
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa
File: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (raw, json)
Hash identifier: uhlzYip1Vr9wq1FIVgoBLWnymsgGUspFrO9lWq8rb2g=
Subject key identifier: D6:BA:C1:0B:7C:43:13:53:6A:32:DA:3E:48:55:71:FB:7D:95:0F:86
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 2002E61B98CFF0959438C83933E667AB852F028A
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa
Signing time: Tue 14 Oct 2025 11:02:18 +0000
ROA not before: Tue 14 Oct 2025 10:57:18 +0000
ROA not after: Tue 13 Oct 2026 11:02:18 +0000
asID: 147137
IP address blocks: 103.177.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:02:e6:1b:98:cf:f0:95:94:38:c8:39:33:e6:67:ab:85:2f:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Oct 14 10:57:18 2025 GMT
Not After : Oct 13 11:02:18 2026 GMT
Subject: CN=D6BAC10B7C4313536A32DA3E485571FB7D950F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:68:ef:5f:90:2a:45:8e:eb:f5:db:9c:eb:
1c:77:35:ad:28:44:06:12:57:3a:30:5b:a6:9e:08:
3d:70:fa:53:54:a7:e5:ee:95:6f:5d:c9:93:2b:6c:
26:34:ae:76:a0:0c:17:67:8b:b8:31:19:2a:1e:1c:
5c:08:bc:47:e9:0f:93:b1:8e:6c:08:60:5d:7c:c8:
23:e9:78:bb:e0:4b:a1:c0:8f:8d:70:18:fc:2c:c6:
31:d8:0a:de:23:68:75:8e:f6:03:1f:ca:a7:3d:36:
90:f8:40:d0:f6:31:0f:a5:e4:21:f0:ff:05:8a:95:
29:27:fa:f7:49:d0:c3:70:b9:62:39:e3:76:9e:4a:
19:5c:8e:8e:8c:54:0f:be:07:7b:c6:fc:e7:d4:59:
4f:c3:e2:34:5b:26:6d:8d:cb:ba:73:8c:8d:99:fc:
ed:d1:9d:a5:d5:a3:9d:49:8e:e3:7e:ef:c0:4a:1c:
fb:3a:c3:a3:fa:c4:51:4f:4f:a2:76:68:1f:00:7d:
d3:a2:09:02:2d:ac:61:0b:0f:91:6c:0a:91:db:55:
c8:8e:cc:2c:ef:2c:f5:cd:fa:7a:7f:e1:76:e4:98:
a9:ea:26:a5:29:95:96:49:d9:a0:22:f9:88:dd:28:
a5:d9:a6:de:ff:69:1b:e2:04:15:af:5b:e2:59:bd:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BA:C1:0B:7C:43:13:53:6A:32:DA:3E:48:55:71:FB:7D:95:0F:86
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.8.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e7:ec:64:3d:ec:ea:91:15:00:8a:9e:16:88:7e:ca:fd:99:
06:00:f3:07:da:68:7e:e9:44:fc:a9:f5:3b:33:6b:06:9c:aa:
c1:1a:2a:90:51:c1:3e:5c:6f:1c:1a:5e:4a:25:9b:13:86:50:
3e:91:a9:8f:e6:2b:c5:af:20:b2:c0:b9:6f:a0:fa:7b:17:78:
4d:fd:18:22:7a:bf:33:e4:5c:d2:16:cd:a6:37:fe:e4:58:3d:
80:02:9f:3e:08:3c:8c:df:87:75:ba:e3:8b:98:91:a3:9b:44:
38:f8:15:6f:2c:22:a0:5d:73:f4:5f:21:d0:37:8c:91:ac:d1:
1c:31:41:c1:02:bd:bf:0e:bb:ea:03:c6:2a:2d:5d:6a:d8:30:
a4:6f:bc:9c:7b:3e:a0:0a:ba:7d:fe:49:ed:a1:16:22:01:0b:
80:f8:da:4b:d7:25:fd:c9:82:49:9c:8c:f4:3f:08:ba:87:7c:
be:f4:9c:bf:5f:09:bc:d0:f5:60:97:57:e7:65:3f:fa:e9:d5:
0a:2c:58:b3:78:94:88:ec:7c:b1:45:2e:b2:aa:c7:c8:65:02:
94:40:65:89:49:4a:a5:cb:18:29:07:19:66:60:ad:c3:e8:be:
64:23:10:b8:9c:2c:7e:df:f9:95:c4:c0:f5:32:5b:47:ef:24:
6a:23:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:08 2025 by rpki-client