
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
File: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (raw, json)
Hash identifier: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=
Subject key identifier: A4:64:F8:A3:77:9B:43:53:F7:D8:0F:47:48:47:D3:1B:EB:65:FC:2B
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 3CD6EDA5462289CE0B3E61610913C9611F9802E0
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
Signing time: Wed 07 May 2025 11:22:43 +0000
ROA not before: Wed 07 May 2025 11:17:43 +0000
ROA not after: Wed 06 May 2026 11:22:43 +0000
asID: 58820
IP address blocks: 103.241.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 09:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d6:ed:a5:46:22:89:ce:0b:3e:61:61:09:13:c9:61:1f:98:02:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: May 7 11:17:43 2025 GMT
Not After : May 6 11:22:43 2026 GMT
Subject: CN=A464F8A3779B4353F7D80F474847D31BEB65FC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:96:2b:6b:15:ee:c0:83:f5:d5:fb:2f:6c:
a5:9b:3a:00:04:75:fb:31:09:ca:a7:f5:2d:77:d3:
9a:53:d8:ff:2e:8e:e7:37:8c:d3:00:f9:0d:4f:37:
4d:12:ef:f4:de:8f:09:a6:24:c2:52:d3:36:5f:bf:
45:41:d3:80:10:16:55:53:74:ed:bb:49:23:0f:48:
26:c8:05:59:78:65:63:27:22:39:de:4c:22:0c:cb:
28:56:15:4b:96:84:9a:67:c1:c9:6b:14:97:14:0a:
cd:d2:3a:9e:f7:ba:df:ce:6f:cf:63:60:b9:de:cc:
62:d0:57:d8:22:a1:4d:e3:7b:62:74:d0:92:7f:38:
a8:c3:a5:94:90:ec:dc:91:86:a8:31:08:aa:14:f6:
d8:cb:97:30:0b:45:06:d3:49:4a:7b:05:af:d3:b2:
c1:2d:cb:42:93:d2:66:b5:27:77:8e:c5:5f:bd:d9:
3a:e1:b6:d1:13:c3:1f:b7:3c:7a:ea:8e:7f:c6:cf:
3f:78:1a:2a:26:ab:46:57:e1:93:5f:d5:d9:e0:3d:
82:2d:4b:dd:20:72:2b:8d:8a:75:46:4b:62:f5:64:
3b:96:12:5a:11:eb:3c:e6:a9:02:71:94:4e:be:a0:
f4:22:99:72:d4:d7:6d:69:35:1f:82:68:b7:b8:39:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:F8:A3:77:9B:43:53:F7:D8:0F:47:48:47:D3:1B:EB:65:FC:2B
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.241.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:41:08:b4:69:de:bd:84:0a:99:73:ed:a9:99:f9:13:f1:5a:
20:35:e1:0c:ba:44:22:8d:a0:50:0f:47:64:ef:2f:65:81:10:
4b:9c:94:0b:17:bd:0c:0d:8a:ea:b0:e6:c3:61:2b:75:98:9f:
7b:c0:b0:75:e9:a0:15:c7:3b:87:7b:eb:87:b4:28:92:7a:1d:
48:13:2b:35:0e:8a:e2:98:37:9e:0a:0d:7d:59:f9:ff:40:cc:
c0:9c:be:ca:1c:3f:08:6f:e2:17:12:f1:eb:af:f4:61:66:d7:
48:7e:14:ac:7e:96:d8:88:4a:88:83:bc:a6:d5:ea:c8:8a:d5:
9c:02:2d:63:99:09:39:54:03:52:66:f3:44:77:05:6b:8f:27:
b7:c2:a8:15:2a:90:d8:62:8f:9e:5f:6e:db:a1:8a:9f:e6:3e:
bf:6c:a3:96:8b:aa:13:d5:a0:c3:1d:19:67:bc:52:f1:b1:71:
c7:64:db:13:7c:56:bf:f8:e8:c4:29:a7:ea:e3:b8:0e:1a:2e:
58:05:5f:64:63:aa:1e:07:39:24:fc:3f:f7:c3:8b:6e:07:9c:
33:7b:e5:c3:0e:e8:73:ff:34:67:f0:24:d5:3d:a1:5e:35:c6:
2a:c4:d8:05:e2:ff:9f:52:e6:88:09:17:4f:9f:45:9c:93:4d:
f6:ec:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:08 2025 by rpki-client