
$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
File: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=
Subject key identifier: A1:7B:BA:59:DD:0A:0D:84:91:F4:41:43:46:00:1C:F7:C8:9A:54:27
Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial: 19F2F10A46B79CE05172AA0B130C14C68FA1DBAD
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
Signing time: Mon 02 Jun 2025 02:04:31 +0000
ROA not before: Mon 02 Jun 2025 01:59:31 +0000
ROA not after: Mon 01 Jun 2026 02:04:31 +0000
asID: 55685
IP address blocks: 103.80.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f2:f1:0a:46:b7:9c:e0:51:72:aa:0b:13:0c:14:c6:8f:a1:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Validity
Not Before: Jun 2 01:59:31 2025 GMT
Not After : Jun 1 02:04:31 2026 GMT
Subject: CN=A17BBA59DD0A0D8491F4414346001CF7C89A5427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:1b:4b:0d:48:3a:4c:50:1a:fa:12:24:2e:
a6:50:27:be:07:50:c4:08:62:4e:7d:35:39:82:82:
53:d1:a9:63:4a:2c:69:83:78:de:30:59:e6:a5:05:
36:cc:fd:70:b4:2f:ce:56:36:43:c0:21:9e:d9:8c:
3c:e6:a5:95:97:1c:9b:f2:01:08:5f:eb:09:0b:4a:
3e:50:2b:14:f3:00:db:ed:86:cd:4f:09:4f:18:c7:
4d:df:2d:a6:8d:66:c1:55:d5:42:3a:85:58:0e:3c:
fe:07:8a:27:4e:0e:cb:ad:70:d3:05:de:82:f9:e6:
dd:83:aa:7c:12:0e:99:41:10:5e:43:5c:87:9a:6c:
89:16:1d:54:da:0f:ab:00:12:48:0f:06:0b:62:5b:
65:9a:66:e9:56:2b:2d:54:53:72:30:f0:ae:fd:c0:
c9:05:15:4b:c4:a5:5e:94:64:d0:1c:98:d7:31:c5:
b0:28:60:5c:be:11:67:2d:16:28:2b:31:14:05:54:
db:3f:ab:cc:37:f7:4d:45:4b:ea:9a:6d:a9:96:8b:
69:cc:90:b3:8a:36:7c:c8:18:d2:b4:df:22:9f:07:
af:9c:d7:60:10:b6:f4:01:25:da:1b:87:fb:05:85:
40:7e:df:d6:f9:5f:18:83:86:e3:34:80:7a:6a:84:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:BA:59:DD:0A:0D:84:91:F4:41:43:46:00:1C:F7:C8:9A:54:27
X509v3 Authority Key Identifier:
keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.88.0/22
Signature Algorithm: sha256WithRSAEncryption
12:04:1b:a0:cc:9e:fd:ad:42:01:61:f2:48:8e:01:76:e0:9e:
e0:9b:8c:d9:dc:08:ad:62:81:96:5e:ea:bc:92:09:cb:cb:cb:
64:c2:07:75:89:75:5e:45:d1:82:a2:d8:82:b7:e7:ff:e5:e2:
35:dc:43:b7:55:33:58:54:f0:bb:13:c5:19:fa:14:0c:1a:b4:
17:1f:25:f9:51:23:96:4f:28:67:e4:e6:30:aa:d7:f9:a4:aa:
a6:2d:04:23:2b:35:06:24:a3:05:f7:7a:b4:fa:17:aa:1c:92:
83:a7:29:07:26:de:cb:27:9b:87:d4:29:f1:ee:eb:cf:fc:fd:
7f:ff:5a:72:5d:c0:bf:6c:11:b3:ec:6f:58:ff:b7:aa:9c:cf:
cf:08:8f:fa:0d:9a:c2:6f:0b:f6:1a:d2:25:1f:87:fa:a1:6f:
d0:5c:71:ef:36:a7:04:98:75:f0:89:7c:de:19:8a:89:d5:bb:
57:bb:aa:ae:58:13:9e:26:91:57:a3:a0:18:a4:75:c3:41:42:
5a:ce:48:b8:cc:03:b0:52:fc:92:fc:bf:6a:c2:d3:cd:4e:9e:
57:41:65:a7:63:05:cf:09:db:e1:f4:1c:5b:0d:d9:da:52:b3:
69:aa:34:ce:b3:85:71:2c:c0:34:1a:51:93:6d:0b:51:81:94:
e9:26:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:44:58 2025 by rpki-client