
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa
File: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (raw, json)
Hash identifier: EL5dwlPuAnRs0Kif8+4P+OmtMjmZ41AfT1OvSsOeIrQ=
Subject key identifier: 7E:B9:C7:CB:3D:FA:B3:6F:FC:19:6B:40:10:E2:BD:E7:B9:1F:F0:CD
Certificate issuer: /CN=6E740E0191A423D6D9A0908C8B778DD2416F842E
Certificate serial: 566B2D74ADDA3CAFD113F3B75A59A288D873187D
Authority key identifier: 6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa
Signing time: Mon 02 Jun 2025 02:04:40 +0000
ROA not before: Mon 02 Jun 2025 01:59:40 +0000
ROA not after: Mon 01 Jun 2026 02:04:40 +0000
asID: 63873
IP address blocks: 103.53.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl
rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 20:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6b:2d:74:ad:da:3c:af:d1:13:f3:b7:5a:59:a2:88:d8:73:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E740E0191A423D6D9A0908C8B778DD2416F842E
Validity
Not Before: Jun 2 01:59:40 2025 GMT
Not After : Jun 1 02:04:40 2026 GMT
Subject: CN=7EB9C7CB3DFAB36FFC196B4010E2BDE7B91FF0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:66:6b:75:40:3b:f2:55:91:0a:5d:41:33:
1c:d2:f6:95:c0:72:81:2c:b7:36:fa:39:6e:89:51:
2c:ae:6f:88:08:24:e3:60:f5:aa:10:2e:28:ad:32:
0d:67:b9:10:78:6e:61:94:68:7a:ab:dd:9d:66:b6:
cf:1b:bc:10:63:13:e3:4e:46:8e:73:81:30:b9:3c:
46:1b:b9:54:82:87:92:39:1b:4f:34:23:a2:19:9b:
e1:4f:48:0e:84:ed:db:ab:cf:e2:cc:80:fe:3a:37:
36:40:26:4b:1a:01:7b:4a:53:01:06:d2:57:f3:19:
56:74:7a:75:0c:a8:c7:80:9a:63:82:10:f8:7d:ff:
ef:45:8f:1b:23:fc:19:4b:55:0e:00:07:e7:64:4f:
12:05:45:19:43:2f:22:1f:0c:12:ef:d0:4d:75:b9:
89:99:f5:36:db:3e:9a:61:58:1b:46:58:f3:0c:82:
a7:26:fa:c3:22:f8:48:d9:49:5c:f1:ae:d0:07:0a:
71:4e:d7:c1:f9:fc:d6:a0:13:7f:f6:f4:76:7a:2c:
5b:b3:cb:ef:8f:e6:63:94:80:23:3a:ba:d1:63:53:
1e:eb:4b:dd:83:6b:a5:b8:05:3a:bd:9b:67:ab:bf:
f2:ed:54:36:0b:c0:5b:0b:32:af:02:be:2e:e1:1b:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:C7:CB:3D:FA:B3:6F:FC:19:6B:40:10:E2:BD:E7:B9:1F:F0:CD
X509v3 Authority Key Identifier:
keyid:6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.53.0.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c3:b2:8e:5e:ce:e7:a4:0d:09:52:9a:3b:4d:fa:dd:83:88:
8c:43:f6:78:28:72:0d:27:57:bc:d9:7e:25:be:13:50:8e:9e:
74:f8:f2:b6:5f:11:bb:2c:9c:8a:43:db:b8:9d:31:1c:fd:89:
a3:de:49:eb:a4:10:ed:64:ba:00:e3:1e:0a:af:36:16:b0:b9:
b3:5c:e7:ff:f4:55:d1:1d:d8:e7:aa:0f:8a:19:43:51:d4:a1:
69:3e:c1:b6:3b:e9:8c:12:ab:9b:63:9a:22:74:e6:c0:af:ce:
6a:81:ac:6b:45:bd:f0:83:c1:65:6d:7e:9e:61:98:f7:b9:45:
8c:60:79:42:ae:ca:96:9c:cf:f0:d6:a9:05:b5:48:09:3a:a1:
c3:4a:8c:66:60:26:9f:c0:c5:c8:41:ac:6c:c7:2f:a6:1c:17:
2f:c0:19:68:d7:d4:60:db:82:95:43:fb:b4:f8:36:bf:46:ff:
2f:1a:29:8d:b6:da:02:fe:bf:6f:69:3f:55:64:e7:1e:bb:ff:
9a:8b:33:77:1a:22:d0:7c:67:22:fc:39:1f:ca:48:76:4d:1a:
c1:0e:90:63:05:88:ad:22:57:ff:e5:98:7b:73:85:36:94:d2:
b4:8f:8e:c3:68:4e:57:95:bd:39:d5:40:13:11:cf:42:5c:c6:
21:03:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:36 2025 by rpki-client