
$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e332e302f32342d3234203d3e20313338383237.roa
File: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (raw, json)
Hash identifier: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=
Subject key identifier: 4A:6B:03:9C:37:FE:A5:02:39:0E:9F:6C:42:C5:87:4F:3E:51:C9:4C
Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial: 55C99FC1771737146170660AFA95301D36D72B25
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e332e302f32342d3234203d3e20313338383237.roa
Signing time: Mon 07 Jul 2025 04:02:25 +0000
ROA not before: Mon 07 Jul 2025 03:57:25 +0000
ROA not after: Mon 06 Jul 2026 04:02:25 +0000
asID: 138827
IP address blocks: 103.135.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 16:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c9:9f:c1:77:17:37:14:61:70:66:0a:fa:95:30:1d:36:d7:2b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Validity
Not Before: Jul 7 03:57:25 2025 GMT
Not After : Jul 6 04:02:25 2026 GMT
Subject: CN=4A6B039C37FEA502390E9F6C42C5874F3E51C94C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:46:42:95:38:5b:2c:b0:a4:ae:ca:68:e7:87:
34:6e:39:e6:c0:10:0b:28:b1:2e:a8:77:de:f5:3e:
ba:df:d5:ba:80:6f:bf:10:56:3d:04:e6:6e:92:8e:
f9:7e:d6:51:24:07:70:e1:a7:b9:f4:74:c0:40:fd:
9a:c0:17:f9:af:20:9e:50:c8:bd:2d:5b:66:70:9f:
2b:3a:e5:36:84:ef:da:c8:9f:ed:3a:22:b0:ef:d4:
84:3d:9e:04:db:33:72:d6:5d:d7:9c:2b:20:20:e7:
06:79:a2:de:62:94:50:0a:03:f4:47:06:b1:29:b4:
9a:6c:6f:d4:f5:13:63:59:7f:5c:3f:23:c0:5c:bd:
b2:0f:4c:86:6a:dc:74:60:39:e4:5d:db:32:3a:5c:
7a:b8:24:c8:a2:9e:b1:37:4b:ee:a5:9e:19:78:bb:
e6:46:99:47:25:37:28:09:c9:fa:89:3a:fe:92:b4:
2d:2f:0a:03:7f:d5:70:8e:83:99:d5:1c:2f:b7:db:
3c:d9:2a:39:1d:ac:ae:a3:a4:b0:7c:7f:75:7a:79:
46:57:15:a6:fb:18:3f:3f:85:aa:17:64:d4:ee:f6:
d5:d3:cb:64:38:e0:25:58:5b:d2:75:21:a3:44:0b:
72:82:0e:05:e2:ff:d9:0b:11:d1:2f:46:9e:9f:9e:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:03:9C:37:FE:A5:02:39:0E:9F:6C:42:C5:87:4F:3E:51:C9:4C
X509v3 Authority Key Identifier:
keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e332e302f32342d3234203d3e20313338383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:22:a5:26:ef:38:18:21:e0:8a:81:4c:e0:e0:8c:40:e6:95:
a8:88:c6:e1:ae:d5:f6:82:65:3b:e1:9a:43:5e:ee:0f:cf:58:
4e:08:85:cc:cb:f7:32:97:30:69:29:08:c6:43:40:69:d1:b1:
df:eb:d8:2e:62:f3:ab:76:25:8f:e7:17:ac:90:54:1f:7d:93:
03:21:4d:c7:af:88:52:64:3b:7f:49:98:75:87:2f:45:6b:69:
ce:56:34:ea:d8:f5:94:58:4e:53:7d:d0:5b:45:34:ab:ac:9d:
cd:5e:47:86:fe:fc:df:df:1d:13:b1:c7:c7:61:f8:f2:eb:95:
7b:2a:ca:bb:82:c3:03:34:93:92:bf:ab:e7:cf:55:37:99:3c:
89:6f:44:7b:28:45:11:5d:6b:e5:a6:fc:e9:03:f5:67:49:2e:
2e:81:30:2a:97:09:a2:d4:87:05:67:de:a5:23:ac:25:d0:5f:
46:44:db:e2:bf:31:c1:63:18:80:cd:03:80:d4:af:2d:14:ad:
aa:d8:eb:b6:88:57:21:c6:ab:0d:10:b9:c6:99:ba:64:f8:6c:
96:4f:cd:0a:bd:aa:4b:b8:b3:0b:4a:bd:77:1e:47:e9:40:54:
e3:d6:44:5d:ca:4e:39:1d:a6:38:4c:4a:3b:67:59:38:86:b5:
ee:82:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 13:24:46 2025 by rpki-client