
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
File: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (raw, json)
Hash identifier: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=
Subject key identifier: 15:DC:FA:64:22:8E:66:92:3F:10:8A:90:CD:02:07:17:83:FA:B6:B3
Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5
Certificate serial: 582D8080E8B43B1616F0F85B04B4D9DF82AD391A
Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
Signing time: Fri 25 Apr 2025 14:00:02 +0000
ROA not before: Fri 25 Apr 2025 13:55:02 +0000
ROA not after: Fri 24 Apr 2026 14:00:02 +0000
asID: 147143
IP address blocks: 103.176.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl
rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 14:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2d:80:80:e8:b4:3b:16:16:f0:f8:5b:04:b4:d9:df:82:ad:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5
Validity
Not Before: Apr 25 13:55:02 2025 GMT
Not After : Apr 24 14:00:02 2026 GMT
Subject: CN=15DCFA64228E66923F108A90CD02071783FAB6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:29:f8:4e:c2:f0:fe:cb:70:47:4f:40:6d:
95:b1:a2:15:22:63:b2:0b:55:44:6f:75:7b:0e:b4:
42:56:26:42:58:07:7a:4e:4d:fc:05:5b:b6:bf:41:
bf:3e:fa:86:40:40:6e:64:0b:a3:e9:76:75:fc:6f:
af:7d:26:e8:77:ae:d0:c9:73:de:e8:f5:b2:3a:bb:
5b:36:b1:1b:0c:1f:00:2a:4d:ca:74:56:f0:c5:eb:
3f:35:99:03:e9:46:9c:9c:5e:e7:a0:71:64:1e:8c:
c0:a7:43:33:4b:8f:a2:25:cb:07:0d:9f:15:59:da:
91:31:05:87:7a:2c:8a:66:77:8f:cb:4c:bf:ea:82:
2f:47:2c:19:3e:ca:35:23:b3:ae:1b:72:77:3f:9d:
5c:e8:b2:c4:bc:02:ba:f6:ef:11:bd:3c:b0:5a:d2:
36:f4:0f:5d:2a:eb:23:03:32:8e:e5:0e:c8:24:32:
37:51:6e:41:41:97:be:ed:ba:60:b0:61:5b:10:cf:
d6:37:4b:bc:47:8b:99:67:da:6d:fe:0e:69:45:6e:
f7:10:c4:6b:f0:b9:f3:7a:f1:8f:49:46:5f:a5:1c:
f3:a3:27:b5:00:ee:d6:90:92:0a:5b:7a:47:1a:84:
1e:13:57:4c:7b:a9:63:7e:e4:c2:ad:33:ee:cc:c8:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:FA:64:22:8E:66:92:3F:10:8A:90:CD:02:07:17:83:FA:B6:B3
X509v3 Authority Key Identifier:
keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.252.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f7:77:33:21:f8:70:67:74:a4:b7:6c:fd:ea:9e:4a:8b:7a:
11:8d:db:78:c3:6a:b3:e9:6c:dd:d2:88:9d:82:a9:ba:be:57:
6c:a3:e4:bf:bb:19:79:da:ae:8b:92:a2:4c:5f:1d:27:0a:b0:
07:64:89:dc:69:36:ee:0d:03:8c:3d:94:ff:02:6e:5f:b6:ff:
73:dc:cf:67:c1:77:20:89:02:6f:5d:90:df:e6:8f:00:73:1d:
83:70:97:f1:9d:50:a3:92:e0:76:ab:d1:48:ad:d1:a0:92:b0:
29:31:67:bc:bf:df:44:91:74:38:bc:05:fc:44:23:12:05:54:
94:af:97:55:d0:17:fd:6d:0c:e5:4c:e5:3d:5f:40:ab:1b:9e:
a0:8e:9b:43:b6:2b:44:e4:f7:e7:55:9a:9c:c1:ed:94:aa:4c:
53:58:4d:6e:47:77:57:72:7a:32:3a:50:9c:22:90:51:3b:25:
85:44:0d:45:22:9e:a9:fb:f3:86:fb:4f:76:c9:cc:5e:8d:8f:
59:d9:a7:24:5c:9d:59:19:aa:46:09:7c:9d:b3:28:d0:04:5f:
a3:bb:f9:47:af:d5:1d:7f:cb:d0:43:9b:b9:eb:57:78:a6:2e:
99:b7:6d:dd:b2:06:c5:aa:31:0f:ec:74:22:f2:fc:57:2b:de:
35:14:d0:21
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWC2AgOi0OxYW8PhbBLTZ34KtORowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG
MTU2MDRENTAeFw0yNTA0MjUxMzU1MDJaFw0yNjA0MjQxNDAwMDJaMDMxMTAvBgNV
BAMTKDE1RENGQTY0MjI4RTY2OTIzRjEwOEE5MENEMDIwNzE3ODNGQUI2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPSn4TsLw/stwR09AbZWxohUi
Y7ILVURvdXsOtEJWJkJYB3pOTfwFW7a/Qb8++oZAQG5kC6PpdnX8b699Juh3rtDJ
c97o9bI6u1s2sRsMHwAqTcp0VvDF6z81mQPpRpycXuegcWQejMCnQzNLj6IlywcN
nxVZ2pExBYd6LIpmd4/LTL/qgi9HLBk+yjUjs64bcnc/nVzossS8Arr27xG9PLBa
0jb0D10q6yMDMo7lDsgkMjdRbkFBl77tumCwYVsQz9Y3S7xHi5ln2m3+DmlFbvcQ
xGvwufN68Y9JRl+lHPOjJ7UA7taQkgpbekcahB4TV0x7qWN+5MKtM+7MyEWHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUFdz6ZCKOZpI/EIqQzQIHF4P6trMwHwYDVR0j
BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx
QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2
MDRENS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5ZmZiNDNiLWY4YjUtNGYxZi05
YjhmLTViMDJkZGJiNmZjZi8wLzMxMzAzMzJlMzEzNzM2MmUzMjM1MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczMTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsPwwDQYJ
KoZIhvcNAQELBQADggEBAAn3dzMh+HBndKS3bP3qnkqLehGN23jDarPpbN3SiJ2C
qbq+V2yj5L+7GXnarouSokxfHScKsAdkidxpNu4NA4w9lP8Cbl+2/3Pcz2fBdyCJ
Am9dkN/mjwBzHYNwl/GdUKOS4Har0Uit0aCSsCkxZ7y/30SRdDi8BfxEIxIFVJSv
l1XQF/1tDOVM5T1fQKsbnqCOm0O2K0Tk9+dVmpzB7ZSqTFNYTW5Hd1dyejI6UJwi
kFE7JYVEDUUinqn784b7T3bJzF6Nj1nZpyRcnVkZqkYJfJ2zKNAEX6O7+Uev1R1/
y9BDm7nrV3imLpm3bd2yBsWqMQ/sdCLy/Fcr3jUU0CE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:07 2025 by rpki-client