
$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
File: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=
Subject key identifier: 12:5B:BB:0F:2A:63:ED:93:67:A0:D2:47:CF:96:E7:1E:01:95:2E:56
Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E
Certificate serial: 5A83E904D34B3E6C6B8A3E58B03A2BBCD61548A0
Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
Signing time: Mon 03 Nov 2025 11:33:24 +0000
ROA not before: Mon 03 Nov 2025 11:28:24 +0000
ROA not after: Mon 02 Nov 2026 11:33:24 +0000
asID: 140423
IP address blocks: 103.181.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl
rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 12:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:83:e9:04:d3:4b:3e:6c:6b:8a:3e:58:b0:3a:2b:bc:d6:15:48:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E
Validity
Not Before: Nov 3 11:28:24 2025 GMT
Not After : Nov 2 11:33:24 2026 GMT
Subject: CN=125BBB0F2A63ED9367A0D247CF96E71E01952E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:05:78:05:8c:19:c2:ab:f2:e1:54:7a:a5:
43:0e:fa:d3:ae:71:68:c6:e4:3a:cb:1a:64:c2:ad:
05:50:36:97:ee:9f:06:2d:ca:57:89:6f:00:25:4b:
25:e5:c5:81:72:67:d9:37:84:c0:a0:8f:4d:09:38:
e5:91:c7:67:dc:5f:e4:51:ef:2a:c0:1a:8b:bd:30:
9b:e9:df:36:19:bf:54:a0:3f:52:e9:f0:dc:1d:75:
f2:4b:80:45:cf:31:3b:45:91:bd:90:4b:95:f5:79:
65:c2:48:c7:e8:64:c6:9f:00:97:f5:6d:7e:49:ac:
31:05:44:71:96:6d:49:1c:24:6a:1c:47:34:8e:8c:
53:5e:95:12:73:b9:99:b5:f4:96:fc:c0:d9:e2:57:
56:ff:b1:29:92:48:a6:d6:30:d9:6c:3f:f3:39:76:
9a:9d:64:38:80:6a:30:53:6c:cd:14:d2:c1:14:e1:
d2:41:c0:7f:2e:14:6f:6e:a0:cd:9d:4d:fa:6e:6b:
89:1c:06:91:2b:69:23:35:7f:13:f2:ee:f2:47:0e:
00:e4:9c:9f:8e:68:05:58:d9:a8:e0:0e:f4:f9:da:
b7:cd:97:1f:a2:14:e0:ac:7c:63:a9:5b:23:27:f5:
56:b0:97:e5:bc:c3:08:ae:f8:ae:08:5d:63:60:9e:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:BB:0F:2A:63:ED:93:67:A0:D2:47:CF:96:E7:1E:01:95:2E:56
X509v3 Authority Key Identifier:
keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.77.0/24
Signature Algorithm: sha256WithRSAEncryption
27:05:a7:41:d9:09:29:9c:80:6d:70:82:2e:5f:17:f2:91:8b:
ad:3a:b9:97:9d:f6:76:a6:14:5e:76:2c:d7:4f:55:ea:49:c2:
fe:0e:fa:f7:9c:83:e9:48:f3:ce:0e:c6:3c:5c:75:98:8f:65:
a3:04:8e:05:4c:5a:51:2d:83:0a:e4:67:87:78:6a:0a:e4:67:
cc:ce:7a:24:7f:7b:b9:4a:7b:ba:59:37:b8:e4:1a:96:37:3c:
25:19:f1:9b:e7:29:1b:f8:c1:7c:0a:0c:51:2a:d7:52:d5:af:
60:92:9d:d2:a2:5e:92:60:fd:bc:aa:95:95:9e:89:7d:aa:0f:
de:e6:87:8b:02:b0:9c:29:b9:3f:51:3d:c4:c8:22:7f:51:67:
54:eb:4d:89:e3:f5:3c:40:0f:c3:22:a2:b4:cf:df:0e:41:bf:
23:a1:90:3d:87:6b:83:8c:08:c0:84:88:19:07:60:d4:05:50:
09:f3:05:49:18:6a:28:b7:6b:2b:04:d9:c5:2a:9f:4a:2d:e1:
4e:80:36:2c:17:5d:51:e1:c9:af:60:e8:c3:b3:0c:2e:2d:0c:
ca:21:c1:4a:3b:4a:c7:08:c6:bb:79:92:a7:11:08:23:6c:ff:
c3:83:ac:1d:f0:9b:16:74:fd:bc:98:da:4a:d9:cd:53:ae:e2:
c2:ae:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:47:32 2025 by rpki-client