
$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa
File: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (raw, json)
Hash identifier: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=
Subject key identifier: 54:2A:76:FA:C2:C0:C8:3D:CC:CE:4A:D4:22:AD:E5:B3:64:F8:4C:63
Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial: 49D14EA2A119DBA205837C5AA4BA2AE539011444
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa
Signing time: Fri 24 Oct 2025 09:00:00 +0000
ROA not before: Fri 24 Oct 2025 08:55:00 +0000
ROA not after: Fri 23 Oct 2026 09:00:00 +0000
asID: 55666
IP address blocks: 103.140.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 04:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d1:4e:a2:a1:19:db:a2:05:83:7c:5a:a4:ba:2a:e5:39:01:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Validity
Not Before: Oct 24 08:55:00 2025 GMT
Not After : Oct 23 09:00:00 2026 GMT
Subject: CN=542A76FAC2C0C83DCCCE4AD422ADE5B364F84C63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:4e:30:43:e4:9b:be:73:e1:c9:bd:fe:ef:
64:58:6f:7b:52:15:90:f3:9f:04:fb:c5:46:86:7d:
65:a8:ee:2d:f8:b5:35:69:07:93:48:bd:f5:0a:6f:
50:f6:ae:9b:01:38:15:d8:60:04:81:23:09:00:95:
a8:f5:e2:22:9f:4b:f2:4c:67:be:e7:1f:0d:6c:f7:
ba:f2:d6:27:a6:df:56:35:db:40:74:5d:c7:82:c6:
fc:42:53:f7:c2:eb:31:c8:a8:64:b0:41:52:6a:73:
2d:7d:fa:c9:44:f5:3e:d0:c0:54:1c:ea:70:95:eb:
97:6d:6b:8c:3e:8e:d3:cb:fa:26:51:70:de:92:eb:
26:61:23:7b:f1:b7:64:01:79:df:39:19:1c:a8:0a:
50:f6:ee:48:ea:30:c9:94:94:fd:bb:2e:82:c4:38:
19:f9:78:b6:65:f7:25:f4:6e:7a:96:fb:a1:24:b3:
ad:60:3f:0d:60:ee:bc:97:63:dc:24:52:ce:43:df:
fc:f1:d6:d7:12:20:f1:55:78:a2:48:0f:2e:c9:4b:
57:06:93:f5:73:b7:f3:ff:3b:b8:1b:c2:53:ff:35:
66:ad:a3:30:4b:59:13:5a:a1:7e:4c:99:b7:30:b8:
7a:c3:22:5a:fc:cd:d3:90:38:9a:ee:dc:e5:a6:b1:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:76:FA:C2:C0:C8:3D:CC:CE:4A:D4:22:AD:E5:B3:64:F8:4C:63
X509v3 Authority Key Identifier:
keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.76.0/23
Signature Algorithm: sha256WithRSAEncryption
38:c4:1b:d6:3a:9f:19:8f:9f:f0:89:a9:67:d1:ec:75:35:0f:
a5:51:71:f7:bd:48:fe:32:97:de:7f:e9:95:c1:c4:ef:0e:4c:
c3:fe:b0:62:a0:bb:57:9b:b4:27:0a:a4:00:96:dd:cb:3f:30:
f5:04:e7:eb:a1:49:d5:99:0b:ca:ba:5f:77:e7:f6:40:35:6d:
fe:06:7e:50:88:18:65:98:c1:6e:b0:f7:c0:1b:e1:5d:10:9f:
23:59:94:9a:36:b9:75:21:48:d6:7c:83:40:85:d4:c4:88:59:
b6:b8:16:49:e3:75:6e:cd:03:51:4d:53:f7:3b:d7:35:66:80:
3a:ad:be:8b:eb:2c:3c:2b:0d:02:66:2b:20:71:10:6f:01:53:
77:8e:f1:46:e0:a3:45:0d:20:20:36:ed:cc:0b:39:d6:aa:4e:
86:2d:db:60:e8:57:86:df:ab:99:84:7e:c3:2d:1a:af:a8:e6:
2e:76:0e:dd:bf:34:e9:c3:05:5a:4f:2c:c4:ed:55:7d:58:51:
2a:71:6d:c8:d8:45:57:67:f7:26:df:81:d5:bf:93:56:39:37:
19:4b:b4:de:cb:0d:ac:e2:6a:1a:72:64:36:cb:6f:a2:49:41:
09:70:89:37:83:9e:02:c6:aa:5a:c8:c0:9c:a5:92:8a:83:0a:
e4:4f:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:37 2025 by rpki-client