
$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e203438343635.roa
File: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=
Subject key identifier: B6:AD:13:A9:B2:2A:8C:2C:D4:12:8F:BE:7C:96:C6:AE:4B:B3:A6:8F
Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial: 6ABFED4CE7703F51316112A6D01FB7C658F6E318
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e203438343635.roa
Signing time: Mon 16 Jun 2025 03:02:54 +0000
ROA not before: Mon 16 Jun 2025 02:57:54 +0000
ROA not after: Mon 15 Jun 2026 03:02:54 +0000
asID: 48465
IP address blocks: 103.220.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 18:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bf:ed:4c:e7:70:3f:51:31:61:12:a6:d0:1f:b7:c6:58:f6:e3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
Validity
Not Before: Jun 16 02:57:54 2025 GMT
Not After : Jun 15 03:02:54 2026 GMT
Subject: CN=B6AD13A9B22A8C2CD4128FBE7C96C6AE4BB3A68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:47:13:f0:c6:f5:4f:f6:a1:7b:19:88:84:
55:53:58:09:07:c5:8c:29:48:fe:2e:9c:73:56:95:
db:01:c4:e6:9a:ff:5a:e3:8a:2d:0d:6c:29:02:a1:
18:a5:52:57:29:12:97:18:52:38:93:4f:2f:b8:72:
78:32:7c:0c:2b:5a:08:97:80:03:15:db:5e:52:6b:
21:9e:4e:8e:97:f2:30:93:ec:ae:0c:9e:3e:71:a7:
29:50:e1:d7:f7:2f:4a:a4:ac:3c:39:d7:96:0b:99:
4d:b2:4e:10:01:4e:d1:31:cd:71:1f:5d:66:1d:52:
1e:c6:ac:e3:ff:e2:1c:67:d6:14:76:01:3e:3a:fd:
50:b5:ef:de:b8:f7:2e:c5:c8:d2:af:91:3f:01:ad:
7e:4e:66:0d:c6:fa:29:4f:b3:4c:66:00:f6:72:06:
e2:fd:eb:2a:51:d4:67:c0:8a:f4:ad:ff:68:46:7d:
86:88:8f:61:fb:60:69:a7:f7:85:31:fc:64:bf:77:
9a:15:63:aa:b7:b6:20:b1:ba:9e:ef:ce:86:5d:73:
7a:74:7a:ab:b1:02:11:96:7e:e3:4d:08:5f:df:7c:
ad:e8:64:00:a7:e1:1c:8c:33:0a:8f:1b:26:18:e6:
0c:f3:a7:ff:a3:1c:fd:1c:fc:07:be:2e:ae:01:31:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AD:13:A9:B2:2A:8C:2C:D4:12:8F:BE:7C:96:C6:AE:4B:B3:A6:8F
X509v3 Authority Key Identifier:
keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.45.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a4:e2:59:55:b2:99:6b:57:c9:a4:3e:76:29:82:38:54:9e:
a5:3d:da:7b:12:b2:57:56:a8:73:97:c6:16:15:bc:35:dd:ec:
52:83:07:f8:9b:69:ef:0f:30:1b:69:cb:83:88:be:a4:a0:90:
c6:77:26:3a:7a:60:a9:e0:84:95:b4:26:e2:8a:1e:ff:82:03:
b0:ed:97:ee:be:f1:20:ee:2a:6e:87:a4:6b:dc:3d:26:49:ba:
b5:a5:ee:a4:9f:7d:1f:c1:1a:89:a6:43:9c:c1:cc:d9:82:21:
50:1b:b3:db:84:ad:02:fb:ed:1d:20:87:5d:2f:b1:b5:76:b6:
15:d4:08:f3:01:0c:ff:d5:e0:e2:1f:bd:cd:1e:ab:39:6e:71:
31:4b:d6:5e:98:b8:88:6a:af:41:93:ab:95:d9:36:0b:7e:d7:
47:c9:85:54:65:0c:3e:d4:89:2b:f5:c9:ec:17:4a:2a:d5:05:
8a:a3:9b:1c:4c:8f:75:13:f9:73:a8:42:eb:71:43:7b:ab:65:
d6:d9:f9:4f:09:0f:c5:45:10:df:1a:98:dc:8a:cf:7b:9e:d3:
85:dc:c5:8d:e5:58:d5:b5:f7:44:98:b3:9e:97:07:39:e1:58:
94:03:4c:98:77:b5:a1:98:62:e3:63:b3:2e:cf:0b:b7:93:ed:
f2:a6:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:50:10 2025 by rpki-client