
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
File: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=
Subject key identifier: 4F:10:C5:93:38:F4:5A:6C:4D:9B:84:19:02:8E:C0:4F:8F:5C:DB:08
Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial: 1D7E2F7BBCE9066F7A6D9C34289AF549A61D93FF
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
Signing time: Mon 02 Jun 2025 02:02:44 +0000
ROA not before: Mon 02 Jun 2025 01:57:44 +0000
ROA not after: Mon 01 Jun 2026 02:02:44 +0000
asID: 58369
IP address blocks: 103.121.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 14:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7e:2f:7b:bc:e9:06:6f:7a:6d:9c:34:28:9a:f5:49:a6:1d:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
Validity
Not Before: Jun 2 01:57:44 2025 GMT
Not After : Jun 1 02:02:44 2026 GMT
Subject: CN=4F10C59338F45A6C4D9B8419028EC04F8F5CDB08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:58:20:84:7e:5d:4c:cf:94:4d:f9:6f:71:
50:13:26:79:57:52:c3:d5:6c:78:b3:a2:65:97:5c:
89:85:da:30:5a:58:68:46:8f:ec:dc:44:5e:3e:17:
d4:7b:41:5b:3f:1d:02:91:75:2c:79:f5:f5:f3:b4:
4b:86:f1:e9:70:60:b0:24:c3:ca:c8:71:96:bb:65:
33:45:e1:04:1e:64:8d:60:97:5e:ef:33:8e:61:a6:
13:58:1d:dc:61:bf:d9:8e:a8:37:3b:87:d9:7c:d8:
48:c7:43:e0:a0:a1:34:11:14:74:f8:3f:f1:d6:f7:
39:e9:28:a2:b3:c9:96:29:e1:92:0e:10:5a:23:3a:
5c:dc:0f:1c:59:c5:e2:b4:be:6e:d0:b6:fa:0e:77:
bc:b9:21:ee:2f:a7:5f:29:51:21:d3:23:38:8b:62:
c5:8c:e5:84:a3:a7:c6:3a:bd:65:36:c2:b3:9d:60:
b0:c4:7a:e3:2b:ef:c5:da:21:38:4a:53:ee:88:28:
b2:4b:a0:e3:db:1d:31:c3:f6:07:9c:29:d2:b6:7f:
ea:c4:07:c2:28:77:52:fb:c3:c7:6a:fe:e4:38:74:
22:ef:0d:9d:cb:84:18:ad:dd:b9:8f:9a:4d:20:29:
70:1b:77:1e:66:0f:7c:c7:26:36:b4:d1:71:f5:39:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:10:C5:93:38:F4:5A:6C:4D:9B:84:19:02:8E:C0:4F:8F:5C:DB:08
X509v3 Authority Key Identifier:
keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d9:50:eb:bf:b0:ac:24:69:a4:40:c8:ac:a4:77:d6:17:63:
85:07:f9:87:12:01:38:62:72:a2:e9:03:ac:55:66:48:d8:92:
ec:06:0d:9f:04:b9:67:c4:f3:cc:2a:b0:a1:1f:d2:18:83:f6:
53:56:8a:16:09:1e:08:fc:b9:c7:32:e5:ba:48:e6:f0:00:14:
13:bf:db:3e:5f:a9:bc:03:58:0d:b9:de:e9:dc:ed:d9:42:16:
4c:bf:e6:b3:3c:64:bd:80:17:63:43:c2:d1:99:67:24:c2:64:
87:5f:61:35:a4:b2:0d:69:95:85:9e:56:a3:0a:24:eb:35:cc:
17:ac:ae:0a:f4:e8:06:b3:70:ab:76:36:9d:52:6c:89:c2:8a:
53:67:c4:0b:05:6f:b9:c4:5e:47:4a:e9:5c:7a:94:e9:f8:b1:
45:78:14:77:8c:90:38:4f:c5:2a:f1:2e:d0:01:25:04:9d:68:
f5:a0:77:6a:2a:68:90:bb:96:6f:26:27:98:14:46:16:34:a1:
a2:50:0b:7f:74:19:1d:a0:c9:b4:53:8e:3a:20:48:44:cc:04:
2f:ef:e9:7c:df:e9:50:5e:40:e9:42:25:82:6f:8c:17:44:08:
d8:9b:30:4d:04:cc:88:f2:b4:1e:f4:e9:a6:b0:81:10:15:a9:
64:11:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:41 2025 by rpki-client