
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
File: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=
Subject key identifier: F9:39:60:F5:24:31:59:6E:BD:0F:33:22:27:6B:C7:D2:43:37:A4:81
Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial: 2B22C46714A65311FBAA15B974D049E633CDB795
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
Signing time: Sat 25 Oct 2025 01:59:44 +0000
ROA not before: Sat 25 Oct 2025 01:54:44 +0000
ROA not after: Sat 24 Oct 2026 01:59:44 +0000
asID: 133800
IP address blocks: 103.197.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 12:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:22:c4:67:14:a6:53:11:fb:aa:15:b9:74:d0:49:e6:33:cd:b7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Validity
Not Before: Oct 25 01:54:44 2025 GMT
Not After : Oct 24 01:59:44 2026 GMT
Subject: CN=F93960F52431596EBD0F3322276BC7D24337A481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:ab:63:76:e3:fc:68:62:ff:28:cc:86:4c:
40:6e:6d:f9:fe:2d:45:8e:2d:19:52:88:cc:f7:2e:
b3:d6:28:46:f7:52:40:f7:cb:e6:3e:e1:e2:2e:99:
67:84:40:db:56:1c:04:76:35:ba:c5:18:0f:5b:6d:
c9:3f:0f:33:c3:b0:55:98:9b:60:e6:17:e7:b0:80:
07:47:91:df:78:c0:c8:cd:d5:1e:12:8e:0b:54:2a:
63:7c:46:74:e2:e4:bb:bc:77:32:6b:db:3a:64:42:
09:3f:e4:6c:a5:63:19:96:92:34:30:0a:a3:37:9c:
9d:cf:67:9d:0a:28:51:7d:c8:ed:a1:69:0e:69:ac:
e4:69:61:62:d1:2a:5b:09:7a:19:8f:15:a4:13:49:
3d:ab:83:bd:69:6e:69:f3:64:17:21:21:b8:bb:b4:
96:6a:b1:87:b0:0e:a3:a0:0f:a5:f4:1f:8e:ac:48:
b9:e3:1d:b7:46:e2:06:ed:31:4a:50:e1:a5:d9:74:
1a:29:1a:6d:2e:64:8f:e9:39:44:48:de:b9:7c:80:
ac:13:39:20:e0:cf:b5:9c:ba:19:b2:9b:45:7f:ea:
59:8f:b0:ae:fb:d0:7e:a3:e0:ba:94:da:14:87:de:
ff:f5:22:82:f2:a5:67:71:cc:69:bd:ab:a2:5b:a8:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:60:F5:24:31:59:6E:BD:0F:33:22:27:6B:C7:D2:43:37:A4:81
X509v3 Authority Key Identifier:
keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.188.0/22
Signature Algorithm: sha256WithRSAEncryption
55:91:9d:5a:bb:47:93:ae:07:83:eb:77:fe:1c:3d:24:30:81:
3f:6c:3c:73:df:d8:59:b4:5f:66:a5:21:ab:76:c5:e7:8c:8c:
72:44:85:db:7f:b5:c1:5e:52:32:7e:81:31:b9:f1:57:2b:f0:
96:90:a8:c6:37:c0:cf:b5:76:8a:0d:0d:a5:dd:2f:83:e3:d2:
5a:cb:8f:9e:28:3d:2a:34:8d:f2:24:0f:f2:67:79:ef:d3:32:
a6:15:d4:8d:dd:69:37:f8:f2:f6:26:59:3c:16:8e:5a:f1:f1:
1f:90:c3:c6:80:0a:db:c3:f3:78:98:c4:ed:de:3f:9b:b2:05:
29:ab:01:93:29:6d:d7:5a:88:6f:ec:bb:5e:84:d8:b7:73:35:
a4:d4:a5:75:2f:a2:6b:23:6a:23:3a:58:61:47:f2:24:82:0c:
55:16:0e:3c:58:04:9b:2e:60:63:85:69:d4:a6:f8:eb:60:ca:
a2:df:6a:e7:f6:49:1a:05:62:ed:5c:50:f4:20:e4:6b:56:2b:
0a:2d:fb:e4:be:e2:e6:34:c6:e7:98:b3:08:db:6c:3e:b1:8c:
00:e6:a9:1b:e9:df:ba:3a:4a:96:ae:23:c6:e2:48:26:91:94:
ec:b6:17:15:c5:ac:34:da:d9:eb:3e:4e:09:37:e3:06:ff:09:
48:75:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:03:35 2025 by rpki-client