
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
File: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (raw, json)
Hash identifier: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=
Subject key identifier: 34:CB:6E:22:05:BD:76:97:64:0D:73:4B:1C:54:AA:DE:77:2E:4A:B2
Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial: 677524A6C42E2EF054B5E9C41349280C584EEAC2
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
Signing time: Mon 02 Jun 2025 02:03:00 +0000
ROA not before: Mon 02 Jun 2025 01:58:00 +0000
ROA not after: Mon 01 Jun 2026 02:03:00 +0000
asID: 24523
IP address blocks: 103.22.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 17:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:75:24:a6:c4:2e:2e:f0:54:b5:e9:c4:13:49:28:0c:58:4e:ea:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Validity
Not Before: Jun 2 01:58:00 2025 GMT
Not After : Jun 1 02:03:00 2026 GMT
Subject: CN=34CB6E2205BD7697640D734B1C54AADE772E4AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:6a:c8:40:fc:1e:f1:c7:9b:22:f6:03:c1:
00:92:85:86:0a:ef:78:62:19:44:f9:c7:8f:7e:be:
ff:02:7d:51:31:cc:53:b8:5b:6d:df:6a:ad:97:d0:
b3:13:24:a1:73:3b:f4:5e:fc:9f:e0:61:aa:0e:54:
46:a0:16:3e:09:7d:01:16:75:19:53:aa:e2:77:7c:
4b:7f:39:92:dd:fb:06:94:81:1b:80:59:29:86:06:
31:cb:cc:ef:ab:8f:6b:bd:40:50:32:a0:f7:d5:1c:
57:16:7c:34:59:25:ef:60:be:7f:ef:b1:33:06:a5:
e9:47:08:a5:7f:c0:88:0a:36:85:72:24:e0:da:33:
73:84:3e:df:aa:61:5f:28:63:6f:96:43:a2:aa:1e:
3d:18:f9:70:83:9f:da:1b:ad:86:ea:52:e0:53:c7:
db:aa:26:dd:bb:9c:36:b7:1f:68:35:d9:e8:84:6c:
cb:9c:e4:9f:db:45:b1:3f:4a:2c:79:17:5c:de:ba:
c5:44:62:56:81:df:90:27:01:41:5e:d1:b9:6c:25:
85:28:3e:0e:6a:57:c9:2f:f6:a7:72:69:2b:e1:2a:
6c:c3:36:79:df:98:21:13:28:d4:94:a0:8b:9c:ba:
14:17:3e:9e:69:17:5c:ef:6b:d6:85:35:93:8a:e8:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:6E:22:05:BD:76:97:64:0D:73:4B:1C:54:AA:DE:77:2E:4A:B2
X509v3 Authority Key Identifier:
keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.240.0/22
Signature Algorithm: sha256WithRSAEncryption
05:23:2f:e6:47:ca:9a:40:b7:74:1d:e2:33:2d:a0:4d:cd:cf:
9b:d5:55:61:36:cb:79:b5:32:25:56:6b:0f:82:0e:e7:1f:a9:
97:b2:a2:ed:dc:b1:98:80:1c:78:1e:88:1b:9b:c0:df:52:45:
da:0d:73:dc:82:16:3a:2f:44:70:c0:aa:83:56:93:bb:ce:24:
a1:9d:36:83:a1:22:1b:5f:b6:0c:40:17:62:8f:83:d5:d8:73:
bb:f8:9d:74:87:bb:fe:af:c7:fc:1b:b9:a9:01:0d:b3:98:ec:
f5:85:c8:9c:33:9c:cf:d9:e3:15:b1:b4:6f:03:c7:09:b3:93:
18:de:cb:54:49:07:de:9b:ff:f9:86:c0:79:b8:b3:65:63:72:
9d:28:8d:1c:41:cc:b7:39:45:3d:e9:1c:65:42:dd:57:1a:e0:
d4:7e:3c:03:cf:a2:14:7a:4b:d2:22:06:2a:89:da:24:46:82:
dc:dc:31:1d:7b:6b:e9:ec:c8:90:97:6c:f5:0c:11:97:39:e1:
96:f8:f7:12:f9:60:ff:af:59:94:e1:e9:80:72:63:79:bd:33:
37:42:99:dd:50:5f:59:b9:50:6c:b4:95:6a:60:66:aa:cc:a6:
9f:da:39:44:bf:48:48:f1:85:5d:7a:41:66:65:4c:fe:af:db:
48:de:37:62
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZ3UkpsQuLvBUtenEE0koDFhO6sIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC
MjUwM0EzODAeFw0yNTA2MDIwMTU4MDBaFw0yNjA2MDEwMjAzMDBaMDMxMTAvBgNV
BAMTKDM0Q0I2RTIyMDVCRDc2OTc2NDBENzM0QjFDNTRBQURFNzcyRTRBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQGrIQPwe8cebIvYDwQCShYYK
73hiGUT5x49+vv8CfVExzFO4W23faq2X0LMTJKFzO/Re/J/gYaoOVEagFj4JfQEW
dRlTquJ3fEt/OZLd+waUgRuAWSmGBjHLzO+rj2u9QFAyoPfVHFcWfDRZJe9gvn/v
sTMGpelHCKV/wIgKNoVyJODaM3OEPt+qYV8oY2+WQ6KqHj0Y+XCDn9obrYbqUuBT
x9uqJt27nDa3H2g12eiEbMuc5J/bRbE/Six5F1zeusVEYlaB35AnAUFe0blsJYUo
Pg5qV8kv9qdyaSvhKmzDNnnfmCETKNSUoIucuhQXPp5pF1zva9aFNZOK6OSpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNMtuIgW9dpdkDXNLHFSq3ncuSrIwHwYDVR0j
BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx
MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw
M0EzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjNjY3NzY5LTgwZGMtNDA5My1i
NWY3LWRmZTdjNTcyMDQ4Ni8wLzMxMzAzMzJlMzIzMjJlMzIzNDMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcW8DANBgkqhkiG
9w0BAQsFAAOCAQEABSMv5kfKmkC3dB3iMy2gTc3Pm9VVYTbLebUyJVZrD4IO5x+p
l7Ki7dyxmIAceB6IG5vA31JF2g1z3IIWOi9EcMCqg1aTu84koZ02g6EiG1+2DEAX
Yo+D1dhzu/iddIe7/q/H/Bu5qQENs5js9YXInDOcz9njFbG0bwPHCbOTGN7LVEkH
3pv/+YbAebizZWNynSiNHEHMtzlFPekcZULdVxrg1H48A8+iFHpL0iIGKonaJEaC
3NwxHXtr6ezIkJds9QwRlznhlvj3Evlg/69ZlOHpgHJjeb0zN0KZ3VBfWblQbLSV
amBmqsymn9o5RL9ISPGFXXpBZmVM/q/bSN43Yg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:16 2025 by rpki-client