
$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233332e302f32342d3234203d3e203634333032.roa
File: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=
Subject key identifier: 04:E4:03:F2:3F:92:21:CE:FB:36:4A:E6:40:BD:84:CE:C9:F3:6B:FF
Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial: 60406F343EE4711000878C28F5C87E059149DBFF
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233332e302f32342d3234203d3e203634333032.roa
Signing time: Sat 06 Sep 2025 04:02:27 +0000
ROA not before: Sat 06 Sep 2025 03:57:27 +0000
ROA not after: Sat 05 Sep 2026 04:02:27 +0000
asID: 64302
IP address blocks: 103.78.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 15:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:40:6f:34:3e:e4:71:10:00:87:8c:28:f5:c8:7e:05:91:49:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Validity
Not Before: Sep 6 03:57:27 2025 GMT
Not After : Sep 5 04:02:27 2026 GMT
Subject: CN=04E403F23F9221CEFB364AE640BD84CEC9F36BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:48:c6:a0:74:ab:e7:42:6d:4a:8e:d6:1d:
32:8b:64:e1:9b:95:cc:59:39:73:23:d3:8e:58:d0:
a8:7c:74:e4:94:64:31:48:09:df:9c:0a:d0:c8:e0:
b0:ea:17:2c:99:b3:41:8d:99:78:74:c7:04:be:c0:
f2:46:76:74:df:05:ea:34:a1:56:8e:9d:e2:86:9d:
b8:1b:4c:e4:1a:d0:28:9e:bb:24:9c:b3:dc:94:db:
d3:bb:77:8f:96:38:34:0d:9f:1d:c7:9f:ea:53:c2:
f0:06:59:9c:81:a0:ec:ae:2e:dc:a9:75:01:4c:7f:
e5:5b:7d:2d:8c:5d:b0:d4:f5:c6:59:fc:43:f8:45:
58:3d:98:30:cb:20:30:7e:59:da:3f:38:6f:27:df:
b9:6c:b3:3e:8e:2e:b8:97:51:03:8f:b3:e1:83:89:
d8:88:0f:f2:c0:8c:e0:d1:64:cf:4f:28:f2:ae:20:
d2:f0:50:88:70:58:8d:ce:d0:ce:95:8b:64:59:14:
c9:49:bf:0d:cd:91:b0:08:48:21:8f:01:5b:d7:15:
b8:6e:e6:48:72:6f:ee:bc:95:8a:d4:68:b8:d5:e6:
d0:38:74:25:38:9d:4b:bb:83:4f:11:dd:44:b9:f8:
9b:eb:32:5b:0a:55:ac:71:be:98:88:b3:41:d3:c9:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:03:F2:3F:92:21:CE:FB:36:4A:E6:40:BD:84:CE:C9:F3:6B:FF
X509v3 Authority Key Identifier:
keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233332e302f32342d3234203d3e203634333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.233.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f7:f6:88:e1:ee:1b:a5:44:c4:ea:3e:e7:d3:2c:cb:7b:d7:
97:e9:0d:bb:e3:a1:5e:a7:ed:f4:c5:6c:12:8f:42:52:79:6c:
30:df:e6:e2:ee:94:43:4e:52:ae:ec:ab:6e:02:ba:b3:e0:18:
48:b7:76:20:13:6f:00:ea:bf:5d:bc:b6:ee:c4:e5:07:1e:8b:
5e:91:8f:6b:7a:8a:d5:f9:23:ac:de:3e:3d:4f:45:99:3d:33:
ae:d6:a0:e0:d4:5f:d9:ad:54:de:89:69:a6:a9:47:e5:c8:7a:
a5:16:08:e2:e3:5b:ff:58:9e:c6:54:93:79:14:e5:05:34:94:
81:f0:c1:ec:fb:ec:81:f3:bd:6c:da:61:74:83:80:6a:3c:d3:
87:d4:ad:68:6a:66:1e:e9:3f:4e:14:25:e3:f9:e6:44:eb:98:
b3:75:88:72:e7:ae:3c:4c:1b:dd:52:2f:42:35:7b:9f:79:5d:
83:5d:ed:fe:1d:c3:40:37:84:66:fc:c7:9c:8c:b8:c7:68:f2:
64:30:bd:35:ea:b5:03:fc:68:c1:85:b5:f2:38:a9:a5:f1:f5:
1f:29:65:3f:7b:7d:0e:04:0e:e7:d9:72:fd:b1:7a:0c:73:a6:
ee:05:ed:1d:76:40:8d:f9:a4:71:9d:ab:dd:bc:04:7a:b1:65:
65:56:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:31:39 2025 by rpki-client