
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
File: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: pRKe+kXmByJ2JQdqGwZqDIIAk5V2EZK8ohpT3QljbGE=
Subject key identifier: 89:63:4B:63:88:9B:99:AD:16:E7:D1:07:50:A9:CD:27:50:6F:37:34
Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial: 67C036AF1788DFC65AD550D6BC28B4069F50F845
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
Signing time: Wed 22 Oct 2025 08:00:02 +0000
ROA not before: Wed 22 Oct 2025 07:55:02 +0000
ROA not after: Wed 21 Oct 2026 08:00:02 +0000
asID: 63827
IP address blocks: 103.39.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 10:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c0:36:af:17:88:df:c6:5a:d5:50:d6:bc:28:b4:06:9f:50:f8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Validity
Not Before: Oct 22 07:55:02 2025 GMT
Not After : Oct 21 08:00:02 2026 GMT
Subject: CN=89634B63889B99AD16E7D10750A9CD27506F3734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:42:54:11:71:e0:cb:2a:05:8d:91:bf:00:
ee:24:d0:39:5e:67:db:21:3b:30:bf:1e:4f:40:22:
3e:fc:5c:b4:96:82:f6:54:18:8c:77:7a:94:1c:54:
fe:e8:26:d9:9e:72:4f:ff:d0:b2:d1:22:6e:3d:52:
23:5a:d9:d3:62:69:e4:62:42:16:5a:d1:35:b4:9d:
56:eb:9f:f8:8d:92:34:5c:8a:b8:d6:2a:24:e5:73:
56:6b:16:cb:d2:79:3a:6d:4c:3d:d2:12:53:83:bc:
c1:df:a9:55:99:af:d1:a7:e2:4c:0f:01:66:4c:51:
88:4c:c9:45:0e:82:dc:08:f7:9e:1a:90:0d:6f:80:
1b:fe:f1:6b:55:3f:51:07:d5:0a:0d:05:20:68:86:
35:ae:c8:d4:30:29:9f:63:17:fa:1f:9d:6d:ad:95:
41:4b:23:46:5a:0c:d9:71:65:e5:6a:f2:d8:0d:52:
50:b3:1d:5a:04:d9:5a:3b:11:75:3d:4d:03:07:5c:
b4:50:ec:68:bd:ae:1b:86:a3:a0:40:42:91:ac:33:
b0:9d:a1:5f:14:73:f9:9f:ce:a6:bf:ef:da:da:ca:
a3:c2:b8:1a:c4:d0:9e:1a:36:0d:d3:f5:68:ed:05:
d6:bb:96:6b:b2:4b:aa:69:41:e5:0a:8f:d9:e1:a4:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:4B:63:88:9B:99:AD:16:E7:D1:07:50:A9:CD:27:50:6F:37:34
X509v3 Authority Key Identifier:
keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.13.0/24
Signature Algorithm: sha256WithRSAEncryption
24:49:0c:c1:2e:55:f1:ee:5b:b9:91:5b:e7:c9:6a:f5:ba:b2:
86:ed:1e:0a:22:53:e3:0f:3a:ae:86:8d:15:2a:47:14:98:d7:
05:e2:e9:9c:b4:16:68:87:c1:4d:79:da:fa:d6:6d:69:24:9a:
1a:48:47:38:1d:fa:97:56:93:6b:aa:ba:16:c6:3c:d8:7d:f0:
a7:1e:17:1c:0a:07:a8:6b:1d:fb:9e:18:15:eb:7b:b5:0f:5e:
29:9e:c3:c3:df:9e:9c:11:bb:43:45:a1:57:6e:39:77:0d:1a:
f7:43:9f:26:a7:1a:6e:e9:e4:a6:ad:3f:fb:c2:8f:88:ff:8e:
a3:4b:da:a8:41:8f:0e:96:d3:78:85:58:fd:f3:81:8c:2d:ed:
21:f4:09:ed:bb:bc:25:1f:a2:97:df:f3:10:20:2d:ea:97:58:
16:d4:5e:0e:e6:af:13:0c:11:a4:9d:71:3c:6d:96:cb:62:ce:
37:97:79:fb:04:a0:0a:54:40:64:d5:e6:8e:9d:f3:01:ea:69:
d5:8a:67:f0:9a:bd:fd:9e:78:11:64:aa:c4:79:64:ce:d0:bd:
4a:8d:76:09:e3:35:15:d2:23:0e:8a:e9:46:51:fb:08:a5:aa:
75:c6:95:f0:56:9b:d4:40:6a:a9:83:a7:0f:37:43:1c:37:a0:
ba:2e:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:15:47 2025 by rpki-client