
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32342d3234203d3e203633383237.roa
File: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: zTXz6ViHpuUnydIo3u7N32sUnlV7Ga/gyh5w07AZqAI=
Subject key identifier: C5:3C:11:F3:AE:C2:3F:F6:2C:E4:D0:31:7E:1E:A0:30:4C:EC:C2:2A
Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial: 16774C961FA23CF09B74E6A9213B1194B8F53996
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32342d3234203d3e203633383237.roa
Signing time: Wed 22 Oct 2025 09:02:25 +0000
ROA not before: Wed 22 Oct 2025 08:57:25 +0000
ROA not after: Wed 21 Oct 2026 09:02:25 +0000
asID: 63827
IP address blocks: 103.39.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 10:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:77:4c:96:1f:a2:3c:f0:9b:74:e6:a9:21:3b:11:94:b8:f5:39:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Validity
Not Before: Oct 22 08:57:25 2025 GMT
Not After : Oct 21 09:02:25 2026 GMT
Subject: CN=C53C11F3AEC23FF62CE4D0317E1EA0304CECC22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:b2:4f:69:db:50:98:62:9e:77:bf:75:02:
fb:f5:fa:7a:4a:13:3c:9e:1c:a4:93:7c:ae:e1:ad:
a1:5f:e9:a4:a3:b7:50:1d:6d:83:2f:82:db:46:44:
61:96:6b:96:0a:ce:c5:a0:cf:80:28:b3:61:7d:43:
11:b7:ee:1b:60:26:9c:37:3c:b8:09:0a:64:04:a8:
f9:ce:37:3f:e1:29:b6:4e:b9:90:22:07:aa:c4:1b:
cc:4c:78:24:56:38:f7:b6:be:1f:4f:64:16:ba:b9:
15:c2:32:10:31:d7:3b:c5:d5:28:ec:0c:8b:6e:50:
ff:f5:53:07:ef:e6:e7:7d:9d:01:95:b3:82:64:5a:
e5:a6:c1:be:25:08:09:8e:62:a1:ab:65:8b:3c:9d:
e1:fb:e7:e4:b8:28:b9:df:18:a6:ec:f3:8b:c2:76:
4f:cf:0a:e7:a8:dd:17:c0:c4:0e:b0:86:a0:23:52:
9a:23:26:f7:5d:4f:99:2e:09:dc:c0:d5:16:44:c6:
c5:4c:39:ed:a4:d9:1b:76:f6:22:3d:50:62:b0:9c:
a5:6e:1a:3c:10:03:4d:9f:79:78:8f:37:9d:11:9f:
ac:58:b2:7c:03:36:6f:b3:b2:68:5d:ba:da:7d:7c:
61:e7:ab:0c:94:11:6f:e4:4d:3b:37:9b:74:00:4d:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3C:11:F3:AE:C2:3F:F6:2C:E4:D0:31:7E:1E:A0:30:4C:EC:C2:2A
X509v3 Authority Key Identifier:
keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:83:c8:9b:4a:63:87:b3:cb:55:35:c1:5d:60:e3:3e:6e:9d:
fa:57:0e:62:10:0e:84:01:7e:4c:ae:ee:be:91:b4:0b:1e:56:
3b:b3:f5:17:8c:53:f4:bc:31:29:2c:e8:71:72:dc:09:94:0a:
c3:2f:df:3b:ce:5d:a7:b8:3a:4c:91:91:7d:f0:91:9d:1e:6d:
76:b1:bd:80:83:81:04:5a:f4:e0:79:2f:e2:b3:de:00:39:5c:
ff:57:27:be:4d:6d:45:cf:81:21:c6:a7:5a:5d:7f:2b:0a:49:
25:af:a0:e5:f7:f6:33:76:0d:68:a8:f6:4a:4c:b0:49:1a:d4:
95:56:f5:c8:a9:32:54:3c:33:15:f6:28:e8:4a:6c:40:ca:08:
00:a1:3b:09:89:06:1c:b4:1c:60:61:bd:b6:58:f4:40:f0:2c:
eb:00:0f:dc:10:4f:23:ab:75:01:37:01:b3:70:73:09:f4:19:
83:ae:ba:71:ac:4c:b2:db:36:73:39:63:75:be:07:b8:fb:a8:
d0:1d:2e:ac:95:69:fd:cd:63:e2:89:4f:bf:24:83:27:3a:c0:
5f:96:86:1c:b0:4d:08:aa:ed:1f:93:06:1f:89:18:de:31:ca:
7c:3a:16:4e:b8:13:30:21:05:24:55:cf:ad:4f:4b:8c:69:cf:
63:08:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:26 2025 by rpki-client