
$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
File: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (raw, json)
Hash identifier: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=
Subject key identifier: 9E:7C:74:A1:50:F7:61:AE:0F:29:7D:A2:F0:BC:69:DD:38:4C:50:CB
Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial: 660B36AC808895974E7D13E670FBC71D3D8E8523
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
Signing time: Fri 25 Jul 2025 18:02:21 +0000
ROA not before: Fri 25 Jul 2025 17:57:21 +0000
ROA not after: Fri 24 Jul 2026 18:02:21 +0000
asID: 59288
IP address blocks: 103.229.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 09:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0b:36:ac:80:88:95:97:4e:7d:13:e6:70:fb:c7:1d:3d:8e:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Validity
Not Before: Jul 25 17:57:21 2025 GMT
Not After : Jul 24 18:02:21 2026 GMT
Subject: CN=9E7C74A150F761AE0F297DA2F0BC69DD384C50CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:33:8a:44:ef:a6:b9:9d:66:7d:26:5b:12:
69:c8:3c:e1:14:df:a1:89:87:e2:d7:02:10:41:26:
4d:b6:78:5d:58:29:47:cb:6d:d9:3c:63:8e:2c:da:
e8:d4:98:7a:8a:c6:a2:b5:f1:bf:86:db:45:f4:f4:
93:af:79:b1:c0:fa:99:19:5b:12:23:9d:90:a1:99:
fe:73:75:05:fc:62:a3:94:07:01:17:c9:97:01:da:
0c:7e:43:68:86:9c:59:eb:b5:69:b3:e9:a9:06:24:
74:c8:bc:6e:ec:d2:1e:93:1e:03:8b:94:b1:41:bd:
6a:cd:b4:7b:6f:53:57:cf:24:ec:d4:78:b4:16:57:
c9:df:25:20:17:89:c0:aa:30:0c:e3:81:ed:35:9a:
1c:d5:b0:48:fa:88:15:3c:1e:b4:57:09:e9:a8:69:
9b:7e:db:44:18:95:1c:c3:03:74:8c:fe:b2:41:01:
15:6b:87:85:aa:05:13:97:bf:54:b8:24:76:64:17:
60:0f:2a:57:b6:86:9e:62:f3:e9:78:1c:cd:81:98:
e0:da:a6:f0:52:eb:97:2a:2e:c0:55:5e:15:26:c3:
86:40:72:37:f7:0f:0a:da:c7:97:65:20:2e:61:e8:
27:01:f0:96:fa:17:eb:72:23:5d:db:e5:d3:18:75:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:74:A1:50:F7:61:AE:0F:29:7D:A2:F0:BC:69:DD:38:4C:50:CB
X509v3 Authority Key Identifier:
keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:99:69:80:42:59:c0:90:60:8c:0a:0a:40:eb:ca:4e:38:11:
ca:61:60:51:37:5e:0d:c1:2d:c2:38:8d:bd:c0:01:82:d8:df:
aa:6f:73:1f:93:3a:fe:7b:8e:da:9a:73:0a:c5:29:8f:9e:25:
9e:c8:1a:e7:67:53:57:ea:04:d2:fa:72:cd:c1:22:1e:5b:0a:
a8:f7:b5:7c:e8:aa:70:41:8b:38:8c:86:91:c1:5e:50:61:11:
fa:fa:71:a5:22:35:07:19:28:1a:54:e5:12:cf:a1:50:15:20:
a8:c8:ea:1b:ab:7c:5a:46:82:0f:b2:fc:d1:58:6d:f2:81:b1:
bf:30:bf:6e:27:5e:cc:3c:44:88:e3:5d:90:c1:8b:21:40:41:
2b:51:d2:93:1c:85:ba:03:55:e3:58:f1:f2:ca:6e:29:f8:69:
2d:a8:ea:a5:c6:04:4c:a9:ef:10:c0:ab:a4:d2:65:ff:f3:61:
b3:10:3c:fa:1d:41:db:2a:d9:e2:c2:77:17:cd:87:4b:18:fb:
cf:9a:59:38:38:10:77:ad:c7:9c:cc:a8:0f:6a:d3:0f:73:8f:
0b:38:7e:b8:50:77:85:d2:38:b5:8f:de:58:6f:86:e5:0e:d7:
36:10:7d:03:d2:94:2d:5b:47:d7:39:b8:15:16:55:f4:b9:5c:
b7:91:b8:8c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZgs2rICIlZdOfRPmcPvHHT2OhSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5
N0U0OTgyRDAeFw0yNTA3MjUxNzU3MjFaFw0yNjA3MjQxODAyMjFaMDMxMTAvBgNV
BAMTKDlFN0M3NEExNTBGNzYxQUUwRjI5N0RBMkYwQkM2OUREMzg0QzUwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+TOKRO+muZ1mfSZbEmnIPOEU
36GJh+LXAhBBJk22eF1YKUfLbdk8Y44s2ujUmHqKxqK18b+G20X09JOvebHA+pkZ
WxIjnZChmf5zdQX8YqOUBwEXyZcB2gx+Q2iGnFnrtWmz6akGJHTIvG7s0h6THgOL
lLFBvWrNtHtvU1fPJOzUeLQWV8nfJSAXicCqMAzjge01mhzVsEj6iBU8HrRXCemo
aZt+20QYlRzDA3SM/rJBARVrh4WqBROXv1S4JHZkF2APKle2hp5i8+l4HM2BmODa
pvBS65cqLsBVXhUmw4ZAcjf3Dwrax5dlIC5h6CcB8Jb6F+tyI13b5dMYdStJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUnnx0oVD3Ya4PKX2i8Lxp3ThMUMswHwYDVR0j
BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD
MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0
OTgyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5M2ViOGY2LWJiNmMtNGVhNy04
NmRmLWIyNDNjNTE2NGQyMi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM2MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+WgMA0GCSqG
SIb3DQEBCwUAA4IBAQCymWmAQlnAkGCMCgpA68pOOBHKYWBRN14NwS3COI29wAGC
2N+qb3Mfkzr+e47amnMKxSmPniWeyBrnZ1NX6gTS+nLNwSIeWwqo97V86KpwQYs4
jIaRwV5QYRH6+nGlIjUHGSgaVOUSz6FQFSCoyOobq3xaRoIPsvzRWG3ygbG/ML9u
J17MPESI412QwYshQEErUdKTHIW6A1XjWPHyym4p+GktqOqlxgRMqe8QwKuk0mX/
82GzEDz6HUHbKtniwncXzYdLGPvPmlk4OBB3rceczKgPatMPc48LOH64UHeF0ji1
j95Yb4blDtc2EH0D0pQtW0fXObgVFlX0uVy3kbiM
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:34 2025 by rpki-client