
$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
File: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=
Subject key identifier: E8:0F:AF:74:3A:00:6F:81:C7:AC:1E:63:41:D4:98:B8:04:81:97:22
Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial: 243A7E956D17D0684E242AE453528FC65D0B8517
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
Signing time: Wed 02 Apr 2025 04:00:55 +0000
ROA not before: Wed 02 Apr 2025 03:55:55 +0000
ROA not after: Wed 01 Apr 2026 04:00:55 +0000
asID: 55685
IP address blocks: 103.247.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 02:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3a:7e:95:6d:17:d0:68:4e:24:2a:e4:53:52:8f:c6:5d:0b:85:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Validity
Not Before: Apr 2 03:55:55 2025 GMT
Not After : Apr 1 04:00:55 2026 GMT
Subject: CN=E80FAF743A006F81C7AC1E6341D498B804819722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:46:64:43:d9:0e:43:ec:f4:76:b4:cf:0c:
8f:85:04:f1:cf:a9:00:54:74:97:0e:5c:38:4a:f3:
ed:db:7d:b0:ef:22:92:f9:30:f8:f3:ce:17:06:fb:
a5:0e:ea:98:67:8f:5f:ed:4a:a7:da:8d:6b:3b:56:
59:45:43:e0:cb:f4:c6:ec:3e:e2:2f:c0:02:10:69:
09:9e:82:5d:26:db:9c:6a:8a:ed:68:46:84:d5:29:
06:dd:c3:51:d1:6f:d3:a7:55:4d:af:0c:71:ba:9e:
2f:2c:4c:81:88:5e:8e:78:34:49:56:6b:3a:8d:31:
63:21:7a:a0:34:60:cd:42:9e:f5:fe:e2:79:79:4e:
c4:b3:2a:92:98:05:d5:82:f9:a5:ae:14:62:80:da:
37:f4:9f:74:8f:a0:9c:a3:07:21:57:29:18:80:36:
9c:a9:95:f6:51:62:3d:a4:3b:d3:60:7b:da:c1:93:
e6:6c:30:8f:68:b1:f3:9c:a8:e1:f3:73:84:17:3c:
1f:29:25:53:bf:d9:af:f7:b3:c8:53:2a:5d:bb:cd:
44:02:15:a4:1c:fa:57:aa:a9:5e:8e:10:b8:55:1f:
5b:84:57:0e:ee:8b:07:e8:92:9f:13:46:84:f6:c5:
33:9e:48:48:d8:c8:c2:48:eb:e8:e0:b2:cd:17:50:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:AF:74:3A:00:6F:81:C7:AC:1E:63:41:D4:98:B8:04:81:97:22
X509v3 Authority Key Identifier:
keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.40.0/24
Signature Algorithm: sha256WithRSAEncryption
30:46:6c:1a:60:21:9d:fd:36:78:14:cb:53:77:3b:f3:32:95:
99:38:8b:52:c4:1a:63:91:7b:3d:de:85:1c:77:d3:97:36:0b:
11:6f:3b:b0:0c:7d:22:55:a7:6e:25:1b:60:7e:79:fd:54:0a:
96:54:0f:48:7d:9d:83:93:92:a3:7d:20:ec:64:09:37:0c:bc:
b8:a5:d0:29:e5:6d:6e:b7:24:fa:4c:d8:10:84:20:57:d7:9e:
24:a1:29:e1:00:75:c0:f4:1c:82:56:21:cb:51:12:ef:6e:f7:
5b:1d:68:79:0b:70:e0:b2:82:ef:40:d4:20:0a:ba:e5:9c:a8:
66:82:53:bc:e1:b2:fe:79:f6:7b:af:88:d0:8a:6e:d0:36:10:
57:62:bf:46:65:d8:25:52:96:1e:9f:74:83:13:dd:6c:c9:f8:
ca:64:3c:d8:32:63:32:03:60:bf:12:bc:a0:7f:70:2c:fc:ed:
3b:70:3e:a7:21:c3:de:01:56:ef:14:e6:83:2e:b8:a0:3a:00:
65:2f:fc:8c:c3:90:2c:2d:21:21:96:c3:4e:a4:4d:dc:f5:36:
37:8d:88:b1:82:66:5a:30:87:09:9d:d0:29:1b:d7:30:02:14:
17:79:37:7e:fc:d4:f0:46:97:1f:9e:77:f7:4b:14:99:ee:81:
9d:82:90:54
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJDp+lW0X0GhOJCrkU1KPxl0LhRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNTA0MDIwMzU1NTVaFw0yNjA0MDEwNDAwNTVaMDMxMTAvBgNV
BAMTKEU4MEZBRjc0M0EwMDZGODFDN0FDMUU2MzQxRDQ5OEI4MDQ4MTk3MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eUZkQ9kOQ+z0drTPDI+FBPHP
qQBUdJcOXDhK8+3bfbDvIpL5MPjzzhcG+6UO6phnj1/tSqfajWs7VllFQ+DL9Mbs
PuIvwAIQaQmegl0m25xqiu1oRoTVKQbdw1HRb9OnVU2vDHG6ni8sTIGIXo54NElW
azqNMWMheqA0YM1CnvX+4nl5TsSzKpKYBdWC+aWuFGKA2jf0n3SPoJyjByFXKRiA
NpyplfZRYj2kO9Nge9rBk+ZsMI9osfOcqOHzc4QXPB8pJVO/2a/3s8hTKl27zUQC
FaQc+leqqV6OELhVH1uEVw7uiwfokp8TRoT2xTOeSEjYyMJI6+jgss0XUI2ZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6A+vdDoAb4HHrB5jQdSYuASBlyIwHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h
ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KDANBgkqhkiG
9w0BAQsFAAOCAQEAMEZsGmAhnf02eBTLU3c78zKVmTiLUsQaY5F7Pd6FHHfTlzYL
EW87sAx9IlWnbiUbYH55/VQKllQPSH2dg5OSo30g7GQJNwy8uKXQKeVtbrck+kzY
EIQgV9eeJKEp4QB1wPQcglYhy1ES7273Wx1oeQtw4LKC70DUIAq65ZyoZoJTvOGy
/nn2e6+I0Ipu0DYQV2K/RmXYJVKWHp90gxPdbMn4ymQ82DJjMgNgvxK8oH9wLPzt
O3A+pyHD3gFW7xTmgy64oDoAZS/8jMOQLC0hIZbDTqRN3PU2N42IsYJmWjCHCZ3Q
KRvXMAIUF3k3fvzU8EaXH55390sUme6BnYKQVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:45:05 2025 by rpki-client