
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          DFWYxaoIxwG9WMzW6Krh4MGDZ5KgcnGueENDPY7d5+0=
Subject key identifier:   09:DF:71:06:CC:36:BE:73:D2:99:F0:45:4E:E6:69:F4:EC:1D:62:63
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       24D8FC1FD18683736B5AC9B6BC93C31523AC2227
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
Signing time:             Tue 04 Nov 2025 01:00:02 +0000
ROA not before:           Tue 04 Nov 2025 00:55:02 +0000
ROA not after:            Tue 03 Nov 2026 01:00:02 +0000
asID:                     149374
IP address blocks:        103.180.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl
                          rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 02:34:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d8:fc:1f:d1:86:83:73:6b:5a:c9:b6:bc:93:c3:15:23:ac:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Nov  4 00:55:02 2025 GMT
            Not After : Nov  3 01:00:02 2026 GMT
        Subject: CN=09DF7106CC36BE73D299F0454EE669F4EC1D6263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:e7:36:10:6e:05:ca:85:46:3c:85:a5:35:
                    92:5c:c6:29:4f:df:ec:2b:95:18:9b:6f:05:e0:ea:
                    1e:d3:ff:48:1a:7a:cf:11:28:f5:06:87:dc:a8:c3:
                    23:20:1a:af:24:23:f7:17:0f:a0:42:98:3b:f1:19:
                    b6:c0:62:3f:c2:32:13:9e:9b:6d:c4:e1:65:a2:b2:
                    31:bc:aa:8f:1f:41:22:19:a2:39:a5:99:29:06:fa:
                    2f:d4:6c:83:65:63:1a:1c:10:18:5c:76:e3:ef:9c:
                    f1:0a:ad:fd:04:ce:24:7d:1a:c4:82:17:09:4c:d2:
                    ef:a6:82:11:28:07:e3:48:29:bb:94:c2:4b:f7:55:
                    7f:ae:54:93:d5:fb:85:4d:b5:a1:f3:9a:f3:9c:6b:
                    f8:a2:90:0d:50:f2:40:94:08:1d:bb:a0:71:47:f6:
                    55:27:17:d6:06:ae:81:76:92:ba:34:f2:85:24:ed:
                    63:d9:47:be:87:7f:92:34:d4:4f:7c:b2:d8:80:40:
                    c7:bf:48:dc:fe:29:be:04:71:c7:62:be:a0:e2:00:
                    17:04:37:5d:c6:86:b1:6a:7c:47:7a:a2:7f:7a:0f:
                    c9:18:38:25:23:73:e6:74:f5:14:3a:6d:76:76:1c:
                    74:7e:9b:4e:66:bc:c2:b7:f3:6c:70:5e:9d:e3:d1:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:71:06:CC:36:BE:73:D2:99:F0:45:4E:E6:69:F4:EC:1D:62:63
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.126.0/24
    Signature Algorithm: sha256WithRSAEncryption
         7f:02:fb:26:d6:7a:bd:3a:a8:1e:38:b0:17:aa:c8:d1:c9:82:
         91:aa:57:d1:43:7d:19:52:2f:d0:13:32:b9:47:72:a9:5a:06:
         00:1d:bc:cc:bf:f3:3c:9c:38:d1:1c:ea:b9:ae:ca:ee:85:64:
         4d:a0:4a:b3:9d:9a:78:1e:3c:cd:da:53:19:8b:19:32:02:be:
         80:7b:71:f5:f4:90:5c:5f:0e:e0:61:d3:6d:d3:96:ef:85:2b:
         20:2b:9c:85:39:61:7e:af:23:e6:01:72:c8:8e:45:5d:a3:2a:
         6a:10:58:f8:22:4b:45:d0:67:fc:cf:18:5f:43:4b:d9:33:4f:
         49:a3:5c:c1:82:4c:1e:e6:44:a9:00:37:62:8e:2e:a9:34:e1:
         db:e8:b3:f9:c2:9d:6c:36:dc:97:d0:28:35:17:0a:cf:c1:ba:
         db:e6:16:0e:b3:ab:9c:e9:fa:0c:97:95:e1:a8:58:50:91:2d:
         4e:be:64:aa:b5:b1:f0:26:7e:06:c3:7c:fa:79:26:31:7a:53:
         47:b7:53:ed:6a:6c:54:09:53:a8:ed:13:df:6b:e9:9e:39:e2:
         8d:40:69:b3:3e:65:e4:f7:76:f9:35:c4:87:c3:85:0b:19:99:
         75:b1:fb:43:57:ae:bf:6e:21:1b:b7:77:33:d4:a5:61:77:3f:
         26:e1:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:17:59 2025 by rpki-client