
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
File: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (raw, json)
Hash identifier: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=
Subject key identifier: 87:85:15:05:A4:94:2C:CB:D7:59:5B:58:90:E0:90:98:19:F3:FB:BC
Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Certificate serial: 679D2DCB9628736EA3F0EA182AE28E5CFB2F6930
Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
Signing time: Thu 12 Jun 2025 04:00:00 +0000
ROA not before: Thu 12 Jun 2025 03:55:00 +0000
ROA not after: Thu 11 Jun 2026 04:00:00 +0000
asID: 150555
IP address blocks: 103.85.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 00:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9d:2d:cb:96:28:73:6e:a3:f0:ea:18:2a:e2:8e:5c:fb:2f:69:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Validity
Not Before: Jun 12 03:55:00 2025 GMT
Not After : Jun 11 04:00:00 2026 GMT
Subject: CN=87851505A4942CCBD7595B5890E0909819F3FBBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:80:98:35:fc:89:29:36:67:3d:77:2f:27:
0f:ed:fe:aa:63:69:91:ac:15:f4:c2:42:dc:9d:99:
87:e1:0f:00:39:b3:6c:f3:dd:d5:74:1b:c5:ce:79:
a5:3e:93:68:95:1a:a8:d9:bc:27:33:aa:7e:6f:f9:
4c:d6:c8:b0:32:02:7a:20:0e:68:90:97:d7:5d:12:
cc:a6:e1:1e:cf:ba:f4:b9:92:3e:cb:a7:5c:a7:74:
a7:89:6a:24:10:2d:d8:a0:a2:c1:7a:c0:59:ca:11:
09:55:2e:f8:e1:25:35:e2:7d:45:ee:f4:1d:51:1d:
98:2c:d2:46:26:ac:c7:7d:0b:18:3c:3f:2e:4d:72:
32:55:77:9b:2f:17:8d:09:64:e4:32:38:86:e7:d2:
a3:49:a2:d3:ab:16:d6:85:ac:8f:2c:f1:81:39:67:
16:39:83:a5:70:48:4f:85:21:e6:0d:e7:c7:33:cd:
ab:15:3f:8c:ac:68:0a:a6:74:02:7c:67:bf:1f:1b:
ef:47:b9:51:9e:d3:c5:7b:34:5e:7b:a1:26:00:dc:
60:59:a9:80:1b:e4:dc:65:b1:aa:54:1a:43:55:86:
69:17:3d:63:f5:08:2d:63:9b:2b:77:21:d1:c0:c2:
d2:08:8d:fd:52:31:77:6f:fb:06:c5:a7:36:f9:8e:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:15:05:A4:94:2C:CB:D7:59:5B:58:90:E0:90:98:19:F3:FB:BC
X509v3 Authority Key Identifier:
keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.53.0/24
Signature Algorithm: sha256WithRSAEncryption
35:29:76:da:49:24:fd:ab:ed:03:e1:ce:9e:37:24:33:5e:0b:
52:1a:6a:9b:bc:05:3d:ca:5b:27:2c:0f:ce:01:a8:a1:61:25:
41:93:4b:17:34:83:53:a4:dd:14:6c:f7:a3:2d:c5:ee:c6:39:
2a:d0:54:f3:67:31:76:50:a6:9b:35:53:d8:b7:7e:5e:be:24:
bc:95:b8:52:1f:fe:48:00:cb:a7:be:f4:bd:62:ae:51:1a:81:
e9:1a:a3:29:dd:61:86:6b:96:1f:64:c2:d0:40:04:36:c5:02:
88:58:49:f7:25:a9:0b:12:fe:b4:2e:31:6d:cf:29:c3:cc:4b:
50:10:1a:e1:b6:13:2d:ed:da:67:d4:88:48:fe:3d:47:01:fa:
76:3b:e9:da:1c:03:cb:6f:74:86:61:df:f3:6e:0e:d6:1c:c5:
42:5d:f9:69:f0:07:81:d8:04:02:d9:fb:33:21:cc:68:b3:e7:
10:86:28:c1:d0:15:fb:00:f3:61:80:eb:8d:f7:53:db:22:39:
0a:22:50:19:f0:4b:9a:64:1e:20:17:43:99:3f:b0:e6:29:d5:
f0:e4:cc:9e:d0:d4:49:e2:d0:ed:52:bb:fc:21:29:d3:5c:14:
38:dd:1a:9b:2a:44:fa:0f:01:fc:0c:a1:5a:92:fb:18:79:3a:
e9:c2:93:dc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZ50ty5Yoc26j8OoYKuKOXPsvaTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3
MkUwRjJDMzAeFw0yNTA2MTIwMzU1MDBaFw0yNjA2MTEwNDAwMDBaMDMxMTAvBgNV
BAMTKDg3ODUxNTA1QTQ5NDJDQ0JENzU5NUI1ODkwRTA5MDk4MTlGM0ZCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWNoCYNfyJKTZnPXcvJw/t/qpj
aZGsFfTCQtydmYfhDwA5s2zz3dV0G8XOeaU+k2iVGqjZvCczqn5v+UzWyLAyAnog
DmiQl9ddEsym4R7PuvS5kj7Lp1yndKeJaiQQLdigosF6wFnKEQlVLvjhJTXifUXu
9B1RHZgs0kYmrMd9Cxg8Py5NcjJVd5svF40JZOQyOIbn0qNJotOrFtaFrI8s8YE5
ZxY5g6VwSE+FIeYN58czzasVP4ysaAqmdAJ8Z78fG+9HuVGe08V7NF57oSYA3GBZ
qYAb5NxlsapUGkNVhmkXPWP1CC1jmyt3IdHAwtIIjf1SMXdv+wbFpzb5jqKPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUh4UVBaSULMvXWVtYkOCQmBnz+7wwHwYDVR0j
BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1
RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw
RjJDMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZDFmNGNlLTE2OWItNDMxYS04
Mjg2LWM1ZjNhMDdiYmJlMy8wLzMxMzAzMzJlMzgzNTJlMzUzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdVNTANBgkqhkiG
9w0BAQsFAAOCAQEANSl22kkk/avtA+HOnjckM14LUhpqm7wFPcpbJywPzgGooWEl
QZNLFzSDU6TdFGz3oy3F7sY5KtBU82cxdlCmmzVT2Ld+Xr4kvJW4Uh/+SADLp770
vWKuURqB6RqjKd1hhmuWH2TC0EAENsUCiFhJ9yWpCxL+tC4xbc8pw8xLUBAa4bYT
Le3aZ9SISP49RwH6djvp2hwDy290hmHf824O1hzFQl35afAHgdgEAtn7MyHMaLPn
EIYowdAV+wDzYYDrjfdT2yI5CiJQGfBLmmQeIBdDmT+w5inV8OTMntDUSeLQ7VK7
/CEp01wUON0amypE+g8B/AyhWpL7GHk66cKT3A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:53:12 2025 by rpki-client