File: 3130332e33382e3130302e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier: IGGjmk2BP0lsT7Umcp62WU9jd+u0QXqrphB+qmtxzj4=
Subject key identifier: 36:12:FA:AA:90:01:F7:7E:EC:F6:EC:81:50:3D:B4:E6:71:2C:A2:11
Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial: 57125DAABFE2AA90321CC3268512545D951523BC
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32342d3234203d3e203338353234.roa
Signing time: Mon 02 Jun 2025 02:02:45 +0000
ROA not before: Mon 02 Jun 2025 01:57:45 +0000
ROA not after: Mon 01 Jun 2026 02:02:45 +0000
asID: 38524
IP address blocks: 103.38.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 04:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:12:5d:aa:bf:e2:aa:90:32:1c:c3:26:85:12:54:5d:95:15:23:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Validity
Not Before: Jun 2 01:57:45 2025 GMT
Not After : Jun 1 02:02:45 2026 GMT
Subject: CN=3612FAAA9001F77EECF6EC81503DB4E6712CA211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:6c:20:84:c9:85:e4:2e:d8:98:45:1d:74:
bb:eb:c2:6d:96:1e:87:10:19:0b:42:e4:b2:10:df:
cf:7c:22:12:4f:5e:3a:3f:85:d2:4f:85:20:27:5b:
5e:e8:cf:da:ed:b0:ee:6b:b0:b8:a8:bb:29:86:f7:
3a:2e:90:1c:29:48:39:23:e6:e8:a7:32:46:6f:e5:
b3:70:56:17:bf:08:55:b9:84:e6:02:b8:13:f8:7b:
d6:0a:99:00:a0:f4:84:3e:4d:e4:37:7f:a3:2f:b1:
46:e1:73:55:2a:0f:0a:d9:29:25:cb:e9:b6:bc:74:
a6:b7:55:c6:ac:1d:bc:c4:48:0c:5a:84:f1:1f:8f:
ca:5f:62:3f:fc:39:77:b0:eb:2c:de:3e:5e:f1:9f:
61:df:ab:0b:d2:e6:9f:dc:b1:b7:51:5d:a0:46:f4:
fd:c9:1a:9f:94:64:bd:09:99:45:d0:d9:50:1e:06:
d1:90:5a:0f:10:2b:23:17:60:17:d2:5e:59:44:bb:
32:c5:c0:72:eb:d4:79:12:de:ae:da:7c:ab:ba:87:
af:32:de:ed:7b:d1:df:66:d6:44:d2:f3:f4:a2:fb:
5b:16:ba:49:7e:7c:6a:b2:38:36:c2:de:c6:86:46:
7f:4f:52:3a:c8:79:e6:68:7c:57:35:96:71:a5:d9:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:12:FA:AA:90:01:F7:7E:EC:F6:EC:81:50:3D:B4:E6:71:2C:A2:11
X509v3 Authority Key Identifier:
keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32342d3234203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.100.0/24
Signature Algorithm: sha256WithRSAEncryption
47:77:83:2a:40:1e:80:69:27:17:eb:95:6f:8b:27:71:ea:b0:
96:db:af:49:25:9f:29:d7:fb:75:e0:bc:54:dd:88:1a:6b:74:
8d:12:78:c7:29:f1:40:4d:a9:f7:23:58:75:eb:fe:bb:d9:05:
80:89:6c:ee:46:34:9a:8f:4d:07:fb:d9:e3:91:47:d8:ff:1c:
08:8a:77:30:e9:66:c9:c2:5c:b7:c7:4c:58:47:99:26:3a:24:
87:20:2d:c6:14:5e:35:9c:b4:d0:86:35:31:8e:ee:ca:58:6b:
00:57:81:cd:70:ad:af:99:57:c7:e4:87:2a:26:c1:82:70:d3:
95:36:0d:77:40:27:c1:8f:6b:46:ad:d5:c4:3f:fb:00:be:98:
9c:90:c7:98:55:db:54:84:82:41:69:e7:ff:12:96:0b:90:dd:
6d:29:12:0c:dd:cb:85:c6:db:fb:03:86:5d:3e:76:ce:d1:f7:
17:83:84:4a:d8:71:b4:2e:16:64:92:f1:b1:69:ae:6b:26:a0:
e2:01:3e:60:d9:2d:d8:d5:5b:64:75:a9:a8:71:b7:0b:68:8e:
92:b7:c0:9c:0b:f9:8f:b1:57:de:98:d1:f9:dd:25:d8:30:bc:
4f:7a:33:20:c4:b4:26:e8:35:8d:52:2c:60:8b:87:72:4d:29:
92:f0:6a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:17 2025 by rpki-client