
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa
File:                     3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (raw, json)
Hash identifier:          WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=
Subject key identifier:   03:B6:2A:1D:9E:59:9E:7C:5F:7A:4C:BC:F8:E4:A5:93:20:01:BF:2B
Certificate issuer:       /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
Certificate serial:       0FA1BB8D757D7A104FEBB5BFC4FA60872E1DA5D0
Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa
Signing time:             Thu 30 Oct 2025 09:00:00 +0000
ROA not before:           Thu 30 Oct 2025 08:55:00 +0000
ROA not after:            Thu 29 Oct 2026 09:00:00 +0000
asID:                     141934
IP address blocks:        103.166.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl
                          rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 00:59:42 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a1:bb:8d:75:7d:7a:10:4f:eb:b5:bf:c4:fa:60:87:2e:1d:a5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
        Validity
            Not Before: Oct 30 08:55:00 2025 GMT
            Not After : Oct 29 09:00:00 2026 GMT
        Subject: CN=03B62A1D9E599E7C5F7A4CBCF8E4A5932001BF2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:2b:6c:6e:15:72:b9:ae:33:e6:a1:7f:51:
                    a7:75:c0:87:b0:a0:46:25:09:3f:64:b7:fc:f2:5a:
                    1f:cc:ea:bb:94:6e:fc:f9:74:95:4b:cd:cc:f4:79:
                    cc:01:f8:ca:29:b9:4e:5b:32:cc:08:c0:f7:7a:ac:
                    ef:41:93:11:2f:bc:56:63:4f:5c:81:a9:61:38:1b:
                    4d:43:53:4b:dd:a2:c1:b1:8d:2d:d5:67:2a:67:0e:
                    ee:72:ed:be:2c:48:69:06:8e:ff:29:76:40:d5:86:
                    46:5f:73:1f:33:e6:80:1e:32:d3:f9:71:51:a9:6d:
                    ea:07:b4:f6:05:73:dc:8c:05:3d:dc:8d:7f:ec:e9:
                    90:39:19:ce:73:25:08:51:18:bb:1b:73:3e:08:82:
                    a1:e0:77:a7:5b:a6:c6:e4:d4:d2:a9:2e:8f:6b:07:
                    37:2e:e5:ee:da:b6:c8:06:92:50:9e:99:ed:b8:94:
                    f6:f4:c3:77:9b:e6:cd:b3:29:10:db:fe:54:3c:d2:
                    9f:c4:81:1a:89:ee:73:91:8c:8f:7c:d6:78:2a:9e:
                    59:19:31:ca:4c:40:b9:bd:ef:29:27:4f:99:d5:4d:
                    84:09:c5:42:b7:83:5a:9b:c2:cf:b8:5d:14:8c:9a:
                    f9:cf:5f:2e:e8:a9:10:b3:81:76:7f:fe:39:22:59:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:2A:1D:9E:59:9E:7C:5F:7A:4C:BC:F8:E4:A5:93:20:01:BF:2B
            X509v3 Authority Key Identifier:
                keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.26.0/24
    Signature Algorithm: sha256WithRSAEncryption
         c8:04:88:5a:36:ff:1a:bb:7b:97:e3:a6:7e:0e:fa:70:f3:bc:
         9e:b5:6d:3a:80:30:d3:51:f1:37:df:5c:5a:7f:d9:67:d8:3b:
         4c:2b:ca:88:6e:47:4c:5e:cc:0c:47:bf:88:57:1d:f9:29:0d:
         91:3e:21:e5:df:59:83:59:5d:de:f3:79:00:75:1e:ba:e3:0c:
         73:60:e0:a9:9f:61:ab:80:7b:23:0b:5e:88:b7:0a:76:a3:01:
         32:62:23:bd:0e:60:5c:3e:b8:9b:af:b8:45:74:f1:42:5a:9d:
         d1:e5:93:e6:cf:2c:84:f5:3d:39:fb:8f:41:34:20:71:a3:80:
         57:7d:f3:36:9e:77:ee:27:08:7d:1d:5a:13:c5:fd:f6:34:be:
         8b:2a:7e:63:8b:5f:4a:c5:d6:ba:82:6f:9c:7a:95:e5:7e:28:
         87:ad:59:c1:48:f1:8f:b2:8f:f2:fa:57:68:36:4f:a4:46:f9:
         cf:c3:74:2c:2d:b0:37:a7:8f:47:0c:88:aa:c7:4f:5c:81:74:
         7f:be:6d:c1:cf:9d:73:87:a0:01:47:01:f7:1e:81:bf:0d:f3:
         56:b8:96:fb:2f:2e:e3:0d:81:d0:28:55:3a:76:1a:25:ff:f6:
         56:c2:df:d6:95:70:e5:06:73:a7:f9:43:e2:50:b7:71:cb:8f:
         b9:68:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:41:06 2025 by rpki-client