
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
File: 3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: WFwLbu82eDfKkzO9fL559RlfcHAyVW8VZIUbOGe3XKo=
Subject key identifier: 84:96:BB:D1:3B:33:A0:15:55:B4:1B:23:CE:E1:3D:CB:71:C4:54:A8
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 11F177962D4C8BDB38E116B19B65316D031E0148
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
Signing time: Thu 24 Apr 2025 01:00:01 +0000
ROA not before: Thu 24 Apr 2025 00:55:01 +0000
ROA not after: Thu 23 Apr 2026 01:00:01 +0000
asID: 9341
IP address blocks: 103.206.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 01:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f1:77:96:2d:4c:8b:db:38:e1:16:b1:9b:65:31:6d:03:1e:01:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 24 00:55:01 2025 GMT
Not After : Apr 23 01:00:01 2026 GMT
Subject: CN=8496BBD13B33A01555B41B23CEE13DCB71C454A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:1a:3e:29:ad:89:38:79:03:01:6d:46:c1:
66:17:9c:1e:8d:7a:ab:55:60:fd:f9:27:73:5f:04:
a5:01:72:1c:0d:c0:0b:01:43:4f:9d:25:42:63:e0:
52:c5:ef:ca:0f:45:62:6d:f0:b8:39:d1:6f:66:b6:
50:d7:76:f4:0c:38:aa:21:85:ea:26:5b:b6:96:a7:
85:02:d9:e0:ec:3d:0a:ae:b1:17:64:71:a0:97:83:
fe:9a:00:a8:ac:98:4f:9f:bc:6b:6b:10:fd:ea:17:
58:49:a5:a5:68:4f:52:80:7c:eb:c3:a5:d6:7c:d4:
02:79:f0:6e:49:22:ae:7f:c8:de:36:5d:3d:95:48:
d8:9a:c0:a6:1f:37:c9:ab:79:dd:bd:18:a4:d9:16:
f3:df:d5:cd:9c:fe:2b:95:fd:4a:f4:9a:6b:8b:70:
4f:85:13:82:03:d0:c2:57:72:24:26:10:d8:f3:e6:
fa:8b:b9:83:77:29:0f:4b:30:10:ab:d3:32:56:a2:
73:b0:74:84:25:ee:36:f7:9d:b7:f4:6b:11:bb:e3:
b3:ad:1c:f6:1a:c0:d3:e1:b8:17:9c:99:3a:63:3a:
e2:15:2c:f1:36:88:fc:58:0d:e9:29:5f:2e:47:bf:
a1:de:ad:37:9d:26:97:7b:3d:f9:b0:1f:8c:24:eb:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:BB:D1:3B:33:A0:15:55:B4:1B:23:CE:E1:3D:CB:71:C4:54:A8
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.206.240.0/22
Signature Algorithm: sha256WithRSAEncryption
47:73:e7:b8:34:3b:ad:9f:eb:9e:29:89:ed:9c:b5:6d:b1:95:
be:04:b6:a5:2d:9f:ca:32:7c:72:30:45:d7:0d:a8:dc:99:18:
68:a4:69:df:38:de:18:d5:ba:eb:13:3c:f3:2f:1f:e4:03:f4:
da:89:a3:0e:93:23:4e:01:40:e0:7b:28:29:c4:86:ae:f3:8e:
aa:03:45:be:4e:9d:57:2a:79:92:b7:33:29:1e:93:ed:d2:83:
f5:a9:50:29:2c:9d:81:e2:4b:49:d5:31:12:00:3f:9d:3b:91:
47:62:64:fb:aa:a6:1d:c1:d4:93:02:ab:87:4f:ae:47:d3:c5:
17:44:6e:87:f1:27:34:93:d6:8e:30:3c:46:eb:4f:0c:1c:63:
db:76:63:87:c7:0d:ef:e6:67:b0:24:0c:aa:04:cd:85:7e:de:
47:32:a3:bf:f6:90:d3:58:62:b0:25:3e:67:ed:81:47:3f:5e:
c7:8e:ea:c8:07:5b:58:54:b9:e0:80:98:a8:bb:df:83:b5:c8:
a9:e4:83:ab:d7:2a:10:b0:52:15:a5:2d:df:f6:9e:6e:41:a0:
ec:1f:9b:18:15:fb:de:b5:7c:bb:41:42:56:96:85:71:de:08:
3b:5a:56:5a:01:f8:2d:61:60:8e:76:0f:4e:ef:ce:69:8e:93:
e5:05:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:05 2025 by rpki-client