
$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32322d3232203d3e203539323733.roa
File: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (raw, json)
Hash identifier: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=
Subject key identifier: C2:76:80:04:86:2C:06:74:A0:BB:C5:CB:4E:1E:30:33:9E:FB:09:D5
Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial: 88303F1A67ED6A4C81252D9E9C8C48BAAFD4F8
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32322d3232203d3e203539323733.roa
Signing time: Wed 04 Jun 2025 19:00:00 +0000
ROA not before: Wed 04 Jun 2025 18:55:00 +0000
ROA not after: Wed 03 Jun 2026 19:00:00 +0000
asID: 59273
IP address blocks: 103.226.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Oct 2025 22:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
88:30:3f:1a:67:ed:6a:4c:81:25:2d:9e:9c:8c:48:ba:af:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Validity
Not Before: Jun 4 18:55:00 2025 GMT
Not After : Jun 3 19:00:00 2026 GMT
Subject: CN=C2768004862C0674A0BBC5CB4E1E30339EFB09D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:08:90:13:29:17:96:f1:81:0b:3b:20:78:
f4:10:03:d1:41:ae:0b:9d:74:dc:af:0c:7d:9d:b3:
52:ab:20:7d:fd:57:9d:6a:9a:96:1b:96:6e:9f:65:
b0:79:70:d3:0e:24:14:11:3f:7a:9c:47:70:4b:0f:
ac:0e:9a:a0:59:32:d9:6f:95:e6:0c:be:88:06:98:
52:b9:8e:50:e0:f4:90:6c:7c:70:f4:21:e9:a9:e2:
06:31:18:db:de:ad:56:59:5d:3b:9e:9b:13:9b:b2:
b5:b0:22:72:0a:4c:62:a4:5a:20:53:57:2a:fd:db:
38:23:ad:9c:36:27:b7:ae:18:20:54:91:0b:e4:1f:
1c:d0:0b:94:e0:56:7f:27:0b:4b:ff:aa:20:fe:7c:
34:39:7f:9e:ca:a9:50:7d:5a:dc:7e:a9:ad:69:c7:
0b:ed:d6:cb:b8:75:8d:60:6a:96:a5:a7:98:46:34:
24:0b:ec:e9:29:47:76:7c:63:48:31:51:18:0c:dd:
e6:1e:45:a0:86:a8:de:db:1f:e3:1a:e4:2e:93:85:
31:d1:df:16:23:fb:d3:58:96:e1:50:dd:dd:0b:63:
ac:a3:33:80:8b:e9:73:cb:10:85:e4:1a:db:63:a2:
8b:72:a6:88:1e:58:88:15:c0:76:53:c0:73:66:46:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:80:04:86:2C:06:74:A0:BB:C5:CB:4E:1E:30:33:9E:FB:09:D5
X509v3 Authority Key Identifier:
keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32322d3232203d3e203539323733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:04:c0:1e:99:97:db:89:10:50:5c:f2:d0:d1:94:23:13:90:
eb:97:9f:e8:d9:d2:9e:7a:f1:1c:31:57:ad:f6:af:c1:ef:eb:
b4:a5:6e:99:f3:d8:5e:af:a3:9a:39:8d:18:b6:10:ef:3f:b6:
67:5e:6b:11:cd:8a:48:b0:e7:22:94:69:2b:1f:52:d6:2c:9a:
d1:55:b9:42:09:0a:3f:ff:b4:cb:bd:17:fa:61:24:aa:89:21:
4f:22:30:de:06:1a:9b:f3:f1:61:db:56:ad:aa:19:fc:7b:5a:
fc:4e:9b:f0:aa:95:cb:3b:46:86:1e:5a:c2:f1:68:81:2b:e5:
69:45:b7:10:8d:0b:eb:8f:4f:b8:a6:0f:ff:41:fc:a1:8b:aa:
83:a5:c7:9d:65:24:fd:42:0a:73:25:4b:b9:df:db:07:5b:d2:
e5:88:e2:3f:52:60:23:04:74:11:39:b6:0c:c3:55:70:24:14:
9f:a0:20:b2:b0:d1:64:0f:8b:61:26:6e:36:0a:1a:1b:4c:7c:
92:39:e0:d8:50:c1:98:40:71:88:46:0d:15:5c:77:e4:b9:03:
a7:ac:e0:59:4c:67:5d:90:d7:0b:da:8b:4e:bb:3a:70:30:b0:
3a:44:9d:47:e6:09:ea:62:19:dc:59:28:71:9e:90:b1:aa:05:
23:a5:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:32:13 2025 by rpki-client