
$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
File: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (raw, json)
Hash identifier: 50nF5RNG6ulp5/eIfTDrLrdRKQqI76egmRTbXjqjcB8=
Subject key identifier: 86:3C:33:46:D2:1C:BA:D3:83:E0:E3:2C:ED:CF:C0:AD:33:1C:45:E6
Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Certificate serial: 15E6E5E60A02FCC5DB892B898FBF925253DB0874
Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
Signing time: Sat 01 Feb 2025 03:00:00 +0000
ROA not before: Sat 01 Feb 2025 02:55:00 +0000
ROA not after: Sat 31 Jan 2026 03:00:00 +0000
asID: 150921
IP address blocks: 103.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e6:e5:e6:0a:02:fc:c5:db:89:2b:89:8f:bf:92:52:53:db:08:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Validity
Not Before: Feb 1 02:55:00 2025 GMT
Not After : Jan 31 03:00:00 2026 GMT
Subject: CN=863C3346D21CBAD383E0E32CEDCFC0AD331C45E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:23:fe:27:eb:2f:ba:72:c6:82:75:c9:17:
52:9c:1a:1a:00:d1:ee:1d:73:05:86:5e:2a:16:73:
3c:1b:d1:1c:43:67:d1:04:20:dc:3c:ac:71:ba:e6:
3e:42:50:e7:cb:68:ea:e6:4e:6f:61:68:13:e5:4b:
e5:c8:6d:98:3a:bb:f6:6c:9f:02:ea:73:14:15:58:
84:5a:d3:c0:f9:be:29:74:88:22:76:c6:31:fc:00:
fe:c1:a2:90:e6:7e:e9:84:57:70:e7:cd:aa:ee:9f:
e5:53:5f:41:9b:49:3e:d6:97:2e:ec:d7:32:37:fb:
90:54:14:d2:3c:ba:80:d9:ff:86:d7:b3:0e:31:1b:
a9:0a:d3:8c:c8:fe:eb:95:13:25:87:7c:d2:15:6a:
96:b9:12:f2:05:f7:82:2a:6c:e9:c2:78:5d:11:5b:
22:c6:7f:5c:d1:1b:0a:91:11:27:d0:9f:3f:fe:b5:
22:0c:44:bd:4b:1b:86:b0:83:a5:f4:38:6e:39:c0:
e8:6d:24:3d:a1:ed:cd:cb:6a:e1:97:7f:eb:0f:1f:
7c:eb:45:27:1f:4f:d9:5b:cc:8f:1a:82:f4:a4:e5:
42:ed:d4:ae:36:10:14:63:31:55:c8:24:61:14:34:
df:66:bf:6b:2f:07:90:ee:e3:87:75:5e:5b:c1:8b:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:33:46:D2:1C:BA:D3:83:E0:E3:2C:ED:CF:C0:AD:33:1C:45:E6
X509v3 Authority Key Identifier:
keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
04:39:b6:a2:5f:29:f0:88:dd:33:9c:35:d5:d8:b1:97:30:93:
c6:5a:60:9c:2e:9b:07:a1:4e:df:d8:79:b5:14:e4:26:47:52:
c3:39:ef:ba:db:25:c0:af:67:f1:4c:23:0c:6d:20:df:c0:f7:
b4:b5:3f:85:2a:a1:c0:8c:d1:d6:62:ce:ab:ba:5a:c6:2f:90:
82:b6:09:e4:0f:af:fe:7f:c0:cc:d8:01:22:e9:44:47:54:a2:
fd:fb:02:00:43:a3:da:74:dc:0a:aa:e9:55:59:93:39:d5:9a:
50:73:ad:91:70:ea:ea:85:00:b6:2d:89:f5:51:af:a5:3a:4f:
60:91:df:46:04:d4:26:d3:0b:e4:e0:73:d1:7d:dd:ba:1f:53:
9e:fb:32:b2:2b:37:89:72:31:9f:0c:12:c8:ac:af:0e:68:08:
d4:2f:7b:52:20:11:75:03:fd:6f:3c:47:34:b5:61:4f:3e:98:
6d:f7:62:8d:95:dc:c9:42:64:48:a8:4b:af:e7:5b:78:13:dc:
4f:ec:ec:81:b7:22:bb:e7:95:7b:4e:0c:27:f2:f6:a1:46:e3:
77:ab:64:69:5b:88:9b:16:57:f0:ef:96:2c:72:5f:0a:44:df:
4e:7e:68:a1:69:16:1e:49:3c:c3:fb:4e:bf:2f:7f:bb:8e:b7:
d6:83:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:22:38 2025 by rpki-client