
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa
File: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (raw, json)
Hash identifier: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=
Subject key identifier: 06:3D:E3:D5:F4:12:67:AB:AB:C8:D0:52:3D:7B:00:45:60:1A:8D:ED
Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
Certificate serial: 48D3E897F8CF61A8F9480CBFBCDFAFC12F387650
Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa
Signing time: Mon 02 Jun 2025 02:03:42 +0000
ROA not before: Mon 02 Jun 2025 01:58:42 +0000
ROA not after: Mon 01 Jun 2026 02:03:42 +0000
asID: 139435
IP address blocks: 103.144.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl
rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 21:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d3:e8:97:f8:cf:61:a8:f9:48:0c:bf:bc:df:af:c1:2f:38:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
Validity
Not Before: Jun 2 01:58:42 2025 GMT
Not After : Jun 1 02:03:42 2026 GMT
Subject: CN=063DE3D5F41267ABABC8D0523D7B0045601A8DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:9e:ea:12:85:75:5a:95:73:78:24:46:18:
39:1f:10:9b:63:45:b2:ed:22:c5:94:6f:6b:8c:10:
fb:a2:9f:9a:2d:b3:75:0e:a9:4c:69:92:c8:bc:3a:
5f:d4:d4:95:b0:d5:42:c8:26:8c:01:a5:7b:41:d7:
73:b6:e9:eb:93:96:63:ca:4d:f5:d3:f0:5f:2f:d3:
eb:b7:8d:5b:de:56:2f:30:ee:53:1f:a6:af:9b:91:
34:c6:a0:a4:44:cc:6c:d9:30:dd:a9:67:c2:2b:10:
23:df:4c:d6:e2:a2:ca:e5:30:f9:d1:1b:77:92:8c:
ac:26:8c:c2:4d:67:68:67:fb:62:2e:8f:78:46:05:
f9:a9:ee:b9:dc:61:af:9d:97:36:78:de:9b:39:64:
11:89:14:39:36:57:45:45:c9:f6:4c:2a:01:4f:93:
f1:dc:04:45:5f:08:b7:82:1c:b6:cb:57:59:a3:ae:
79:37:e5:5a:79:90:e8:e1:7f:32:9a:45:7d:d8:42:
3b:a3:db:3e:5a:b9:3c:71:35:8d:45:38:68:49:04:
97:0c:6c:e5:69:64:a1:0e:0c:1c:3e:ce:cd:04:59:
75:d0:18:23:36:38:20:31:6a:f2:40:81:6a:01:fa:
78:b6:61:31:a0:c8:b8:03:02:9b:74:27:f3:08:e1:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:E3:D5:F4:12:67:AB:AB:C8:D0:52:3D:7B:00:45:60:1A:8D:ED
X509v3 Authority Key Identifier:
keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e5:bb:e3:e1:f4:55:84:c7:27:d5:2f:af:99:fc:f6:b1:7b:
69:74:66:be:92:a8:b5:b2:7b:a3:48:f4:d7:dd:d4:b6:92:b9:
e5:69:d2:35:f2:0d:58:b6:39:1e:1d:2b:bc:72:39:18:d5:f7:
19:c4:c8:a9:8d:b6:0b:2c:81:93:b9:3c:9e:27:53:e1:92:88:
ee:a5:21:bf:dd:1a:64:99:30:ed:6e:91:e7:f0:57:a2:68:be:
cf:5f:db:f3:66:11:63:ad:93:c0:cd:b9:4e:9c:16:ad:3d:94:
d9:16:de:55:1e:3c:3d:c2:18:43:e8:e1:87:93:c4:a2:2a:52:
2e:4d:7d:1f:41:d7:09:8b:20:ec:40:17:de:ce:60:92:cf:31:
61:7e:22:bc:13:f6:11:28:c0:ff:fb:7e:a3:cc:db:8d:2b:0a:
6d:bb:9d:94:6b:4f:28:6f:8d:41:50:d0:30:d8:a2:dc:64:31:
49:e8:e5:a0:87:a0:5f:16:4b:dd:0e:5d:7f:05:f4:23:31:b9:
97:13:7a:c4:30:24:6c:69:d1:4a:ba:75:23:31:86:e1:31:de:
b9:20:66:fa:36:74:48:61:ad:22:3e:e1:a4:9e:b5:53:11:68:
94:3b:fe:da:e9:89:8a:ce:c8:d3:62:83:6c:da:e6:ac:01:b0:
b2:d5:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:57 2025 by rpki-client