
$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
File: 3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier: iXT6UN+/y7TpwDVLtWSqY1anfK2nC6SOVMT2pIsEPoE=
Subject key identifier: 38:05:8F:DD:2D:9B:9E:C6:51:40:F0:F8:DD:73:10:52:C3:06:60:4C
Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial: 1231830F155A40757A00E5B96EA2AB4A50870CF6
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
Signing time: Wed 06 Aug 2025 18:00:02 +0000
ROA not before: Wed 06 Aug 2025 17:55:02 +0000
ROA not after: Wed 05 Aug 2026 18:00:02 +0000
asID: 137329
IP address blocks: 103.106.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 18:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:31:83:0f:15:5a:40:75:7a:00:e5:b9:6e:a2:ab:4a:50:87:0c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
Validity
Not Before: Aug 6 17:55:02 2025 GMT
Not After : Aug 5 18:00:02 2026 GMT
Subject: CN=38058FDD2D9B9EC65140F0F8DD731052C306604C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:27:7d:28:49:1e:f3:8f:50:0b:65:2a:7d:
72:f5:bf:a5:62:00:01:24:5c:9a:5a:34:b7:37:39:
65:4a:12:36:16:11:a9:0f:75:c2:8c:38:fd:96:e4:
7f:93:8e:b8:a2:da:0d:ec:0f:ad:4f:b3:21:50:cc:
f5:7b:c9:dc:26:07:48:2b:39:49:7d:69:0b:a7:8c:
c1:62:4c:40:a4:a5:77:26:44:bb:e8:45:2c:04:2d:
d6:8c:df:ec:a5:f3:d3:fd:57:eb:35:6b:c7:24:d8:
a1:23:20:c0:d8:5e:73:ad:b6:f0:1c:63:a1:32:e2:
0d:95:c7:0d:26:2c:00:23:06:49:a8:2e:3e:d8:88:
09:5d:6e:08:8d:5c:0a:c2:a6:91:74:78:90:19:2b:
97:47:6f:e6:47:e0:0a:05:8f:79:01:8e:b7:81:67:
f7:b4:16:21:f3:41:24:98:b2:c8:c8:88:6f:6a:1e:
b3:ae:ad:8f:ba:9d:c0:9c:c7:fa:03:ae:f7:3c:78:
cf:c4:46:9d:54:3d:63:31:b5:39:6a:52:90:a3:c1:
40:12:c1:44:63:3d:2d:2d:ad:91:48:9a:a9:f1:ae:
1c:33:ad:ef:ec:a2:9a:c5:f8:47:aa:1c:ea:c6:54:
f9:91:a9:bd:36:67:bd:2c:f1:0e:ff:2d:ce:60:45:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:05:8F:DD:2D:9B:9E:C6:51:40:F0:F8:DD:73:10:52:C3:06:60:4C
X509v3 Authority Key Identifier:
keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.216.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:20:db:40:e2:4f:b6:1c:82:e6:cd:f3:ff:be:68:fa:14:ea:
cd:8b:24:88:39:21:3c:1b:cc:1c:2f:38:0a:92:78:ff:2b:2f:
7f:83:6f:d1:3b:a6:7e:83:a2:50:7a:7b:63:10:f1:db:f6:fd:
f4:d0:40:cb:b5:84:77:6b:d1:92:3c:a4:08:2a:ca:11:36:29:
9a:42:1e:3e:b9:f0:3f:61:a8:42:7d:d4:fc:02:e8:d9:a4:56:
da:8a:f3:c2:19:6c:67:1b:8f:2a:46:44:0f:59:e0:05:3b:c7:
e4:82:70:02:8b:3a:d0:47:5e:c5:23:6f:df:2b:5f:97:91:6a:
5e:5c:5e:2e:c0:eb:88:3f:32:80:a5:ef:62:89:f2:e5:21:d4:
d9:c7:91:44:ae:95:f0:89:4a:8c:25:58:3e:2c:3e:3e:9a:56:
fc:d7:a4:e2:03:ad:f6:d2:cd:8c:b6:9a:ed:b8:4f:e3:50:d0:
95:4e:91:aa:ee:e1:47:f2:15:6f:6f:0b:0d:90:03:ba:9d:b2:
5a:4c:8d:4e:04:ee:10:ee:9e:85:62:f7:01:7d:de:95:45:05:
84:75:c1:83:6c:d9:8a:21:8c:f7:d6:9f:1f:f3:80:e3:7c:95:
fb:ac:97:15:3a:22:2f:73:06:b4:7b:71:84:f8:a9:3c:14:ba:
07:d7:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:25 2025 by rpki-client