
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
File: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=
Subject key identifier: 37:C1:06:E4:69:C3:A9:BD:35:41:B8:D3:59:CD:F8:C4:21:F5:3E:2E
Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558
Certificate serial: 614B919B58466ED65B13935BEA322A645222E689
Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
Signing time: Mon 14 Apr 2025 09:01:08 +0000
ROA not before: Mon 14 Apr 2025 08:56:08 +0000
ROA not after: Mon 13 Apr 2026 09:01:08 +0000
asID: 4800
IP address blocks: 103.190.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl
rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Nov 2025 22:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4b:91:9b:58:46:6e:d6:5b:13:93:5b:ea:32:2a:64:52:22:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558
Validity
Not Before: Apr 14 08:56:08 2025 GMT
Not After : Apr 13 09:01:08 2026 GMT
Subject: CN=37C106E469C3A9BD3541B8D359CDF8C421F53E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:15:45:96:6b:92:c6:6b:67:5b:40:81:c2:
52:85:27:8f:8e:22:ad:04:5f:c4:3b:b6:da:a0:89:
71:16:a9:44:4e:b2:0c:f9:69:60:2b:55:b4:77:51:
87:53:c4:69:3f:56:cf:95:dc:b4:9d:84:d4:76:f9:
23:08:46:27:00:77:e3:9a:3d:af:97:51:33:63:05:
c0:fd:4a:18:85:55:ea:26:a8:2f:27:4a:fe:49:4c:
d6:83:df:f5:f1:8b:09:40:e1:ba:23:76:61:e0:e3:
e8:4b:dd:47:0c:fe:13:ca:8c:d5:3f:59:97:e2:4f:
31:b4:49:86:04:73:91:6d:d9:6b:d5:e5:17:92:69:
a2:fe:e9:b0:a6:e1:01:7b:ce:2e:66:18:8b:40:3b:
0c:71:8b:99:17:a0:31:f6:20:61:29:03:c2:39:e4:
55:92:f7:50:ef:2c:82:76:c6:ac:a4:c3:9c:d7:77:
f8:bf:af:91:a2:c2:84:72:d5:07:b0:c0:81:c4:18:
44:19:a1:81:4e:0d:9f:b9:f6:ab:e3:f6:23:5f:a1:
e7:4b:b5:77:82:1d:1d:43:fb:a2:b2:c7:07:85:26:
2a:12:9d:75:0d:f4:c6:35:48:92:aa:f7:e2:41:95:
31:b4:70:a7:32:a4:86:ac:f9:ef:8e:39:53:b3:3d:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:06:E4:69:C3:A9:BD:35:41:B8:D3:59:CD:F8:C4:21:F5:3E:2E
X509v3 Authority Key Identifier:
keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.76.0/23
Signature Algorithm: sha256WithRSAEncryption
29:1a:c1:1e:b1:e1:8e:43:1d:d5:db:2a:a7:07:7c:28:d2:ab:
48:8c:0d:dc:3a:b9:e2:34:d5:0e:92:00:53:9d:72:52:2b:b9:
5e:86:16:3c:1f:e6:81:82:ed:78:e1:cd:ba:8d:2c:22:71:24:
07:68:79:ff:27:03:41:66:ab:83:d5:fd:a1:ab:b7:80:dd:e3:
41:e7:b4:d3:bd:2c:39:1b:dc:eb:3f:9b:5c:12:d1:2c:b4:42:
52:a1:65:75:55:e7:58:79:fc:73:1f:72:00:0f:ba:9b:6a:cd:
94:77:ef:32:5a:c3:48:10:ef:93:86:ec:54:72:fb:37:34:33:
9d:eb:d0:19:b5:2f:84:97:7a:87:3a:0e:ec:8a:49:ee:07:9e:
17:0f:ae:cd:a4:6f:05:ef:78:2e:4b:70:76:f8:d3:8f:e2:34:
6b:46:53:98:1c:e1:32:81:36:c8:44:d4:46:26:44:71:98:c2:
45:e3:0c:e6:71:7f:89:ae:a8:10:76:f0:8a:d2:31:44:3b:a8:
e6:59:7a:94:c0:c9:25:4a:61:de:0b:0c:aa:49:3f:2e:35:76:
d9:b7:91:64:2a:ec:61:ec:52:3c:1c:60:33:f3:53:12:59:d1:
f0:9f:23:39:3f:b1:a6:6f:66:93:a7:2c:18:e3:26:4f:09:ea:
88:df:50:e0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYUuRm1hGbtZbE5Nb6jIqZFIi5okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5
QjE0NzU1ODAeFw0yNTA0MTQwODU2MDhaFw0yNjA0MTMwOTAxMDhaMDMxMTAvBgNV
BAMTKDM3QzEwNkU0NjlDM0E5QkQzNTQxQjhEMzU5Q0RGOEM0MjFGNTNFMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GhVFlmuSxmtnW0CBwlKFJ4+O
Iq0EX8Q7ttqgiXEWqUROsgz5aWArVbR3UYdTxGk/Vs+V3LSdhNR2+SMIRicAd+Oa
Pa+XUTNjBcD9ShiFVeomqC8nSv5JTNaD3/XxiwlA4bojdmHg4+hL3UcM/hPKjNU/
WZfiTzG0SYYEc5Ft2WvV5ReSaaL+6bCm4QF7zi5mGItAOwxxi5kXoDH2IGEpA8I5
5FWS91DvLIJ2xqykw5zXd/i/r5GiwoRy1QewwIHEGEQZoYFODZ+59qvj9iNfoedL
tXeCHR1D+6KyxweFJioSnXUN9MY1SJKq9+JBlTG0cKcypIas+e+OOVOzPRRLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUN8EG5GnDqb01QbjTWc34xCH1Pi4wHwYDVR0j
BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5
NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0
NzU1OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMmNhY2NmLTMyN2UtNDJiZC05
YjMxLTBhODczZDJlNjY5Mi8wLzMxMzAzMzJlMzEzOTMwMmUzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvkwwDQYJKoZIhvcN
AQELBQADggEBACkawR6x4Y5DHdXbKqcHfCjSq0iMDdw6ueI01Q6SAFOdclIruV6G
Fjwf5oGC7XjhzbqNLCJxJAdoef8nA0Fmq4PV/aGrt4Dd40HntNO9LDkb3Os/m1wS
0Sy0QlKhZXVV51h5/HMfcgAPuptqzZR37zJaw0gQ75OG7FRy+zc0M53r0Bm1L4SX
eoc6DuyKSe4HnhcPrs2kbwXveC5LcHb404/iNGtGU5gc4TKBNshE1EYmRHGYwkXj
DOZxf4muqBB28IrSMUQ7qOZZepTAySVKYd4LDKpJPy41dtm3kWQq7GHsUjwcYDPz
UxJZ0fCfIzk/saZvZpOnLBjjJk8J6ojfUOA=
-----END CERTIFICATE-----
Generated at Mon Nov 17 16:57:58 2025 by rpki-client