
$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa
File: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (raw, json)
Hash identifier: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=
Subject key identifier: EC:B4:DD:C3:6A:6D:57:B3:D3:2C:43:85:64:6C:4B:72:0C:58:D0:B1
Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial: 1FFA171B3A1E915D22CDA6EF3A5D1595F9D67A1C
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa
Signing time: Fri 16 May 2025 12:02:24 +0000
ROA not before: Fri 16 May 2025 11:57:24 +0000
ROA not after: Fri 15 May 2026 12:02:24 +0000
asID: 136061
IP address blocks: 103.82.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 17:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fa:17:1b:3a:1e:91:5d:22:cd:a6:ef:3a:5d:15:95:f9:d6:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Validity
Not Before: May 16 11:57:24 2025 GMT
Not After : May 15 12:02:24 2026 GMT
Subject: CN=ECB4DDC36A6D57B3D32C4385646C4B720C58D0B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:c9:16:18:68:ea:e5:dd:4b:80:2e:71:b0:
a4:56:5b:e3:f0:22:3c:5f:49:af:0f:ef:55:ae:f1:
56:42:19:7d:1e:2c:24:ec:1e:15:35:f0:3e:e4:95:
8f:9c:69:0b:8e:1c:5c:8b:f7:ef:03:10:e2:ef:7c:
50:e4:0c:0f:c0:ca:6e:97:a0:2f:0f:ee:fb:91:b7:
33:90:5f:03:aa:62:6b:15:bb:c1:e9:3a:28:ba:e4:
31:db:1c:35:fd:e7:1a:ab:30:9d:00:f0:2e:db:a9:
6d:0e:29:33:99:31:70:40:f2:b4:0f:2f:e6:bb:3a:
df:7d:e4:9e:a4:c0:bf:cc:55:42:ec:06:6d:66:1c:
cd:18:4e:76:78:b9:0f:e7:7c:91:c6:9d:71:f2:74:
47:0a:86:00:78:db:fe:e7:f8:a1:22:64:93:72:f4:
fe:a6:13:5c:69:10:e0:02:3a:40:90:37:d8:99:e8:
21:4b:44:e7:18:c1:ef:c3:26:a9:67:a5:9a:60:b7:
c9:33:cd:63:b1:37:e5:87:16:65:d7:d9:70:7c:fe:
6f:65:e9:6a:47:3f:ea:32:46:4b:a1:3d:a1:ad:d9:
14:0d:23:0e:99:7b:c9:e0:95:b1:85:df:5a:9e:04:
80:b2:af:87:32:66:e1:e4:f7:f0:4e:57:de:10:db:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:DD:C3:6A:6D:57:B3:D3:2C:43:85:64:6C:4B:72:0C:58:D0:B1
X509v3 Authority Key Identifier:
keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.182.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e0:4b:c2:7d:04:12:58:cb:2d:fd:7f:89:eb:58:b4:29:a2:
94:ab:a6:85:d7:be:e4:0e:52:1b:95:7c:d1:e6:78:e8:bf:44:
37:39:3d:ba:7b:9b:1d:79:6d:9b:40:51:58:7b:66:5e:70:d0:
cb:e8:16:3f:79:3d:1d:8f:6b:6a:52:f1:f1:2b:c3:e3:da:02:
81:c7:55:77:9c:e3:8c:2a:cb:9a:80:09:d3:32:2d:a3:b0:e2:
c3:0c:91:9a:01:dd:99:d7:17:53:87:1b:b4:20:b7:65:91:91:
e3:4f:e9:a4:66:4e:fb:7a:7d:5e:84:34:e2:1f:e0:bd:98:2a:
af:ed:58:6f:0a:d8:fe:30:7f:8e:22:21:f8:6d:18:2c:1b:5f:
62:b1:f4:c8:85:28:56:d7:e0:b7:44:e0:d2:61:e1:96:70:14:
05:b9:8a:4d:8d:1d:0c:52:c7:6c:aa:c1:4f:02:84:d6:20:62:
9e:1d:b1:70:86:12:5c:41:ab:51:1e:d0:c2:ed:fc:6c:18:57:
f7:0f:02:a7:5e:e5:ce:74:7f:6c:ca:95:f1:f3:ab:92:93:e7:
17:21:fd:c5:7c:55:08:0a:87:68:82:0c:a5:16:44:ca:7c:4f:
cf:23:da:67:c2:4a:44:df:cc:d5:16:ac:e6:f1:d3:f6:62:48:
a2:a7:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:37:43 2025 by rpki-client