
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e20313331373435.roa
File: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier: DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=
Subject key identifier: 7F:A6:26:6C:E4:D0:3F:08:EA:8E:70:B5:9A:C3:B2:79:99:1A:B0:53
Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial: 1B9EE256392E57EB302BA697D2787BF99E7C12F9
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e20313331373435.roa
Signing time: Tue 02 Sep 2025 07:01:46 +0000
ROA not before: Tue 02 Sep 2025 06:56:46 +0000
ROA not after: Tue 01 Sep 2026 07:01:46 +0000
asID: 131745
IP address blocks: 103.3.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 22:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:9e:e2:56:39:2e:57:eb:30:2b:a6:97:d2:78:7b:f9:9e:7c:12:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Validity
Not Before: Sep 2 06:56:46 2025 GMT
Not After : Sep 1 07:01:46 2026 GMT
Subject: CN=7FA6266CE4D03F08EA8E70B59AC3B279991AB053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:10:d2:e9:68:a1:f8:56:91:26:78:1f:59:
47:b2:22:11:f3:77:30:fc:dc:28:70:4e:da:4c:f4:
d5:06:2c:46:ef:b9:51:2a:a2:87:83:2a:3b:d3:74:
40:35:6b:5d:e2:af:d2:eb:2a:ef:10:24:3e:46:72:
1c:0b:08:fe:08:fa:9b:8b:31:14:79:2f:e1:01:2a:
64:86:8f:17:6a:82:5b:30:b6:99:bb:81:20:5f:50:
05:ef:73:4f:df:70:d2:0b:db:b8:d8:7c:ce:c6:c8:
fa:6c:d3:4d:65:46:66:94:c4:56:c4:64:60:18:9c:
1e:7d:2b:e0:71:9d:ab:fa:b5:6b:38:3a:ec:d4:c7:
e8:2c:d9:4b:fc:02:7a:91:8e:0e:68:52:b9:5d:8c:
6d:6b:76:ac:27:3e:bb:42:b1:bf:db:f5:ba:08:89:
ed:c6:d3:a3:21:6d:0e:3b:5f:a0:08:52:6f:9e:28:
a5:b1:95:1d:d4:86:98:b7:cb:68:21:16:41:5b:65:
84:35:34:f6:5d:b8:94:fe:83:eb:3f:ee:e3:19:41:
b9:b7:5a:8c:fb:23:e7:a3:ac:fe:2f:dc:39:24:29:
a2:82:4c:87:60:d7:ca:97:46:fe:8d:18:45:95:f9:
c9:db:dc:1c:13:7e:ae:27:93:f2:b4:53:70:13:44:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:26:6C:E4:D0:3F:08:EA:8E:70:B5:9A:C3:B2:79:99:1A:B0:53
X509v3 Authority Key Identifier:
keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e20313331373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a8:6a:85:0a:0d:57:5e:aa:09:1e:85:89:f8:aa:e1:df:09:
f5:ca:84:2d:7a:d1:b6:25:d5:7f:9f:69:12:76:55:1e:d3:91:
13:71:7b:8c:c1:c5:84:3d:df:8b:08:91:89:7f:33:e2:92:29:
23:2a:e8:4c:39:33:c5:4d:03:13:56:1f:40:4d:3a:25:21:a1:
67:7e:2b:3f:70:62:36:35:f9:ce:31:01:b8:cb:73:b7:f4:42:
e3:8d:3b:04:75:49:8d:60:e3:33:14:79:71:8f:0e:9c:6d:45:
72:82:94:e0:40:3c:49:53:5e:be:9c:3a:0b:61:7d:fc:c5:35:
f6:38:99:77:76:9f:5e:7f:9d:ae:ed:8b:6c:b5:fe:87:57:8c:
6e:1a:10:d9:ab:91:75:7d:31:ad:75:88:a5:15:d3:2c:de:f4:
a8:82:ac:ee:b7:f0:fe:b8:1f:47:23:01:f9:00:15:8c:e1:5b:
19:48:2c:e8:7e:33:6f:b8:b2:1a:6c:95:1a:3e:3d:b7:b0:a5:
d1:51:26:2b:bf:2f:45:e1:ec:1d:66:e3:85:3d:13:81:44:8d:
00:63:62:43:0a:b9:f8:86:d7:11:db:ae:9d:25:40:e9:11:53:
82:b9:8a:72:51:33:c9:90:d1:22:c5:fc:b5:c6:d0:7a:0b:69:
08:43:79:db
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUG57iVjkuV+swK6aX0nh7+Z58EvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB
OEY5OTE1MDAeFw0yNTA5MDIwNjU2NDZaFw0yNjA5MDEwNzAxNDZaMDMxMTAvBgNV
BAMTKDdGQTYyNjZDRTREMDNGMDhFQThFNzBCNTlBQzNCMjc5OTkxQUIwNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XBDS6Wih+FaRJngfWUeyIhHz
dzD83ChwTtpM9NUGLEbvuVEqooeDKjvTdEA1a13ir9LrKu8QJD5GchwLCP4I+puL
MRR5L+EBKmSGjxdqglswtpm7gSBfUAXvc0/fcNIL27jYfM7GyPps001lRmaUxFbE
ZGAYnB59K+Bxnav6tWs4OuzUx+gs2Uv8AnqRjg5oUrldjG1rdqwnPrtCsb/b9boI
ie3G06MhbQ47X6AIUm+eKKWxlR3Uhpi3y2ghFkFbZYQ1NPZduJT+g+s/7uMZQbm3
Woz7I+ejrP4v3DkkKaKCTIdg18qXRv6NGEWV+cnb3BwTfq4nk/K0U3ATRK3zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUf6YmbOTQPwjqjnC1msOyeZkasFMwHwYDVR0j
BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG
MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5
OTE1MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h
YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcD1zANBgkqhkiG
9w0BAQsFAAOCAQEAW6hqhQoNV16qCR6Fifiq4d8J9cqELXrRtiXVf59pEnZVHtOR
E3F7jMHFhD3fiwiRiX8z4pIpIyroTDkzxU0DE1YfQE06JSGhZ34rP3BiNjX5zjEB
uMtzt/RC4407BHVJjWDjMxR5cY8OnG1FcoKU4EA8SVNevpw6C2F9/MU19jiZd3af
Xn+dru2LbLX+h1eMbhoQ2auRdX0xrXWIpRXTLN70qIKs7rfw/rgfRyMB+QAVjOFb
GUgs6H4zb7iyGmyVGj49t7Cl0VEmK78vReHsHWbjhT0TgUSNAGNiQwq5+IbXEduu
nSVA6RFTgrmKclEzyZDRIsX8tcbQegtpCEN52w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 03:13:35 2025 by rpki-client