
$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
File: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=
Subject key identifier: EF:A4:DA:BF:3A:4D:5A:68:AC:2D:8C:2F:5E:42:B8:BC:22:98:36:A5
Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial: 6FE2A0D9CFEF0FF3F02A2F8D827710CC6B48247A
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
Signing time: Mon 02 Jun 2025 02:04:56 +0000
ROA not before: Mon 02 Jun 2025 01:59:56 +0000
ROA not after: Mon 01 Jun 2026 02:04:56 +0000
asID: 58475
IP address blocks: 103.23.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 23:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e2:a0:d9:cf:ef:0f:f3:f0:2a:2f:8d:82:77:10:cc:6b:48:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Validity
Not Before: Jun 2 01:59:56 2025 GMT
Not After : Jun 1 02:04:56 2026 GMT
Subject: CN=EFA4DABF3A4D5A68AC2D8C2F5E42B8BC229836A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:ed:29:16:d2:6e:4e:7d:fc:75:3b:92:7a:
cf:67:8f:bf:2b:af:ea:85:d8:0b:11:a8:d6:54:7f:
3d:49:09:ee:f2:d4:72:49:f2:cf:34:15:a1:4e:e1:
58:09:f7:7a:e8:20:eb:bd:b3:aa:5c:6b:d5:c5:c7:
e8:c6:ac:9e:ae:04:4c:0c:3d:bc:bf:e7:00:84:4c:
a0:1c:a3:0c:8a:63:fa:f7:75:99:7a:1d:df:a2:a4:
95:1e:3f:ee:8b:6e:2c:cc:67:c2:01:44:c8:de:6b:
f0:de:b5:b7:65:9f:65:58:8d:c2:21:c6:80:a4:48:
dc:ad:36:13:76:31:b2:0d:be:ee:ad:62:18:94:14:
8a:ac:f5:88:01:eb:a2:1a:a2:0a:8e:7f:16:af:22:
19:43:49:4f:c2:9e:00:4e:df:2a:4f:98:71:85:a7:
e6:52:25:63:68:54:7d:40:73:a2:9c:40:f2:d6:40:
eb:ad:d4:be:69:1b:d4:67:9e:43:ae:54:f8:42:12:
bc:00:76:39:a5:97:17:86:61:20:c3:19:b8:7c:df:
2d:cb:62:2a:dd:fe:c1:0f:4a:a8:2d:85:81:eb:fe:
06:f2:cb:cd:49:38:fc:4b:42:4e:0f:ca:58:3c:5a:
6c:1a:04:57:68:d3:15:9b:a1:06:23:87:1a:23:50:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:DA:BF:3A:4D:5A:68:AC:2D:8C:2F:5E:42:B8:BC:22:98:36:A5
X509v3 Authority Key Identifier:
keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.232.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f5:30:34:b3:b7:d0:67:5c:5c:17:7f:51:ff:3e:be:77:a3:
2d:75:5c:d7:d0:76:59:4f:6e:1b:06:19:80:d6:d7:ea:42:e5:
e2:75:1d:41:cb:c9:8f:98:01:ba:70:58:e0:2d:19:be:e9:b7:
8d:fe:e8:1c:8d:c4:57:90:27:1c:5e:6a:65:92:9f:d8:54:aa:
db:cc:45:f7:50:04:54:9c:78:ea:3c:fb:d1:c3:bc:20:0e:2d:
b7:1f:84:71:28:fe:d9:94:b6:65:1d:b9:55:bd:fe:e6:92:93:
c2:f3:4e:99:4c:e8:8f:6d:ff:7b:a9:6b:c3:e8:6d:ac:32:3e:
94:67:30:32:ee:bc:43:c5:e8:89:8d:3e:64:e7:dd:27:33:b8:
70:fd:ff:ea:7f:d0:dd:53:75:06:f4:84:2a:e0:2f:fa:02:02:
53:85:f9:df:cb:bf:9d:65:12:99:bb:6c:cb:d1:86:fd:3f:ea:
28:7f:0f:6d:c3:c3:df:9c:cd:cd:be:ec:90:f5:6b:75:a2:92:
78:70:e2:ac:4e:38:d2:b2:62:76:4c:25:0f:a1:56:c4:bc:c8:
45:1f:61:0a:de:7e:8f:e7:7f:bb:f2:3d:fa:e0:61:85:e7:39:
f7:7a:36:e9:60:aa:ef:ec:db:bf:79:e8:8a:1e:a3:ed:40:90:
5c:3d:c9:36
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb+Kg2c/vD/PwKi+NgncQzGtIJHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG
REQ5N0I5ODAeFw0yNTA2MDIwMTU5NTZaFw0yNjA2MDEwMjA0NTZaMDMxMTAvBgNV
BAMTKEVGQTREQUJGM0E0RDVBNjhBQzJEOEMyRjVFNDJCOEJDMjI5ODM2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ke0pFtJuTn38dTuSes9nj78r
r+qF2AsRqNZUfz1JCe7y1HJJ8s80FaFO4VgJ93roIOu9s6pca9XFx+jGrJ6uBEwM
Pby/5wCETKAcowyKY/r3dZl6Hd+ipJUeP+6LbizMZ8IBRMjea/Detbdln2VYjcIh
xoCkSNytNhN2MbINvu6tYhiUFIqs9YgB66IaogqOfxavIhlDSU/CngBO3ypPmHGF
p+ZSJWNoVH1Ac6KcQPLWQOut1L5pG9RnnkOuVPhCErwAdjmllxeGYSDDGbh83y3L
Yird/sEPSqgthYHr/gbyy81JOPxLQk4Pylg8WmwaBFdo0xWboQYjhxojUOiPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU76TavzpNWmisLYwvXkK4vCKYNqUwHwYDVR0j
BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC
MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5
N0I5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4ZjM5YmQ0LWNkYWMtNDFjZi04
ODU4LWQ3NDEwZjY0ZDE1NS8wLzMxMzAzMzJlMzIzMzJlMzIzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcX6DANBgkqhkiG
9w0BAQsFAAOCAQEAePUwNLO30GdcXBd/Uf8+vnejLXVc19B2WU9uGwYZgNbX6kLl
4nUdQcvJj5gBunBY4C0Zvum3jf7oHI3EV5AnHF5qZZKf2FSq28xF91AEVJx46jz7
0cO8IA4ttx+EcSj+2ZS2ZR25Vb3+5pKTwvNOmUzoj23/e6lrw+htrDI+lGcwMu68
Q8XoiY0+ZOfdJzO4cP3/6n/Q3VN1BvSEKuAv+gICU4X538u/nWUSmbtsy9GG/T/q
KH8PbcPD35zNzb7skPVrdaKSeHDirE440rJidkwlD6FWxLzIRR9hCt5+j+d/u/I9
+uBhhec593o26WCq7+zbv3noih6j7UCQXD3JNg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:11 2025 by rpki-client