
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa
File: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (raw, json)
Hash identifier: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=
Subject key identifier: E3:59:B9:3D:64:42:A5:22:F8:C9:AD:C6:A4:42:A7:67:05:30:FA:AB
Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
Certificate serial: 7FB0E506B95D9C9912E20D195DF6C30B16C6D4B9
Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa
Signing time: Sun 05 Oct 2025 15:00:01 +0000
ROA not before: Sun 05 Oct 2025 14:55:01 +0000
ROA not after: Sun 04 Oct 2026 15:00:01 +0000
asID: 136107
IP address blocks: 103.233.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl
rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 02:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b0:e5:06:b9:5d:9c:99:12:e2:0d:19:5d:f6:c3:0b:16:c6:d4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
Validity
Not Before: Oct 5 14:55:01 2025 GMT
Not After : Oct 4 15:00:01 2026 GMT
Subject: CN=E359B93D6442A522F8C9ADC6A442A7670530FAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:fc:1e:df:b5:f9:aa:ab:0e:45:d1:bb:27:
58:78:47:2d:a1:92:95:7e:fe:26:61:2f:1c:27:03:
13:d9:dd:82:ad:e5:8a:22:6c:cc:50:c9:cf:e7:69:
d3:65:68:70:14:08:4b:49:21:79:1f:5d:14:94:e0:
64:8b:be:14:1a:bb:e8:f3:fa:2d:44:95:10:6e:85:
a8:f6:70:de:31:23:c8:be:c5:1e:5d:16:d8:bb:be:
e6:fd:5e:77:bf:5f:0e:a8:14:74:0a:17:24:22:79:
03:f8:20:86:43:7c:62:c6:d2:a3:6d:9c:59:f0:ef:
2a:17:7d:31:57:6f:1b:fd:68:48:ec:3c:94:62:ae:
3a:14:45:77:48:dc:71:74:6f:b8:ba:66:06:f0:11:
87:13:8d:07:b2:01:8c:ba:49:1d:e1:03:83:8e:1e:
2b:04:9d:04:e6:d7:b3:51:9b:65:1c:a9:06:04:6a:
e9:f7:d5:34:24:8c:26:1f:c7:63:83:44:e5:01:c0:
6f:95:7e:5d:1f:4d:b1:91:ae:30:38:5d:95:ee:3a:
98:91:c4:49:60:fc:2c:03:ea:55:d7:17:42:8a:39:
9c:4d:27:3d:39:f4:ea:67:22:b1:4d:07:2a:45:c8:
d0:71:ba:bc:ef:3b:d3:65:07:52:23:df:62:b5:c3:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:B9:3D:64:42:A5:22:F8:C9:AD:C6:A4:42:A7:67:05:30:FA:AB
X509v3 Authority Key Identifier:
keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:da:24:9f:03:cb:05:ba:5f:a5:8e:ff:74:b9:2a:9e:be:0a:
9e:e0:6b:73:dc:cc:6d:01:0f:46:c5:9f:76:f8:db:58:21:57:
5a:64:ea:9b:68:f9:84:77:86:98:94:12:6e:85:3d:eb:da:03:
05:76:9c:64:3c:d8:7a:a7:05:6b:e0:ab:cd:4e:09:56:d1:e2:
8e:71:61:82:85:4e:81:4b:cf:c2:f9:17:1c:fe:25:68:be:e6:
ba:71:9a:ac:7b:e0:a9:e8:f7:54:ff:c0:f9:4b:35:55:65:92:
92:70:22:f9:49:38:f6:d6:d6:c7:19:74:90:d8:78:ea:47:bf:
4e:1c:e4:68:18:0d:55:d7:37:41:81:4b:75:6f:7f:a1:29:53:
65:e2:a1:fc:92:d3:ea:61:3a:fd:08:b4:13:0b:b5:d7:06:bc:
d3:36:a9:d4:6e:08:c8:64:b0:75:74:e3:94:54:d1:39:b4:74:
a4:55:a9:f9:84:06:25:f0:59:ae:33:0d:60:60:9f:03:dd:0a:
06:d8:f2:f4:74:d4:a5:9f:c1:b5:26:b0:52:9c:4a:29:43:0f:
76:42:5a:62:00:33:9e:8f:98:a2:77:51:e9:cc:3b:c0:0c:66:
ae:ef:6d:c9:25:c2:45:77:07:c1:b3:ba:97:02:e3:fe:6e:d0:
8b:27:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:41 2025 by rpki-client