
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
File: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=
Subject key identifier: F0:F8:14:E1:28:CC:CA:8D:40:2B:8D:6C:9C:B2:35:32:B1:50:60:D0
Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial: 7BC5AD0C717DF2B5E10A2C534B783C0725021206
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
Signing time: Mon 02 Jun 2025 02:03:33 +0000
ROA not before: Mon 02 Jun 2025 01:58:33 +0000
ROA not after: Mon 01 Jun 2026 02:03:33 +0000
asID: 58369
IP address blocks: 103.140.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Oct 2025 18:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c5:ad:0c:71:7d:f2:b5:e1:0a:2c:53:4b:78:3c:07:25:02:12:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Validity
Not Before: Jun 2 01:58:33 2025 GMT
Not After : Jun 1 02:03:33 2026 GMT
Subject: CN=F0F814E128CCCA8D402B8D6C9CB23532B15060D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:f4:2a:28:da:e0:4b:35:69:c9:de:cf:cf:
61:27:b8:78:cc:42:be:81:cd:c4:c0:e9:8f:e6:ce:
34:43:c2:8d:46:a3:51:df:63:c4:2b:e1:e5:32:a4:
c9:74:9c:a2:f9:ed:2e:8c:f2:86:7d:5b:35:10:bf:
26:60:42:0f:b1:0f:14:6c:ad:46:c3:33:e3:3a:b4:
96:d2:34:94:dd:eb:40:c4:00:9b:91:fd:7e:74:61:
86:8e:47:f2:61:b2:51:47:8f:87:61:bb:e2:b4:7a:
2d:32:9e:8c:6d:31:51:2c:ca:b0:7b:d5:79:93:8a:
4a:aa:a4:74:33:bc:aa:e0:a7:de:6c:17:dc:02:3a:
e9:31:09:89:5b:c7:8b:1f:cd:dc:4a:63:a4:e6:cb:
29:51:06:ac:ad:62:c7:2d:f7:cc:67:48:30:81:10:
00:48:2a:41:84:7b:86:c6:b5:43:c5:5c:ef:c5:c7:
32:12:58:94:6e:23:a8:8e:b3:ac:6e:6d:33:ba:75:
2b:25:48:ee:3c:80:fc:3b:aa:c8:07:d2:17:06:30:
61:65:26:80:85:d8:90:9d:4a:ec:82:65:c5:96:7c:
e1:b0:79:f3:5b:56:13:94:f7:01:19:c3:5e:3f:e8:
64:77:53:db:46:9d:76:9a:45:dd:a3:01:ba:5a:fd:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:14:E1:28:CC:CA:8D:40:2B:8D:6C:9C:B2:35:32:B1:50:60:D0
X509v3 Authority Key Identifier:
keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:9d:da:b1:52:74:04:ef:68:ae:e0:a8:f6:e7:fd:d9:f4:4e:
80:1c:0f:57:40:4d:d4:05:7e:21:88:4e:65:39:20:1f:ef:62:
ec:6e:4c:df:b0:a6:ed:a5:e2:b4:85:87:1b:cb:b9:17:29:2d:
50:ac:ed:9d:05:88:3e:7b:77:7a:0d:52:5a:92:8e:71:64:02:
31:eb:12:39:56:2e:6e:f9:a7:85:d7:29:93:40:5c:65:d7:0b:
69:02:64:00:7e:12:60:bc:73:f2:d8:36:77:c2:04:64:be:e1:
ed:03:ae:ea:5b:1b:84:ce:79:82:98:0e:7e:c1:31:86:d8:4f:
2b:11:2c:b9:c8:25:56:3e:90:74:50:71:bf:78:58:13:ef:89:
a0:cc:9d:a1:32:f7:c9:c6:f1:9a:54:94:30:45:8f:e9:df:dd:
90:a4:e5:54:0a:d9:5d:23:a6:5a:88:fc:9a:e3:99:63:ec:21:
32:17:9e:07:7b:f5:41:d3:e5:31:7b:78:02:0e:cd:28:f4:09:
c3:ad:ee:cf:00:9b:65:5d:b8:33:e6:da:83:a6:c8:8d:a9:84:
86:a9:22:73:49:4f:ae:f1:82:fd:b0:cf:70:eb:bb:e1:1b:36:
91:2b:41:13:8d:4f:b6:9d:4e:9f:2f:5d:7a:18:34:72:ed:d5:
08:e0:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:11 2025 by rpki-client