
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
File: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (raw, json)
Hash identifier: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=
Subject key identifier: 06:E5:49:3D:8B:A9:E3:8E:98:8D:25:BF:A7:99:D7:DE:AB:8B:48:6A
Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial: 4CDA19154DB38ACB978709F0E04AB55DF0ED7B52
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
Signing time: Fri 16 May 2025 13:00:02 +0000
ROA not before: Fri 16 May 2025 12:55:02 +0000
ROA not after: Fri 15 May 2026 13:00:02 +0000
asID: 149318
IP address blocks: 103.178.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 15:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:da:19:15:4d:b3:8a:cb:97:87:09:f0:e0:4a:b5:5d:f0:ed:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Validity
Not Before: May 16 12:55:02 2025 GMT
Not After : May 15 13:00:02 2026 GMT
Subject: CN=06E5493D8BA9E38E988D25BFA799D7DEAB8B486A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:d9:72:4f:c2:b4:09:84:23:10:d4:20:e1:
cc:00:41:98:4b:dc:25:53:b4:33:f8:b6:08:14:9b:
4d:df:1f:a3:79:99:2b:bd:42:d8:70:79:29:62:b5:
a1:ff:01:a5:10:6b:aa:66:41:68:8f:5e:90:c2:e9:
a3:23:d4:8b:e6:3d:f3:ea:6d:eb:66:bf:7b:96:5c:
67:88:54:2c:c2:aa:05:ff:01:22:74:e8:27:cf:96:
b5:01:cc:70:d0:25:d1:62:16:98:3d:8b:06:d1:a6:
1e:80:73:f8:30:71:44:c8:74:55:55:30:81:42:25:
c6:55:fa:99:c7:0f:89:18:21:d8:e9:79:ee:3c:bb:
f7:2f:ab:cf:d7:40:61:47:9f:e1:89:af:52:d5:c3:
90:26:02:98:a6:05:b7:19:8b:cd:aa:c6:0f:00:f1:
bc:5a:54:8b:44:6b:74:39:d2:70:7e:19:eb:dc:a3:
06:57:48:8e:0b:ed:10:77:2b:77:ac:9e:49:24:14:
24:d6:17:74:12:8a:1e:71:3e:50:d6:fb:9a:37:80:
3c:13:d5:18:e4:68:1c:4f:31:56:1a:04:9b:0b:f0:
11:68:d5:da:47:63:ff:47:7b:d5:a5:26:94:f2:6e:
47:93:f2:82:a6:1b:d1:cd:b1:24:3f:a7:dd:7f:fd:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:49:3D:8B:A9:E3:8E:98:8D:25:BF:A7:99:D7:DE:AB:8B:48:6A
X509v3 Authority Key Identifier:
keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.84.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:0f:be:ba:3f:8b:d7:98:a6:ce:5c:85:3c:75:e8:b2:dd:7d:
c9:ff:ba:a4:08:6d:68:ae:bb:56:76:c6:ed:b7:f2:94:f7:d0:
18:55:0a:21:e5:9b:eb:45:e0:be:a7:9f:93:99:ae:14:50:c1:
1c:6b:f9:c2:86:6e:94:4c:f8:bf:84:43:79:9a:ce:ca:cf:10:
81:28:4e:5a:74:1c:db:ba:b8:94:91:8e:be:48:a7:31:c6:d0:
84:c7:02:8d:c1:c6:90:4e:73:c0:ef:3f:13:90:fe:0e:cc:05:
69:76:b6:40:25:c2:44:bf:66:19:10:de:70:34:1a:9d:36:2f:
16:0a:e4:59:eb:78:7a:9e:66:d2:01:b6:ad:91:33:02:c3:6e:
be:d3:df:07:e9:b4:b4:82:40:21:f0:25:d4:aa:84:7f:d7:ea:
d2:d9:a0:98:ca:40:2d:ea:2b:54:fe:23:2a:54:90:d9:5b:6f:
30:a7:cb:73:b2:ee:09:f4:37:52:9f:8f:8a:eb:94:d8:16:15:
e3:1c:30:0e:40:8d:eb:8b:03:11:c0:5e:18:51:08:38:2d:dd:
30:87:96:1a:67:24:1e:84:1a:e1:59:9a:82:a3:c8:67:5e:de:
7f:bf:59:33:13:31:7f:67:af:59:ca:2d:bb:49:af:15:bd:f2:
12:40:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:40 2025 by rpki-client