
$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa
File: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=
Subject key identifier: 99:F7:22:17:7E:C6:19:6D:26:21:D8:14:CD:86:EB:C2:F4:1A:15:2D
Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial: 5E6C3AEB98233934D217F3DBF2F69CDAB538CE8D
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa
Signing time: Mon 02 Jun 2025 01:02:38 +0000
ROA not before: Mon 02 Jun 2025 00:57:38 +0000
ROA not after: Mon 01 Jun 2026 01:02:38 +0000
asID: 133811
IP address blocks: 103.52.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 17:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6c:3a:eb:98:23:39:34:d2:17:f3:db:f2:f6:9c:da:b5:38:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Validity
Not Before: Jun 2 00:57:38 2025 GMT
Not After : Jun 1 01:02:38 2026 GMT
Subject: CN=99F722177EC6196D2621D814CD86EBC2F41A152D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:42:b7:43:41:4c:81:ed:65:ca:5f:9a:45:
8c:ca:1e:6f:78:61:8e:6e:ac:5e:16:d7:96:f0:80:
ca:a4:cc:24:dc:42:5e:2b:ea:9b:66:a2:91:9c:34:
c2:0a:98:32:8d:64:0a:5f:92:19:84:7c:de:a2:cb:
9f:59:09:b9:67:ec:ce:ea:ec:c4:96:aa:5a:fb:1a:
d9:c8:8f:f8:b7:45:11:d8:8e:c2:ac:db:54:b9:61:
f0:45:d2:7c:78:ae:f4:d2:8a:76:14:c3:f1:c7:9a:
14:23:f3:10:93:fe:1d:7c:60:04:d6:c6:c7:96:cd:
cc:34:69:4f:e2:06:a7:cd:90:5e:ca:9d:26:1e:e8:
a3:59:7d:d9:5f:e4:69:d2:88:e4:7f:44:d9:f4:9d:
ac:77:cf:e7:61:1b:de:31:43:64:c6:5b:dd:31:c9:
a8:78:a2:40:1f:e0:81:1b:db:d2:7f:a1:2b:e9:32:
86:b3:1c:35:41:a4:9f:7f:db:65:c6:07:8d:5e:57:
41:53:14:73:87:30:c2:10:2f:5a:ab:43:91:ea:15:
3d:31:95:6b:ad:5d:cd:b4:03:72:14:a9:48:df:20:
ce:5e:9a:e3:bb:26:6f:b6:57:89:e2:ef:e5:69:44:
b2:65:3c:86:27:3b:ee:f8:52:a5:d5:12:ba:c4:9c:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:22:17:7E:C6:19:6D:26:21:D8:14:CD:86:EB:C2:F4:1A:15:2D
X509v3 Authority Key Identifier:
keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2e:ea:ff:b1:33:0f:e8:2c:cd:a9:5b:18:2a:ea:41:70:eb:
c8:50:88:65:20:2d:a1:6d:73:72:49:72:49:52:a2:98:1b:ed:
5b:ea:fb:b9:cc:70:af:06:5b:79:57:95:d5:6a:71:d2:be:1a:
b8:2f:cd:d7:33:21:67:2f:e0:b1:83:39:54:dd:ac:1a:14:ac:
56:cc:bc:c7:90:9e:89:bb:b4:58:9f:67:74:c8:d1:08:67:95:
a4:a9:82:f9:7e:ba:37:30:37:7f:66:05:c8:9e:34:6f:53:e8:
00:68:78:ec:42:b6:a1:0a:e2:38:6d:df:80:38:48:e2:da:b2:
ab:4b:13:42:08:27:77:ae:a6:bd:d6:72:ce:77:ca:73:9f:c7:
92:3a:0d:99:68:59:cc:be:5e:98:5f:8f:ef:b1:bd:48:6e:be:
2a:e7:32:7f:d1:4c:07:b6:59:1c:2f:33:f3:f2:d1:0c:e0:bd:
4e:59:7c:2e:90:07:81:28:c0:ba:3c:5b:60:4f:75:ed:98:48:
f9:14:c4:0c:62:3b:5a:0f:2f:c8:f7:f9:5d:a8:15:18:7c:80:
64:d7:0a:72:5d:11:cf:6a:dc:43:e6:a7:99:cc:b9:18:78:20:
f1:91:fe:d3:69:a0:26:a7:9a:71:68:da:55:fa:1a:31:c5:71:
5c:64:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:56:53 2025 by rpki-client