
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
File: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=
Subject key identifier: 93:41:D0:1F:60:13:EF:30:AE:78:7E:87:48:9D:D5:04:48:CC:71:87
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 73B96AD7247B1A44D58B1352C4E51C2B488A1703
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
Signing time: Thu 08 May 2025 12:00:40 +0000
ROA not before: Thu 08 May 2025 11:55:40 +0000
ROA not after: Thu 07 May 2026 12:00:40 +0000
asID: 23694
IP address blocks: 103.66.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 12:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b9:6a:d7:24:7b:1a:44:d5:8b:13:52:c4:e5:1c:2b:48:8a:17:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: May 8 11:55:40 2025 GMT
Not After : May 7 12:00:40 2026 GMT
Subject: CN=9341D01F6013EF30AE787E87489DD50448CC7187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:75:d9:86:86:c2:eb:83:c9:e1:72:12:60:
d0:e1:65:e4:e2:ea:98:91:01:23:98:6b:2b:54:3a:
c8:a4:64:45:87:25:20:ae:7a:db:87:29:7f:f1:b2:
1a:57:f7:33:2d:3b:72:8d:72:3c:d7:68:a8:c3:4c:
c3:00:c4:7e:13:64:3c:71:43:2f:28:9f:8a:97:a5:
f7:4b:71:0f:70:22:53:b8:74:d8:e4:5d:51:80:4d:
e4:aa:f7:60:67:69:92:d8:0c:47:f8:3a:94:67:15:
63:cd:e5:07:08:f3:32:0c:1d:95:0d:6d:84:40:db:
e5:da:d6:7d:2e:7c:6e:f5:ec:4b:95:7e:99:e9:39:
78:77:2c:87:60:87:a0:cd:fb:c6:57:13:0f:6a:79:
36:0a:e4:e0:7d:38:86:cf:ff:23:c5:66:2d:e2:8b:
eb:17:6f:78:2a:be:34:43:48:99:8c:f0:67:bf:de:
8b:0d:79:46:7d:58:7f:e1:57:60:2d:ac:af:56:dc:
3d:41:16:3b:49:b6:d3:ff:01:6f:ff:c0:48:7f:8d:
30:25:85:94:8a:e1:1d:c4:63:d9:a8:70:20:3c:48:
52:af:a8:a1:d5:87:72:6d:f1:6d:e0:e4:bd:4d:ca:
a9:52:19:4b:28:d0:d9:53:3f:ea:45:92:5d:97:eb:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:D0:1F:60:13:EF:30:AE:78:7E:87:48:9D:D5:04:48:CC:71:87
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.46.0/23
Signature Algorithm: sha256WithRSAEncryption
99:15:4a:9f:39:bc:14:2e:7e:b3:10:e3:f3:7c:df:67:b4:cb:
ee:09:0b:98:2c:a1:90:1c:17:80:65:23:ea:00:d4:f4:2e:41:
23:1d:0c:b7:bb:df:ea:2b:02:4f:3f:fd:10:38:c8:3f:c0:19:
c7:05:81:ea:6f:47:75:52:e8:45:96:73:f0:d8:20:75:0e:8e:
26:35:de:76:38:c8:f0:7d:0b:34:20:26:fa:b1:20:6b:6a:53:
a8:1a:02:86:8b:15:6d:d9:5b:62:f8:c5:25:df:69:37:8e:3c:
60:2d:69:56:19:2d:8a:c4:6f:f1:fe:05:6e:2c:d3:b4:02:a4:
5d:8b:11:49:54:ab:15:41:83:9b:73:98:43:ba:fc:85:f8:d5:
23:dc:02:98:d6:55:b2:a3:ff:58:35:3a:70:91:fd:99:20:7f:
e0:f1:fd:97:58:a0:01:cc:8b:16:af:c8:5e:5b:fd:b9:f6:0d:
2a:f9:69:a0:5b:8c:bb:c0:d2:05:95:59:f4:0e:44:1c:fc:f5:
91:04:57:79:8d:6c:19:06:c0:5e:88:49:1b:7f:04:c0:0f:47:
41:b0:d2:14:2f:b5:4b:2f:95:98:7b:f3:84:48:df:96:9a:44:
28:a6:90:e3:6f:4d:d3:8f:69:40:ed:d1:8b:27:a5:07:eb:14:
84:eb:fd:e3
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUc7lq1yR7GkTVixNSxOUcK0iKFwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE
NjI3RUQzNjAeFw0yNTA1MDgxMTU1NDBaFw0yNjA1MDcxMjAwNDBaMDMxMTAvBgNV
BAMTKDkzNDFEMDFGNjAxM0VGMzBBRTc4N0U4NzQ4OURENTA0NDhDQzcxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8XXZhobC64PJ4XISYNDhZeTi
6piRASOYaytUOsikZEWHJSCuetuHKX/xshpX9zMtO3KNcjzXaKjDTMMAxH4TZDxx
Qy8on4qXpfdLcQ9wIlO4dNjkXVGATeSq92BnaZLYDEf4OpRnFWPN5QcI8zIMHZUN
bYRA2+Xa1n0ufG717EuVfpnpOXh3LIdgh6DN+8ZXEw9qeTYK5OB9OIbP/yPFZi3i
i+sXb3gqvjRDSJmM8Ge/3osNeUZ9WH/hV2AtrK9W3D1BFjtJttP/AW//wEh/jTAl
hZSK4R3EY9mocCA8SFKvqKHVh3Jt8W3g5L1NyqlSGUso0NlTP+pFkl2X65Q3AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUk0HQH2AT7zCueH6HSJ3VBEjMcYcwHwYDVR0j
BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx
NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3
RUQzNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNGY4NTExLTA3YjMtNGE2MS1i
ZDA0LTJlNjY1YzkyNzhmYy8wLzMxMzAzMzJlMzYzNjJlMzQzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMyMzMzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnQi4wDQYJKoZIhvcN
AQELBQADggEBAJkVSp85vBQufrMQ4/N832e0y+4JC5gsoZAcF4BlI+oA1PQuQSMd
DLe73+orAk8//RA4yD/AGccFgepvR3VS6EWWc/DYIHUOjiY13nY4yPB9CzQgJvqx
IGtqU6gaAoaLFW3ZW2L4xSXfaTeOPGAtaVYZLYrEb/H+BW4s07QCpF2LEUlUqxVB
g5tzmEO6/IX41SPcApjWVbKj/1g1OnCR/Zkgf+Dx/ZdYoAHMixavyF5b/bn2DSr5
aaBbjLvA0gWVWfQORBz89ZEEV3mNbBkGwF6ISRt/BMAPR0Gw0hQvtUsvlZh784RI
35aaRCimkONvTdOPaUDt0YsnpQfrFITr/eM=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:57:02 2025 by rpki-client