
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
File: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (raw, json)
Hash identifier: m2OZ4XMcLl0P7HlEaALJYW+kWpR85aBYZcawB+LS50Q=
Subject key identifier: FA:FA:E4:ED:A0:C6:BF:29:B4:25:68:8C:FE:51:69:B7:E9:4E:F4:FF
Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial: 61301A139CE2D4613EF2A70E0173E3CC401B1047
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
Signing time: Sun 26 Oct 2025 05:00:01 +0000
ROA not before: Sun 26 Oct 2025 04:55:01 +0000
ROA not after: Sun 25 Oct 2026 05:00:01 +0000
asID: 24519
IP address blocks: 103.42.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 16:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:30:1a:13:9c:e2:d4:61:3e:f2:a7:0e:01:73:e3:cc:40:1b:10:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Validity
Not Before: Oct 26 04:55:01 2025 GMT
Not After : Oct 25 05:00:01 2026 GMT
Subject: CN=FAFAE4EDA0C6BF29B425688CFE5169B7E94EF4FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:e0:c3:37:0c:6a:bf:9a:13:ef:94:5d:5b:
5f:b1:72:81:7b:a8:1f:c3:af:e9:74:a7:81:15:4a:
9f:74:8c:db:9a:6b:a3:59:c1:82:fb:36:0b:36:c7:
29:84:fe:9f:0f:56:7c:03:bf:0c:59:8c:e3:fb:7e:
b6:c6:84:70:e3:96:2f:74:1b:56:14:ad:44:97:cb:
0b:5a:dd:dd:58:65:c0:60:bd:3c:1a:be:1b:17:20:
d4:8c:e1:07:8c:ba:a3:2d:bf:78:80:8b:08:c8:25:
fe:bf:05:37:35:66:64:83:ec:08:b7:cd:b7:72:5e:
6b:84:d6:ff:48:d2:13:e6:ab:66:d5:4c:f1:c6:e0:
15:18:98:d2:4d:51:0b:5c:83:8b:53:1b:85:f3:31:
c0:7c:43:0f:20:a1:56:66:a7:60:bc:94:16:67:c1:
e5:53:f5:29:88:44:86:24:d3:ec:42:4b:94:9e:31:
1c:6b:7c:0e:19:80:cb:3d:01:a5:59:ef:98:1d:1a:
f5:9d:8c:54:07:c0:32:cc:71:58:1e:a3:3d:a9:cc:
e4:dd:b8:ad:85:6a:8d:87:ae:6b:78:f3:fb:62:73:
b0:b4:28:71:f1:74:ca:1a:a5:0e:5b:82:8f:b3:71:
73:e7:3a:85:b0:a7:0c:71:8b:9c:f1:4c:03:67:66:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FA:E4:ED:A0:C6:BF:29:B4:25:68:8C:FE:51:69:B7:E9:4E:F4:FF
X509v3 Authority Key Identifier:
keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.119.0/24
Signature Algorithm: sha256WithRSAEncryption
92:26:03:fb:94:54:ee:47:d6:27:86:f1:a4:12:6f:bc:81:4b:
fb:45:18:36:2d:0e:11:1f:9b:f4:5b:50:38:0a:76:65:d2:60:
8e:e5:51:fc:cf:0b:37:c8:d7:06:0d:f7:f6:f1:57:39:3d:2c:
bb:43:fb:68:f2:ce:f5:b0:2f:f0:f8:1b:a0:f6:40:b9:6f:8a:
7c:ee:6d:50:b6:b0:a2:bc:04:ba:d5:b0:f5:58:f3:49:d4:58:
ec:8d:63:61:85:d4:21:ef:67:56:e5:4f:43:a5:ae:bf:4c:82:
f4:bb:84:f4:cf:c2:d2:c6:00:5f:38:b5:c5:d2:7a:a5:18:45:
e0:42:db:c7:3e:01:0d:f6:c8:37:7e:dc:c2:7c:d1:8f:5f:8b:
ce:7a:6b:cf:42:ae:33:82:e5:ea:b3:50:37:52:5a:ca:c3:23:
38:0e:df:9a:29:5b:2c:62:98:df:b1:da:40:42:89:9e:53:07:
ba:1d:ca:46:5a:50:5b:e6:7c:4b:04:48:c4:33:47:db:43:ef:
b0:b9:f6:1f:c3:77:4e:e8:31:3f:dc:96:a0:1b:fb:0a:3a:29:
d7:51:7d:d8:18:29:26:28:64:11:03:27:7e:9b:5e:a5:61:00:
c8:2f:94:70:2c:20:e7:04:2e:b7:d6:1b:a1:96:89:23:6c:52:
b3:54:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 09:09:52 2025 by rpki-client