
$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
File: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=
Subject key identifier: 54:C1:77:DD:B1:FE:45:31:8D:4A:11:B1:95:74:C0:18:E9:4A:8E:9D
Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial: 16E26BB596E324D6B8DDA525D2CCFF5C9FB469A4
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
Signing time: Mon 16 Jun 2025 03:02:54 +0000
ROA not before: Mon 16 Jun 2025 02:57:54 +0000
ROA not after: Mon 15 Jun 2026 03:02:54 +0000
asID: 48465
IP address blocks: 103.220.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 18:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e2:6b:b5:96:e3:24:d6:b8:dd:a5:25:d2:cc:ff:5c:9f:b4:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
Validity
Not Before: Jun 16 02:57:54 2025 GMT
Not After : Jun 15 03:02:54 2026 GMT
Subject: CN=54C177DDB1FE45318D4A11B19574C018E94A8E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:8e:e5:b9:67:48:94:06:83:90:cb:c4:c2:
c7:51:d8:98:7d:83:67:a3:f8:bf:53:69:fc:96:64:
3e:9d:6b:f6:3c:b2:12:2d:b6:83:d8:cd:e1:51:98:
28:ef:a8:a6:a0:a8:f4:8e:fa:18:ba:28:96:1d:36:
94:31:6b:76:b6:dd:87:fe:a2:43:1a:58:05:b2:be:
04:3b:c5:b4:36:a8:bc:05:79:95:b1:69:ed:58:37:
1d:28:b1:9e:b4:38:69:da:03:ca:de:4e:bf:9c:d8:
a0:bc:33:f7:36:75:55:a3:77:7c:20:ea:91:5a:32:
4f:d3:49:3a:9f:a6:e5:23:28:e6:6a:e6:b5:a7:30:
48:dd:88:c6:ed:46:d0:11:0a:a9:e9:f6:57:9d:98:
77:15:61:84:21:41:fe:90:cd:ca:1f:fe:46:ae:15:
18:24:a0:74:92:ba:06:70:58:11:49:54:aa:d7:ca:
49:f6:bf:7d:06:0f:e0:f9:d4:04:eb:eb:dd:14:4d:
f6:e6:01:5e:b5:d6:48:91:42:f3:16:76:d9:12:84:
35:5f:97:ac:d2:47:58:d2:bb:30:27:d4:32:5b:96:
48:3f:d5:83:af:e2:da:09:a9:cf:89:92:68:25:0e:
04:3d:69:bb:97:0c:1e:9a:7f:08:03:21:a1:3c:94:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C1:77:DD:B1:FE:45:31:8D:4A:11:B1:95:74:C0:18:E9:4A:8E:9D
X509v3 Authority Key Identifier:
keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.44.0/24
Signature Algorithm: sha256WithRSAEncryption
28:eb:d3:6a:ae:0b:b4:2c:4a:3f:8f:5e:28:1f:ca:89:0b:6b:
77:0d:5b:88:bb:d2:77:5d:e1:ac:bd:86:54:b8:6a:0d:f7:f1:
b8:21:01:6b:60:d8:06:d3:3f:f3:ed:74:42:f4:0f:a3:8d:d8:
b5:d5:4e:dd:6f:da:cc:2a:46:c5:df:0e:88:5e:08:4a:b3:fd:
7d:c5:d8:3f:96:96:45:41:0d:9b:3d:3d:c8:fb:0a:c8:d8:bd:
f8:ef:f7:60:80:77:44:7d:f5:0c:40:ad:3a:02:a5:51:b0:a3:
48:25:81:35:86:bc:6b:b2:62:40:b7:48:f0:76:11:b0:9f:2a:
26:1d:94:92:1f:2c:74:f8:a1:42:c7:e5:ea:95:e2:2f:f1:51:
0e:68:f4:ec:62:89:db:e5:23:4c:6e:3d:6f:b1:26:5e:dd:75:
d4:86:33:71:f5:6c:f7:22:be:0a:ff:e0:d7:f9:97:c0:c6:7c:
97:14:b4:ce:2b:d7:43:f7:19:8e:81:f7:e5:b3:23:cb:7a:85:
d6:e7:c2:70:27:bd:3d:a9:2a:ce:dc:69:73:01:14:82:13:cf:
49:e8:f7:4c:79:16:6d:82:46:44:fa:19:97:0e:42:e4:5a:89:
2f:f7:b9:bd:8a:c1:24:d9:33:9d:ba:d3:82:f8:97:f1:b8:92:
1e:1e:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:49:31 2025 by rpki-client