
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
File: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=
Subject key identifier: ED:A1:6F:D8:6A:90:0C:C6:D3:97:59:AE:FC:F9:70:09:04:20:3E:20
Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial: 555E96FA09F759DDB3F02A4B3E21E778061B0971
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
Signing time: Mon 02 Jun 2025 01:02:42 +0000
ROA not before: Mon 02 Jun 2025 00:57:42 +0000
ROA not after: Mon 01 Jun 2026 01:02:42 +0000
asID: 131749
IP address blocks: 103.31.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Nov 2025 19:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5e:96:fa:09:f7:59:dd:b3:f0:2a:4b:3e:21:e7:78:06:1b:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Validity
Not Before: Jun 2 00:57:42 2025 GMT
Not After : Jun 1 01:02:42 2026 GMT
Subject: CN=EDA16FD86A900CC6D39759AEFCF9700904203E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:2a:a9:69:60:7f:cf:85:db:72:ff:c8:ef:
a0:a9:89:5c:41:15:6d:66:6a:40:ea:41:f5:a3:2c:
90:90:35:01:5a:5e:42:d6:28:d8:65:e9:7b:ff:8b:
2f:5a:a3:ab:6e:5b:5e:a5:94:d1:a5:6e:8f:47:a6:
8a:30:38:4d:03:9d:ec:47:89:4d:89:a9:45:fc:00:
21:22:99:6f:a5:d4:5e:78:75:9c:e6:1a:95:70:f5:
5d:07:f6:2c:d1:99:26:c8:d0:bd:39:a1:be:2b:e7:
10:19:27:d6:ab:c4:2b:a9:10:81:8a:fc:a0:2d:34:
6f:73:2e:42:ea:2a:eb:8f:55:60:98:85:2c:33:4a:
fb:6b:a0:fc:9f:dc:ec:f9:1a:60:cd:58:e7:f0:99:
d9:c2:76:27:c7:46:9a:80:24:35:93:24:a7:8f:28:
0d:b0:af:78:b9:0a:44:3e:2e:c1:ba:f6:58:d5:f7:
07:37:46:76:1b:3f:a7:78:8b:75:5f:83:28:97:f5:
cd:8a:ae:5f:fc:72:52:bb:1a:b6:d5:1d:3c:b2:35:
01:c8:af:67:1a:1e:06:e9:61:c9:bb:fb:2c:7c:60:
a5:6c:4b:bf:ec:a3:9a:1d:6e:de:00:3c:33:8c:3b:
c6:f9:3f:51:d2:b2:23:f6:d8:54:a8:9f:8f:97:0d:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:6F:D8:6A:90:0C:C6:D3:97:59:AE:FC:F9:70:09:04:20:3E:20
X509v3 Authority Key Identifier:
keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.132.0/23
Signature Algorithm: sha256WithRSAEncryption
78:13:00:c5:fd:a6:c3:76:fe:d2:9b:d8:4a:ee:da:b3:78:34:
5c:86:3c:17:6d:74:fd:7e:a7:52:3a:74:ab:6e:77:80:c8:b9:
53:83:99:b2:80:85:02:da:76:3e:5a:dc:12:33:c3:32:32:7a:
f7:9a:dc:a3:54:4f:29:c0:d7:f5:7b:ef:48:dd:4a:e6:a0:a2:
66:6b:84:58:0d:f6:df:3c:fb:50:37:f3:c4:cd:cd:4a:f8:38:
c7:5a:23:29:d3:19:ef:83:f1:25:64:29:73:f6:65:09:59:4c:
c6:4c:c8:68:bf:f2:38:ec:19:a1:51:ec:00:71:88:e6:51:e3:
d9:e9:06:26:93:71:62:9f:a5:04:89:31:8c:c3:6a:90:6b:c8:
10:31:f8:de:01:35:b3:cd:68:58:98:56:bc:d5:fc:f5:b6:10:
85:29:20:ca:32:a4:e8:09:33:80:9d:6a:50:76:85:27:53:34:
fd:d7:48:15:38:07:a6:21:28:6b:c0:93:f3:dc:71:13:8e:8a:
3c:6f:1b:7f:66:5a:f0:01:b0:e9:3f:c0:04:32:0b:15:9f:7b:
99:d5:1d:3f:de:98:09:b1:61:b3:90:01:07:b7:bf:2e:7d:5a:
11:70:f1:5d:fa:f2:88:3d:7a:6d:2b:e4:c5:39:6c:c6:ae:c4:
67:0d:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 04:12:26 2025 by rpki-client