
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
File: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (raw, json)
Hash identifier: t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=
Subject key identifier: 27:64:5B:CE:40:C5:DF:1E:F0:48:80:86:E5:F5:6B:60:20:D6:37:74
Certificate issuer: /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial: 13A217AE4AFC3AB28A3A6BBA78D1841DC384BEBE
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
Signing time: Wed 02 Apr 2025 11:00:02 +0000
ROA not before: Wed 02 Apr 2025 10:55:02 +0000
ROA not after: Wed 01 Apr 2026 11:00:02 +0000
asID: 141940
IP address blocks: 103.166.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a2:17:ae:4a:fc:3a:b2:8a:3a:6b:ba:78:d1:84:1d:c3:84:be:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
Validity
Not Before: Apr 2 10:55:02 2025 GMT
Not After : Apr 1 11:00:02 2026 GMT
Subject: CN=27645BCE40C5DF1EF0488086E5F56B6020D63774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:47:ac:5c:77:8a:58:00:be:d9:4e:4b:ff:
53:24:59:fd:42:d2:f5:a5:60:de:44:4b:79:5a:56:
24:ed:30:cd:82:23:d8:12:b5:41:90:1d:0e:44:e6:
bb:ea:3e:21:32:04:7f:a6:24:be:da:fb:70:42:69:
7c:ae:af:64:33:e5:35:dd:a5:20:47:f1:f4:7a:d5:
fd:34:21:24:6c:7c:02:26:90:6a:2d:23:ac:b5:d8:
1e:e1:99:e2:5c:99:b7:db:11:0d:58:8a:5b:87:67:
74:fd:5e:6a:82:9f:25:e2:44:b8:f0:fc:43:56:1d:
a1:b0:29:f7:86:43:95:e4:20:d0:4d:d2:0d:da:31:
ef:b4:c6:13:f2:69:c7:e5:1b:65:34:ef:86:09:0f:
b4:83:91:8c:0d:db:e6:0a:2c:57:f6:ed:7a:76:17:
56:bc:11:28:6f:ba:d2:97:05:fe:d3:5f:07:90:0c:
04:fc:21:67:fc:b1:91:ea:55:c1:be:9c:ba:22:00:
07:56:64:52:d4:3f:7c:c5:52:8e:63:94:30:9a:fa:
dc:f8:6d:63:52:10:88:61:57:26:48:5f:e9:59:ff:
75:53:e8:42:15:0a:f9:0a:93:0f:91:ae:ea:2e:75:
49:1b:3c:27:29:f6:1f:ce:eb:2f:f6:24:6d:3f:85:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:5B:CE:40:C5:DF:1E:F0:48:80:86:E5:F5:6B:60:20:D6:37:74
X509v3 Authority Key Identifier:
keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a0:83:0b:5c:ef:83:b4:7a:f6:7d:53:09:56:45:13:0a:e5:
0a:66:63:f5:39:50:c5:fe:c4:fe:4d:15:51:b1:45:68:78:47:
f1:a8:d8:3a:31:db:f6:a2:65:4e:2e:27:ed:21:63:02:13:b3:
c8:8c:3e:1f:1a:6f:0f:f5:38:58:1e:74:68:87:ef:01:e6:6a:
60:30:9f:9d:f1:bf:e5:1e:35:26:ef:fa:4f:98:84:cb:c1:54:
28:6b:fa:26:d6:12:77:2e:68:4e:82:e3:02:03:6e:6c:60:cd:
32:f2:b6:b8:d3:22:26:cb:a6:44:20:60:88:71:f9:bc:eb:04:
77:62:c7:d5:8b:be:b2:61:b6:7c:e7:34:96:74:7e:82:b2:56:
c2:db:55:55:2d:e5:b3:53:74:b8:d7:2a:69:35:d6:e3:45:56:
ee:cd:62:41:2a:06:5e:73:76:56:80:aa:be:17:81:bb:00:a7:
1d:a3:17:8b:3f:82:d0:f5:75:54:8a:15:38:6a:31:cc:c8:56:
5d:d4:56:a0:62:95:0a:ba:c1:d0:ea:65:71:9a:b8:03:c4:98:
fd:96:d1:1b:cb:1f:2f:8e:13:f4:0a:47:8c:63:0b:0c:28:57:
f1:cd:ca:dd:10:a2:f9:f9:99:9b:ab:ba:ac:b0:da:f8:49:49:
af:7b:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:18:41 2025 by rpki-client