
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
File: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (raw, json)
Hash identifier: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=
Subject key identifier: AC:EA:B2:C3:EE:40:E0:CB:E9:4F:9A:BA:B1:A4:F2:CE:BC:A9:59:D0
Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial: 44A6BB2197C75A8257827C7A222828CFC64C7747
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
Signing time: Sat 24 May 2025 16:00:01 +0000
ROA not before: Sat 24 May 2025 15:55:01 +0000
ROA not after: Sat 23 May 2026 16:00:01 +0000
asID: 141665
IP address blocks: 103.162.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 17:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a6:bb:21:97:c7:5a:82:57:82:7c:7a:22:28:28:cf:c6:4c:77:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
Validity
Not Before: May 24 15:55:01 2025 GMT
Not After : May 23 16:00:01 2026 GMT
Subject: CN=ACEAB2C3EE40E0CBE94F9ABAB1A4F2CEBCA959D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:69:4d:e1:fc:2c:4b:ec:d6:21:bb:52:ae:
87:6d:ca:69:c2:7c:02:09:e7:b1:3e:fe:36:ac:e6:
86:39:1f:e1:50:0a:1d:86:ba:96:4a:2e:41:c1:e9:
54:24:65:c0:dd:01:d3:5c:92:b5:01:c8:df:cd:e5:
d2:86:5d:27:42:46:9d:aa:f8:3d:fb:65:24:b6:0f:
ff:1d:ba:de:d8:a3:5b:c7:1f:f8:88:19:e0:7c:b6:
34:ec:b9:1a:01:b7:ad:94:2f:33:bc:43:54:04:60:
64:6d:ed:06:35:54:96:a0:9b:32:bf:db:45:af:f2:
18:68:a4:53:f6:b8:38:b7:0d:6a:b2:e0:7e:9d:66:
ff:5a:05:2e:b6:e2:7f:11:8b:f4:5f:fb:8e:d6:c0:
51:3c:5f:1a:ae:3b:ca:41:b0:9a:aa:1c:51:ab:82:
87:3f:1b:fe:e2:3e:2e:6d:87:db:d9:17:f0:ce:da:
21:c7:d3:98:bf:fd:be:25:f9:27:e9:f9:a3:95:4f:
15:db:f2:4c:fd:2c:8e:be:13:f8:37:76:0e:d0:39:
bc:e8:2d:f5:f1:95:6e:f8:e4:21:dd:ef:af:3a:38:
8b:fc:98:90:5a:46:9d:03:c0:95:0c:1b:41:51:c3:
53:41:80:6a:97:7d:1b:13:78:21:b9:f5:ac:b1:fd:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:B2:C3:EE:40:E0:CB:E9:4F:9A:BA:B1:A4:F2:CE:BC:A9:59:D0
X509v3 Authority Key Identifier:
keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d6:22:85:d9:76:76:36:e2:ac:87:1b:5f:48:45:b1:80:f0:
f3:09:ca:06:10:2f:3d:e6:83:77:32:99:ce:ad:41:89:8a:6f:
bb:7b:e4:5a:db:b3:aa:96:87:5b:dd:fb:59:2f:04:29:e6:8c:
97:47:0e:68:dd:23:e1:b3:92:c6:03:c7:ac:6b:88:b3:2c:49:
e6:95:b3:83:15:4c:65:71:c4:03:b6:c7:da:7d:32:4c:d0:dd:
2f:08:c7:e3:77:9d:2f:00:9a:90:3d:03:8b:d9:91:90:5d:1d:
a9:e0:47:2b:2a:6c:d0:a2:1a:2e:6d:e7:c1:33:ad:20:f8:c4:
85:3f:50:47:79:4a:55:13:b3:0e:f6:fc:1e:03:8c:60:af:ef:
c1:40:78:76:37:f7:f4:85:33:2e:6c:dc:c2:2c:19:af:30:32:
9b:14:0a:fa:eb:f5:eb:a6:87:0c:37:92:3f:75:b6:40:ee:ed:
35:c2:bc:c5:18:9e:08:48:eb:d2:cd:46:cb:de:82:67:36:c5:
b3:79:8b:17:88:db:f7:d0:c7:62:02:3b:d4:9c:8f:16:54:a4:
11:ec:53:f8:45:d6:b2:4b:c9:44:82:5e:9e:0d:01:f3:38:86:
fb:6a:d9:cf:1c:14:c9:8e:a9:cc:27:f8:b2:e2:eb:3d:e6:3c:
b9:3f:60:ad
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURKa7IZfHWoJXgnx6Iigoz8ZMd0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC
MDQ3M0Y1RTAeFw0yNTA1MjQxNTU1MDFaFw0yNjA1MjMxNjAwMDFaMDMxMTAvBgNV
BAMTKEFDRUFCMkMzRUU0MEUwQ0JFOTRGOUFCQUIxQTRGMkNFQkNBOTU5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisWlN4fwsS+zWIbtSrodtymnC
fAIJ57E+/jas5oY5H+FQCh2GupZKLkHB6VQkZcDdAdNckrUByN/N5dKGXSdCRp2q
+D37ZSS2D/8dut7Yo1vHH/iIGeB8tjTsuRoBt62ULzO8Q1QEYGRt7QY1VJagmzK/
20Wv8hhopFP2uDi3DWqy4H6dZv9aBS624n8Ri/Rf+47WwFE8XxquO8pBsJqqHFGr
goc/G/7iPi5th9vZF/DO2iHH05i//b4l+Sfp+aOVTxXb8kz9LI6+E/g3dg7QObzo
LfXxlW745CHd7686OIv8mJBaRp0DwJUMG0FRw1NBgGqXfRsTeCG59ayx/cdvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUrOqyw+5A4MvpT5q6saTyzrypWdAwHwYDVR0j
BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx
RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3
M0Y1RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2NGYwZmZhLWUwMzEtNGVlMS1i
ZjBmLTY0YmFjZmNmMjk0Mi8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnot4wDQYJ
KoZIhvcNAQELBQADggEBAK7WIoXZdnY24qyHG19IRbGA8PMJygYQLz3mg3cymc6t
QYmKb7t75Frbs6qWh1vd+1kvBCnmjJdHDmjdI+GzksYDx6xriLMsSeaVs4MVTGVx
xAO2x9p9MkzQ3S8Ix+N3nS8AmpA9A4vZkZBdHangRysqbNCiGi5t58EzrSD4xIU/
UEd5SlUTsw72/B4DjGCv78FAeHY39/SFMy5s3MIsGa8wMpsUCvrr9eumhww3kj91
tkDu7TXCvMUYnghI69LNRsvegmc2xbN5ixeI2/fQx2ICO9ScjxZUpBHsU/hF1rJL
yUSCXp4NAfM4hvtq2c8cFMmOqcwn+LLi6z3mPLk/YK0=
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:54:30 2025 by rpki-client