
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa
File: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (raw, json)
Hash identifier: Hx5e9eX/0MDiWg+S8NREaCwOHPQ1Onm3jq45DAvThoc=
Subject key identifier: FB:90:97:65:54:F9:DA:C5:4F:53:70:6F:AC:8E:DC:32:78:33:86:C3
Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Certificate serial: 554DB6B229F24625ABA6AF0B35E5BA9EA55D8B54
Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa
Signing time: Fri 17 Oct 2025 08:00:00 +0000
ROA not before: Fri 17 Oct 2025 07:55:00 +0000
ROA not after: Fri 16 Oct 2026 08:00:00 +0000
asID: 131738
IP address blocks: 103.21.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl
rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 03:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4d:b6:b2:29:f2:46:25:ab:a6:af:0b:35:e5:ba:9e:a5:5d:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Validity
Not Before: Oct 17 07:55:00 2025 GMT
Not After : Oct 16 08:00:00 2026 GMT
Subject: CN=FB90976554F9DAC54F53706FAC8EDC32783386C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2e:f4:04:dc:e7:d0:4b:2a:3d:a1:ea:4f:a8:
a0:de:03:87:53:38:b7:40:d2:f7:73:4d:bc:62:2e:
84:e5:ac:08:e8:50:34:38:f2:8e:d8:a2:dc:31:d9:
7c:48:eb:07:f8:27:cf:bd:4e:42:06:20:b4:66:5a:
4b:36:19:69:51:da:83:62:df:35:97:7f:d5:c4:db:
78:03:6c:7d:cb:e0:38:80:35:3a:15:3b:b9:64:ff:
d5:84:2b:aa:10:f0:56:88:6b:46:d3:cf:21:6a:28:
1c:dd:9c:a5:76:27:be:12:3b:ab:be:82:21:0a:37:
03:b6:72:92:7b:1a:f5:25:97:ef:04:dd:32:31:16:
d7:6f:38:25:4e:e2:9f:b2:95:2d:c0:f7:52:67:45:
d8:3e:d7:7d:df:08:a8:54:f1:5a:72:0b:5f:00:7e:
94:e0:73:af:67:68:72:8f:c7:87:4b:e6:78:db:9e:
14:c9:32:6e:6e:6a:3f:da:82:c1:39:06:2d:cf:5f:
63:b8:a0:79:b1:d1:2d:15:91:04:39:82:43:e5:37:
4e:f5:be:12:5b:5f:3a:56:c9:0b:93:ae:63:5b:0b:
08:4d:3f:45:52:33:62:ae:1a:42:f8:a6:79:68:b4:
b0:76:4c:75:17:64:95:ef:9b:01:c1:02:a1:01:5c:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:97:65:54:F9:DA:C5:4F:53:70:6F:AC:8E:DC:32:78:33:86:C3
X509v3 Authority Key Identifier:
keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2f:46:96:e0:29:8a:00:a0:25:4d:c8:7f:ee:74:82:eb:4f:
e3:f3:ee:8c:fc:05:2a:a0:86:e1:2d:44:9f:b6:13:2b:33:47:
0c:6f:39:db:aa:77:2c:cf:8a:fd:15:5e:f3:82:76:af:c3:4f:
b4:ef:52:c6:cc:d6:ce:15:fd:d4:69:c5:af:68:de:c7:ec:fe:
cd:e0:86:28:10:4a:47:d9:d8:b7:a2:6d:35:11:d5:1b:bd:27:
a4:ad:e8:fe:c0:05:ad:11:c4:31:cd:18:d3:c0:1c:5b:4a:df:
81:3e:ce:1f:29:5e:66:3d:f4:9a:4c:9f:91:78:56:ab:68:89:
6f:ac:5c:07:c2:19:21:9d:73:64:d9:40:b0:e6:a2:69:89:d8:
7c:a5:ac:fc:d5:20:5d:3a:2f:db:95:04:12:cc:a3:56:ee:d0:
e3:4c:5a:7b:c2:b4:da:79:1e:b1:94:d8:b3:94:c5:ac:e0:3c:
4b:17:44:13:f1:1f:57:84:17:c4:93:55:26:86:40:f3:8a:98:
34:3c:59:8b:a1:e2:1a:62:55:d6:77:cc:71:87:2d:35:83:2e:
e0:82:a9:be:79:ea:31:6a:5b:69:9b:9c:06:a2:a3:43:55:66:
56:af:61:d4:27:52:1b:a5:4e:4d:3b:e5:a2:f4:a4:88:a7:8b:
de:38:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:34 2025 by rpki-client