
$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
File: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier: KHtiEx3W38SvszbKHvX80D8vQUAYBT6FDdynUOoUkpY=
Subject key identifier: 97:6A:32:6C:2D:76:7A:69:01:C5:52:F5:41:46:C6:4E:EC:30:61:EB
Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial: 6A58186C4EA920D428B0449A0C76B01FC4C41773
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
Signing time: Thu 23 Oct 2025 05:00:02 +0000
ROA not before: Thu 23 Oct 2025 04:55:02 +0000
ROA not after: Thu 22 Oct 2026 05:00:02 +0000
asID: 131743
IP address blocks: 103.227.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 17:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:58:18:6c:4e:a9:20:d4:28:b0:44:9a:0c:76:b0:1f:c4:c4:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Validity
Not Before: Oct 23 04:55:02 2025 GMT
Not After : Oct 22 05:00:02 2026 GMT
Subject: CN=976A326C2D767A6901C552F54146C64EEC3061EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:61:be:6e:48:49:66:6d:17:97:5a:fe:5e:
28:c2:d2:0a:c9:6c:4d:e5:33:c4:6e:d1:41:60:a1:
7b:df:c4:04:52:20:29:52:1f:dc:30:f6:64:4e:3c:
a8:07:30:02:c1:bd:96:4a:72:40:78:0d:16:6d:99:
98:6f:e6:a3:62:1f:da:4e:06:6a:56:6b:e8:fc:1a:
91:ad:4d:1b:9e:97:b3:db:20:54:27:f6:75:e1:ee:
ab:d9:df:a6:90:d2:7f:99:ae:5b:f5:02:47:32:f5:
52:92:63:31:af:aa:07:c8:90:7a:b1:df:af:ec:38:
50:d4:f3:69:c2:0f:63:9a:01:a3:2c:de:2e:81:0d:
de:5b:e9:92:0d:a4:7f:60:25:df:5f:d0:9e:7a:76:
6e:2c:e5:9d:be:f0:aa:e9:d6:92:5d:a0:0a:b0:63:
45:bf:18:cc:28:32:9d:e4:58:ad:75:36:f8:dd:1b:
ae:f2:90:05:c9:e4:f3:c1:dc:7b:85:ec:dc:8b:35:
78:34:61:20:18:f0:70:34:25:0f:b8:9a:8d:c8:b5:
78:a3:25:69:92:8b:f3:ed:3f:ab:21:ca:ef:c3:0d:
54:b5:6f:65:30:86:9d:ac:2d:00:06:d6:37:39:93:
2a:59:6d:79:60:7c:fd:d1:ac:cb:81:48:72:29:c9:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6A:32:6C:2D:76:7A:69:01:C5:52:F5:41:46:C6:4E:EC:30:61:EB
X509v3 Authority Key Identifier:
keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8a:ce:d9:63:e9:26:98:52:5e:a7:6f:9c:58:15:76:c4:67:
95:85:a2:9f:ad:61:78:65:62:1f:d3:05:1f:86:74:54:2d:46:
ba:dc:24:39:15:a4:45:a2:4e:5c:ce:66:55:d0:6b:40:3e:a6:
4a:a3:15:75:df:69:fa:78:50:fb:c2:88:4d:aa:0b:47:a6:3e:
8a:ce:d2:84:1d:d9:fb:6e:33:3a:ac:19:0c:76:5d:aa:20:38:
96:97:87:b5:ee:40:4b:d8:eb:d5:53:45:7f:fa:66:1f:85:cf:
93:a9:e2:03:51:0b:d6:ae:9b:7c:3b:89:ff:bf:8c:d4:d9:83:
fa:61:f6:dc:d5:e4:d4:44:3a:61:85:f5:44:57:88:0e:76:91:
17:c6:9b:dd:02:58:e6:82:08:c8:24:9b:b3:bb:36:d1:1b:85:
74:4f:ac:2c:01:c1:a7:ef:3e:5d:f6:2e:23:ec:67:08:f6:57:
2b:cc:50:d5:d1:6f:1e:f0:08:c8:08:34:16:3f:32:01:d2:b9:
0f:cf:97:63:44:40:c8:f9:b2:6d:a0:92:86:9a:62:27:73:01:
16:f9:d1:15:00:ef:11:8d:29:af:86:9d:f6:44:78:d3:a0:cc:
21:c0:7e:e5:a5:42:4f:a8:2e:96:55:37:59:cd:04:4a:c5:a6:
fa:6e:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:30 2025 by rpki-client