
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa
File: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (raw, json)
Hash identifier: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=
Subject key identifier: 5E:D8:B3:98:3A:27:E5:4A:16:12:B9:E5:41:54:6C:45:85:96:CD:2C
Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0
Certificate serial: 57DF24B36017032AF5862003774074E0C431E6AC
Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa
Signing time: Mon 31 Mar 2025 13:00:01 +0000
ROA not before: Mon 31 Mar 2025 12:55:01 +0000
ROA not after: Mon 30 Mar 2026 13:00:01 +0000
asID: 141673
IP address blocks: 103.163.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl
rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 04:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:df:24:b3:60:17:03:2a:f5:86:20:03:77:40:74:e0:c4:31:e6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0
Validity
Not Before: Mar 31 12:55:01 2025 GMT
Not After : Mar 30 13:00:01 2026 GMT
Subject: CN=5ED8B3983A27E54A1612B9E541546C458596CD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:7e:e9:b1:85:23:16:ab:44:ca:12:e7:e6:
de:42:0f:75:c4:2a:b6:78:82:d1:a7:f2:67:e8:7f:
00:f3:6d:ae:f5:f8:e3:3e:6f:69:4b:53:a5:9e:0c:
aa:f7:a8:4d:be:a4:aa:bb:bc:18:3a:fc:8e:9b:b4:
f8:36:27:27:ea:bb:21:d1:eb:68:ef:8e:82:12:15:
4d:78:0c:56:1c:9c:6a:85:ef:f4:5b:74:12:49:8e:
48:a4:82:d9:7c:df:eb:02:60:0d:61:d0:23:a3:13:
7a:1a:36:dd:77:0f:db:b1:e7:52:57:49:23:c4:98:
e7:fc:56:59:fb:0e:c5:77:23:25:10:6a:51:44:de:
60:e7:aa:da:9f:3f:73:d9:eb:19:e4:25:70:89:53:
54:30:ce:9c:12:8f:77:38:c4:5d:80:52:89:24:ae:
22:e7:3c:af:d9:91:b6:1e:7d:ce:b4:df:ef:79:77:
55:19:07:bb:4c:9c:19:1a:88:00:78:4d:69:04:24:
c1:dd:62:c7:8b:63:8d:d4:bb:1b:89:f1:f2:dd:13:
d4:c2:86:f5:17:ad:2e:91:05:4f:b1:77:80:86:d1:
bb:13:51:36:ff:df:b2:87:71:10:bd:a5:ba:48:c5:
61:7d:64:4b:fd:5d:2d:24:80:6c:b4:f8:cc:82:a5:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:B3:98:3A:27:E5:4A:16:12:B9:E5:41:54:6C:45:85:96:CD:2C
X509v3 Authority Key Identifier:
keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.102.0/23
Signature Algorithm: sha256WithRSAEncryption
84:7f:53:58:72:7b:59:3f:e3:25:78:b8:4e:35:54:79:b6:70:
da:d8:b6:b2:ec:a7:77:ce:cf:c2:47:65:0c:2e:1d:0c:6b:c9:
80:89:4d:3b:02:6e:3b:49:ce:90:ff:4b:26:3d:42:2d:6a:71:
ca:4a:1d:cd:b2:60:3b:55:db:78:44:57:b5:cf:0c:a2:5b:33:
e5:13:f7:b7:30:14:5d:cd:4d:05:7f:d9:92:ae:70:e5:f1:1f:
17:8a:25:84:3c:6a:81:1e:3c:24:28:d1:d8:c6:6a:ca:61:03:
35:77:1c:34:a0:95:d9:ab:d4:e5:30:bc:28:06:0f:f4:12:62:
42:da:2a:4b:78:73:6d:fa:97:bf:71:29:3f:c6:49:ed:0a:ef:
81:33:0a:d3:68:12:36:d6:44:ac:37:8f:e8:c6:d1:81:8c:6e:
a0:4a:27:18:70:d3:a5:b6:77:d5:ed:d9:06:7d:a3:ad:ca:16:
f9:1f:11:07:90:15:1c:f0:91:13:26:fb:50:6b:51:0e:09:9d:
a0:bd:7d:30:b8:62:7a:5a:26:20:3d:e3:a0:cb:ad:c8:64:16:
4c:31:5a:ac:87:c2:2d:08:6a:01:f6:ea:69:4e:c9:43:9e:1d:
05:69:1f:56:1a:62:c8:14:03:f7:29:a0:fb:66:c8:95:ec:96:
7e:2f:9b:90
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUV98ks2AXAyr1hiADd0B04MQx5qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx
RUY0MTJFMDAeFw0yNTAzMzExMjU1MDFaFw0yNjAzMzAxMzAwMDFaMDMxMTAvBgNV
BAMTKDVFRDhCMzk4M0EyN0U1NEExNjEyQjlFNTQxNTQ2QzQ1ODU5NkNEMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx537psYUjFqtEyhLn5t5CD3XE
KrZ4gtGn8mfofwDzba71+OM+b2lLU6WeDKr3qE2+pKq7vBg6/I6btPg2JyfquyHR
62jvjoISFU14DFYcnGqF7/RbdBJJjkikgtl83+sCYA1h0COjE3oaNt13D9ux51JX
SSPEmOf8Vln7DsV3IyUQalFE3mDnqtqfP3PZ6xnkJXCJU1QwzpwSj3c4xF2AUokk
riLnPK/ZkbYefc603+95d1UZB7tMnBkaiAB4TWkEJMHdYseLY43UuxuJ8fLdE9TC
hvUXrS6RBU+xd4CG0bsTUTb/37KHcRC9pbpIxWF9ZEv9XS0kgGy0+MyCpRaxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXtizmDon5UoWErnlQVRsRYWWzSwwHwYDVR0j
BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4
Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0
MTJFMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMWU0OWFiLTUwY2EtNGIzZS04
MjNjLThiM2QzMWJhODVmMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTMwMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFno2YwDQYJ
KoZIhvcNAQELBQADggEBAIR/U1hye1k/4yV4uE41VHm2cNrYtrLsp3fOz8JHZQwu
HQxryYCJTTsCbjtJzpD/SyY9Qi1qccpKHc2yYDtV23hEV7XPDKJbM+UT97cwFF3N
TQV/2ZKucOXxHxeKJYQ8aoEePCQo0djGasphAzV3HDSgldmr1OUwvCgGD/QSYkLa
Kkt4c236l79xKT/GSe0K74EzCtNoEjbWRKw3j+jG0YGMbqBKJxhw06W2d9Xt2QZ9
o63KFvkfEQeQFRzwkRMm+1BrUQ4JnaC9fTC4YnpaJiA946DLrchkFkwxWqyHwi0I
agH26mlOyUOeHQVpH1YaYsgUA/cpoPtmyJXsln4vm5A=
-----END CERTIFICATE-----
Generated at Mon Nov 3 06:37:16 2025 by rpki-client