
$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
File: 3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (raw, json)
Hash identifier: taPeax8+Z3gNHSeP8kwQqd2DAGbwX8VTXsKed/iNt+U=
Subject key identifier: 84:8F:9D:11:AA:00:85:13:1C:12:D8:AA:33:9C:E8:37:34:69:C0:F3
Certificate issuer: /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial: 31F50A601D0B1C84055248A56B674DB3D58F3E7E
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
Signing time: Mon 02 Jun 2025 02:02:56 +0000
ROA not before: Mon 02 Jun 2025 01:57:56 +0000
ROA not after: Mon 01 Jun 2026 02:02:56 +0000
asID: 138100
IP address blocks: 103.125.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f5:0a:60:1d:0b:1c:84:05:52:48:a5:6b:67:4d:b3:d5:8f:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
Validity
Not Before: Jun 2 01:57:56 2025 GMT
Not After : Jun 1 02:02:56 2026 GMT
Subject: CN=848F9D11AA0085131C12D8AA339CE8373469C0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:64:35:75:19:a7:e7:db:95:00:7f:7d:79:
e7:0d:bf:dd:96:d7:88:a3:1c:b3:23:62:ad:a1:56:
af:12:7e:6b:dc:89:bd:7d:d1:55:a5:19:fd:17:6f:
e8:f4:34:16:14:3e:0a:73:9b:09:56:51:56:29:7a:
6d:29:a5:b0:cb:e4:20:f3:79:b0:7d:dd:1e:e6:b5:
d0:0b:73:66:c4:c9:31:0f:8b:4c:1c:49:e3:71:3e:
a4:61:f9:fb:f9:e1:9d:5b:f0:5d:84:77:7e:8d:d2:
9c:55:da:07:59:57:f0:58:eb:74:01:53:a6:bf:64:
c7:98:37:a4:1d:f6:0f:28:d2:63:77:42:27:88:07:
24:1a:42:61:38:8f:48:65:b0:6f:f2:9e:f7:43:32:
62:b2:c0:c3:71:af:f8:07:f9:ad:ad:96:f6:3f:59:
7d:e0:58:40:00:62:44:eb:69:6e:61:13:6c:1d:dd:
99:d4:31:78:7e:51:f8:82:48:f6:d8:4c:c9:77:32:
3f:ee:94:d1:0e:18:e9:38:b4:85:bd:9a:42:c9:51:
77:bf:36:23:4d:10:e0:3d:4b:f0:ef:a0:67:70:83:
40:02:14:dd:b3:90:3d:79:f6:1f:97:84:b5:10:73:
f1:7d:3a:2d:4d:f5:48:fd:c1:a8:77:94:a0:a1:bc:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:9D:11:AA:00:85:13:1C:12:D8:AA:33:9C:E8:37:34:69:C0:F3
X509v3 Authority Key Identifier:
keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.104.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:a7:1c:ce:d0:82:7b:68:e0:bf:d0:d8:37:bc:93:55:13:e6:
51:54:42:7f:51:ee:80:7f:70:b9:2d:e2:95:e9:97:84:fe:74:
3b:e8:28:5f:90:03:c7:15:ed:28:dd:d2:5c:b1:c2:fe:1c:eb:
11:d8:8a:eb:8f:81:ed:76:dc:2c:de:7f:b8:d9:51:c5:d5:a1:
a0:03:77:ca:05:47:19:9b:e6:f5:5a:1e:12:9a:6e:82:b8:f6:
89:52:48:a1:90:bb:60:8e:70:2b:3b:42:1b:c4:84:84:b1:e4:
8c:ce:89:e4:79:43:9b:90:ca:8b:15:05:eb:c3:01:64:6e:38:
4a:55:83:39:ce:af:d0:c5:13:7d:42:e9:01:3d:dd:c7:1b:ee:
92:92:19:d0:7f:be:49:4a:15:4b:f2:73:dc:51:cf:c7:00:a2:
97:7e:cc:b9:13:87:08:02:36:17:20:3a:a4:59:e2:91:e3:61:
22:bc:85:cd:b3:b6:a3:d0:d1:d2:c9:f6:e3:ea:a9:20:fa:41:
9c:ec:5d:05:43:23:b1:c1:53:71:6b:50:fd:39:4d:5b:f1:42:
76:3e:b9:21:30:9b:06:6a:2d:07:17:a1:8b:d8:53:8e:f4:0f:
c0:04:ec:0b:f0:46:6a:3a:fd:c3:2d:77:19:00:0a:d0:dd:d9:
66:38:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:21 2025 by rpki-client