
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
File: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (raw, json)
Hash identifier: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=
Subject key identifier: C3:A3:88:95:D3:C3:BD:C0:BC:84:70:B8:83:3A:18:BB:A6:09:E2:B5
Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Certificate serial: 444930EF1CAE5B6D72A037E2EC1B9A25F18FF1E3
Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
Signing time: Mon 13 Oct 2025 03:04:23 +0000
ROA not before: Mon 13 Oct 2025 02:59:23 +0000
ROA not after: Mon 12 Oct 2026 03:04:23 +0000
asID: 151521
IP address blocks: 103.165.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl
rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:49:30:ef:1c:ae:5b:6d:72:a0:37:e2:ec:1b:9a:25:f1:8f:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Validity
Not Before: Oct 13 02:59:23 2025 GMT
Not After : Oct 12 03:04:23 2026 GMT
Subject: CN=C3A38895D3C3BDC0BC8470B8833A18BBA609E2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:13:90:a7:67:2c:6e:35:5f:b7:d6:77:02:
ea:53:2c:03:69:d9:2b:6f:cc:0c:1b:01:84:b9:36:
d8:d8:3c:68:04:35:79:76:2a:0e:fc:92:ea:02:d2:
cc:9b:61:a2:d0:ca:28:ee:16:dc:6a:bd:d6:55:f8:
b2:f1:57:49:dc:3c:cb:7e:bd:e3:98:30:84:82:c5:
a2:dc:b7:55:b4:16:01:43:a6:23:ce:ab:0b:54:ef:
2f:36:8b:6b:bc:50:36:53:82:1d:cb:0a:cd:e3:b4:
bf:72:e7:fb:70:3e:ca:68:50:bd:3b:49:e0:88:4b:
35:88:ca:02:c5:35:93:41:a5:6c:8b:f9:a1:9d:c2:
60:d1:75:d3:07:3b:89:f0:3e:6b:b2:69:fd:c6:1a:
53:04:8b:49:1f:2d:7f:20:81:00:18:76:13:15:a1:
ae:3a:91:47:c6:f7:a9:ce:c8:db:b3:9c:5f:d3:5f:
81:10:26:e4:85:15:7e:00:e1:17:b1:81:96:fd:1d:
12:ee:f6:d2:7e:ff:16:4e:9a:c9:d4:8b:26:f3:f0:
34:2e:d4:68:0f:51:93:7f:ba:3a:cc:ee:33:d1:23:
e3:ef:d2:e3:52:7a:f4:11:86:b9:9c:71:a7:f9:f4:
82:cf:46:0d:4e:32:73:07:ea:9c:94:e7:1c:5c:63:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:88:95:D3:C3:BD:C0:BC:84:70:B8:83:3A:18:BB:A6:09:E2:B5
X509v3 Authority Key Identifier:
keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.252.0/24
Signature Algorithm: sha256WithRSAEncryption
14:55:c8:ba:f1:a1:51:f6:ba:be:aa:7f:94:93:bf:1a:67:eb:
2d:51:68:9e:69:df:a8:ef:66:cd:3f:ad:74:cd:a0:12:19:ec:
37:b4:b9:ca:6f:f1:9e:40:d6:66:7e:cb:15:62:c8:0f:4f:a1:
05:f4:5e:e8:23:1a:7b:a3:cf:93:eb:e7:18:ff:3d:52:36:97:
2e:38:e5:a9:57:88:1d:8f:85:72:e9:10:46:bf:94:37:ee:1a:
aa:41:f0:7e:17:43:3d:3b:bc:43:99:cc:ba:ff:50:31:32:b9:
d1:ca:02:08:73:ef:ee:14:97:36:b8:72:13:3c:07:28:29:4e:
93:96:f2:a4:c0:3e:00:63:93:f4:44:5c:05:5a:88:b6:a7:f7:
4f:84:b1:1d:aa:9d:90:27:1f:e4:cc:ce:eb:4c:e1:df:15:e1:
b4:e5:cd:40:1f:e9:9f:ed:4b:53:8d:28:67:40:33:77:d4:44:
9a:eb:1e:61:40:ac:45:21:ba:c8:cc:aa:db:d3:79:b5:a9:3f:
8e:97:b9:dc:3c:44:b9:06:62:01:ce:c1:06:a4:8b:e0:17:56:
75:05:3c:26:9b:d9:c7:c5:76:fc:d4:d0:c1:75:9b:e7:be:65:
5f:13:f1:42:9a:5a:5d:04:63:c9:65:39:b7:07:c4:79:0e:ec:
eb:b6:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:07 2025 by rpki-client