
$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa
File: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (raw, json)
Hash identifier: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=
Subject key identifier: 4C:0F:1A:5A:ED:F4:B9:34:17:0E:F1:6B:B6:DA:07:E9:09:41:FB:FB
Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial: 0BA34CDF103D5A7739F67888F9B13A61F7724E4C
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa
Signing time: Tue 04 Nov 2025 12:00:00 +0000
ROA not before: Tue 04 Nov 2025 11:55:00 +0000
ROA not after: Tue 03 Nov 2026 12:00:00 +0000
asID: 58378
IP address blocks: 103.161.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 19:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a3:4c:df:10:3d:5a:77:39:f6:78:88:f9:b1:3a:61:f7:72:4e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
Validity
Not Before: Nov 4 11:55:00 2025 GMT
Not After : Nov 3 12:00:00 2026 GMT
Subject: CN=4C0F1A5AEDF4B934170EF16BB6DA07E90941FBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:06:35:91:57:d8:e1:57:d9:bf:94:0c:33:
06:9a:0f:f0:11:07:10:d8:09:b6:ed:7b:b6:fa:76:
0b:70:04:cf:35:80:a2:83:b8:d0:88:6e:a6:c3:d1:
91:eb:64:cd:f7:7b:04:d8:9e:8a:b3:e0:5b:8f:ac:
3d:25:45:20:da:16:f3:1c:8e:e1:d2:3f:6b:e8:43:
1a:9d:25:c2:2d:2c:4a:89:e9:38:12:54:a7:a7:84:
b1:ce:e8:03:a8:26:7a:e6:44:e7:2a:14:d7:91:ff:
34:fd:71:b3:70:f8:ea:4e:43:96:3f:a4:48:35:3d:
1b:df:57:a9:b5:1f:e0:b1:c4:cd:97:eb:16:75:34:
a0:0a:9b:34:62:af:8a:5f:5c:30:16:82:1b:48:2c:
d0:03:c9:2b:ff:4e:23:32:26:c4:2d:4a:ec:f3:09:
15:d5:29:a8:75:cf:e8:ea:e5:38:e9:bc:d8:d5:bc:
cc:73:bc:00:59:3f:cf:0f:d8:a4:a7:aa:8d:a4:17:
78:cb:a1:cd:9a:43:4f:47:e6:d7:64:dc:15:3f:7f:
83:ce:0d:e9:cb:3c:6b:e4:89:55:b1:1d:6f:b4:03:
8e:b4:0b:41:d3:dd:e6:3c:a4:ba:67:b5:60:98:32:
f1:73:41:2a:28:d9:f2:28:de:3b:03:d2:78:a8:f7:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:1A:5A:ED:F4:B9:34:17:0E:F1:6B:B6:DA:07:E9:09:41:FB:FB
X509v3 Authority Key Identifier:
keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.116.0/24
Signature Algorithm: sha256WithRSAEncryption
58:41:7a:94:9b:77:6f:29:02:af:ef:87:80:06:9f:ec:e1:d0:
d6:e2:9d:90:71:a6:cd:a1:62:a8:2b:9e:74:b3:c1:89:fb:c8:
f6:1f:6e:21:52:88:41:a0:7c:90:8e:58:5f:2e:35:a4:62:bd:
92:8a:72:b1:ff:46:38:62:3a:8b:ce:fa:f9:8a:80:9a:4b:c6:
ff:ec:42:85:f7:2d:b1:bf:9e:46:69:a2:22:cd:59:a8:65:84:
b2:e9:94:34:43:74:89:ad:1e:eb:6d:57:b1:ce:c7:f8:35:74:
cc:b3:0c:ea:d6:eb:45:e7:39:d5:0b:45:39:0d:63:9a:b9:a0:
21:b2:6b:e6:fd:b7:31:02:08:50:44:7e:8c:cc:81:1a:8e:6e:
9f:5f:c5:7a:94:8d:ea:6d:32:8d:3c:70:2d:2a:a6:74:c0:3d:
c5:32:37:82:72:9f:c3:8d:24:e7:f0:b7:5a:c0:90:40:cd:05:
0e:7f:af:41:74:79:e5:17:82:7e:20:3a:f6:1c:c9:76:98:58:
ae:dd:5a:3c:d6:7e:6d:ab:19:1d:15:91:ca:cc:03:cc:e0:37:
fc:c4:68:e7:1b:58:23:8f:e2:66:d5:bb:47:e7:5b:6b:80:14:
c6:d9:d6:6c:ef:a7:fd:1b:bb:3d:92:4a:86:20:64:9e:a6:e7:
0b:ac:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:17 2025 by rpki-client