
$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
File: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=
Subject key identifier: D2:1B:BF:73:85:E3:28:81:F7:4B:88:C8:94:0E:D7:A6:5A:F8:77:94
Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial: 6619B57DD77EE5BB0FF97BB5E1847869A961661B
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
Signing time: Tue 13 May 2025 11:00:01 +0000
ROA not before: Tue 13 May 2025 10:55:01 +0000
ROA not after: Tue 12 May 2026 11:00:01 +0000
asID: 9341
IP address blocks: 103.215.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 15:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:19:b5:7d:d7:7e:e5:bb:0f:f9:7b:b5:e1:84:78:69:a9:61:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Validity
Not Before: May 13 10:55:01 2025 GMT
Not After : May 12 11:00:01 2026 GMT
Subject: CN=D21BBF7385E32881F74B88C8940ED7A65AF87794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:7c:a6:e4:b8:ca:e2:06:3a:f0:ee:94:39:
12:63:51:1f:c3:87:6b:72:51:c4:da:23:82:d4:98:
de:22:75:3b:04:44:4c:29:16:86:b5:42:25:ad:f4:
3b:a5:3c:5c:76:24:93:a6:3a:3e:de:f3:6a:07:36:
27:de:f1:9f:01:40:f1:9e:c1:43:e1:fb:c2:2a:f8:
3a:8a:3f:9d:f7:45:80:37:a9:42:fe:2a:b5:e2:53:
ea:5b:87:2a:70:3f:42:92:83:8c:c3:00:56:54:22:
20:fa:31:eb:43:4c:e2:fb:ba:77:fd:49:0c:d3:8e:
3b:0e:e8:fe:31:35:ac:93:92:4d:21:97:72:cf:03:
0c:f0:4a:03:64:ac:d9:55:d0:d3:62:54:78:76:08:
fd:81:33:40:1c:dd:ea:85:00:d4:fc:f4:63:f6:02:
04:63:9c:31:82:4f:c0:2f:71:69:72:f0:b3:7a:07:
0c:c1:ba:b9:39:9e:8f:fa:a1:00:5a:72:e5:47:6d:
c6:03:05:6b:c9:6c:9a:94:1f:7b:3a:7c:9f:df:e5:
ae:c7:75:a4:45:73:c7:32:d4:5f:65:1d:7b:2b:56:
e1:4c:89:2f:67:10:3c:a3:9e:6a:b8:74:27:28:69:
d2:77:f8:4a:08:db:90:e8:25:6f:d8:34:f5:db:04:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:BF:73:85:E3:28:81:F7:4B:88:C8:94:0E:D7:A6:5A:F8:77:94
X509v3 Authority Key Identifier:
keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.24.0/22
Signature Algorithm: sha256WithRSAEncryption
18:27:32:8b:f3:1c:9c:0f:43:e7:5d:86:30:30:3c:31:b0:fb:
8d:2b:3b:81:87:5e:19:3e:a7:2e:21:8e:5d:5f:79:5a:6d:1b:
9f:42:f2:33:fe:4c:d8:2f:09:68:c0:64:23:66:8c:9f:33:2d:
5e:ba:90:1d:7f:e4:df:57:26:f4:c7:9f:d4:2e:af:a4:6c:5a:
72:30:26:b3:69:e1:10:b5:84:f2:61:38:0a:d2:d0:90:50:d9:
2c:0a:0e:94:84:5d:22:f0:3c:63:ba:89:ee:cb:c9:8b:1c:75:
5d:3d:02:b5:f5:01:2c:4c:d9:17:b7:cf:81:16:25:0e:9d:4d:
50:e8:6d:cc:8c:7d:97:74:44:c2:5f:cb:18:06:13:6a:23:86:
8e:3b:aa:57:31:8f:80:64:4a:73:a5:96:fb:1b:2a:d5:54:e5:
fd:19:fe:41:84:79:01:23:9d:6d:c0:da:47:0a:43:82:0e:39:
7f:8d:da:25:ed:b9:f5:3f:6a:62:7a:dd:18:89:88:bb:a3:5c:
f8:e1:ac:50:be:60:5a:48:7e:b0:53:e8:cb:f6:3c:24:4e:9e:
0c:9e:8c:72:34:e0:30:7f:de:63:73:b2:ef:c5:3e:cd:7c:26:
d3:f9:5c:6c:39:0b:4e:8e:9b:20:00:0d:62:d1:28:4c:30:5f:
5b:68:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:21:24 2025 by rpki-client