
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
File: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=
Subject key identifier: 6D:67:4E:8D:14:AD:A1:D1:B3:7C:C2:74:AF:CB:CE:21:EB:3B:24:B9
Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial: 3BC2C903BC70B380D4A6C9F563EC15FA9B01BA61
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
Signing time: Fri 14 Mar 2025 19:00:01 +0000
ROA not before: Fri 14 Mar 2025 18:55:01 +0000
ROA not after: Fri 13 Mar 2026 19:00:01 +0000
asID: 140389
IP address blocks: 103.150.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 00:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c2:c9:03:bc:70:b3:80:d4:a6:c9:f5:63:ec:15:fa:9b:01:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Validity
Not Before: Mar 14 18:55:01 2025 GMT
Not After : Mar 13 19:00:01 2026 GMT
Subject: CN=6D674E8D14ADA1D1B37CC274AFCBCE21EB3B24B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:b2:70:62:cc:79:1a:b1:51:bc:70:9c:e2:
d4:df:6e:1e:f1:36:6a:63:89:cc:6f:fc:0c:8e:68:
45:6d:9e:ca:0d:82:27:bd:a2:a0:91:71:ad:6a:9c:
57:c8:0d:93:4f:5e:56:29:ee:64:8c:d0:78:44:97:
e6:65:45:47:ee:39:28:b2:1b:88:4e:2f:3d:1b:ed:
a1:c9:3d:da:4a:6a:9f:1c:7d:3b:43:6d:2a:82:0e:
c0:14:d9:18:c6:9a:1f:50:99:b2:20:96:81:30:e0:
0b:2e:8e:e7:ca:61:a5:b0:dd:11:17:c9:8e:bd:44:
74:80:c2:67:69:69:1b:ae:b2:5d:95:83:4a:da:ce:
df:1b:37:64:68:d2:94:cb:33:63:9c:e5:22:67:2f:
0d:88:81:54:3e:18:42:e0:3f:4a:40:18:f8:c7:7e:
0a:48:f5:75:8b:4d:d5:21:b3:9e:ed:5b:c8:82:eb:
f2:da:45:d6:60:8c:ad:84:79:dd:37:68:f9:c9:68:
85:44:67:f2:5b:ff:7e:a9:90:3c:4e:e3:33:66:d0:
05:ee:68:b6:ec:8c:72:a1:aa:7b:1f:b9:38:1f:eb:
09:eb:37:02:ef:d1:62:e4:78:9e:9d:6f:15:b2:99:
bf:d8:f9:ab:a7:07:0d:49:88:13:5a:ef:23:13:f0:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:4E:8D:14:AD:A1:D1:B3:7C:C2:74:AF:CB:CE:21:EB:3B:24:B9
X509v3 Authority Key Identifier:
keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:88:bb:70:61:ce:21:4c:55:66:e4:a4:dc:c6:0a:4d:18:7f:
ad:1a:21:2a:f6:b2:3f:79:21:77:ae:b8:5b:a3:5d:be:0e:be:
86:a8:ff:70:58:95:ef:c2:54:ab:41:c7:1e:17:bc:3c:75:98:
cb:32:b1:80:14:c3:c6:20:63:98:a0:c4:9a:ce:bd:27:2f:ff:
c5:6d:b7:0c:7e:09:17:14:fd:5d:05:91:88:71:78:0f:bd:ea:
a6:0f:64:4d:86:e0:5b:a0:ad:95:8e:6e:c8:ca:a4:db:4d:b1:
66:75:bf:4e:27:1f:4e:fa:9a:f4:a8:e4:86:c4:a9:dd:cb:55:
26:c7:d4:01:88:f6:67:ef:8e:7f:fb:3e:9f:cf:1f:11:db:6d:
ec:08:4c:3e:22:a5:9f:c5:b2:e3:a4:ca:69:e9:96:7a:ee:c5:
13:f4:7b:26:26:39:57:22:69:0d:be:e9:1c:7e:4f:c4:08:62:
61:29:bf:9f:68:5a:5e:1a:88:80:e1:6b:4d:c9:78:f7:f4:d7:
bf:d9:6a:74:f1:34:f4:3c:f9:69:85:37:71:43:67:e4:20:ce:
0d:38:be:7c:b9:dd:5e:1a:db:2f:bc:b1:06:e8:f3:94:b0:ff:
4a:b7:cc:fa:c0:24:ab:ea:ae:3a:1b:d4:6d:0c:5a:98:17:4d:
1e:41:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:42:02 2025 by rpki-client