
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=
Subject key identifier: 18:7F:7A:3F:05:35:C2:56:13:0F:FA:DA:E0:B7:09:84:EE:97:CE:0B
Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial: 1CDB7808AEE7CB746512114441B36B125B703384
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
Signing time: Mon 03 Nov 2025 15:00:02 +0000
ROA not before: Mon 03 Nov 2025 14:55:02 +0000
ROA not after: Mon 02 Nov 2026 15:00:02 +0000
asID: 136087
IP address blocks: 103.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 18:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:db:78:08:ae:e7:cb:74:65:12:11:44:41:b3:6b:12:5b:70:33:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Validity
Not Before: Nov 3 14:55:02 2025 GMT
Not After : Nov 2 15:00:02 2026 GMT
Subject: CN=187F7A3F0535C256130FFADAE0B70984EE97CE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:3a:cc:23:14:e9:20:4c:4e:49:7c:27:d7:
71:2c:4e:28:6e:48:a6:d9:da:5a:f7:c6:49:71:d0:
d9:ef:7e:64:e5:4e:a0:0b:dd:c7:26:e9:12:a2:5e:
7c:2b:33:09:f0:24:4c:be:2e:b5:f2:91:44:f7:18:
59:38:15:3a:7d:28:3d:c3:e7:0f:49:b8:bf:93:0a:
83:cb:ff:a0:a4:56:69:50:fc:a3:65:95:1e:c0:8a:
1a:15:64:8c:2b:d3:9e:c5:e1:a1:43:03:a5:1c:43:
9d:4f:a4:db:fc:31:30:40:99:15:73:a3:56:92:fa:
78:b7:ce:5b:b0:1f:07:fe:b7:7d:5a:2e:f4:12:b7:
38:5b:1c:61:8f:d3:44:0b:6b:3a:f5:dc:60:50:62:
b5:82:3c:05:3c:e2:66:c1:e9:3c:d1:9e:38:92:0e:
3c:9b:03:98:9a:65:dc:17:09:19:99:6d:af:fa:1c:
c4:12:73:78:5b:80:38:d7:6e:a4:33:6c:4f:8b:20:
0b:23:1d:bd:33:d5:8a:78:e2:c9:58:04:3d:6a:28:
12:fe:fd:9c:df:1a:24:23:d7:a7:e8:7b:13:e3:23:
71:ab:4d:7b:57:5f:94:b2:1b:57:06:98:68:35:3d:
d4:b7:25:bd:81:e9:e1:a4:d7:ce:be:b8:65:05:da:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7F:7A:3F:05:35:C2:56:13:0F:FA:DA:E0:B7:09:84:EE:97:CE:0B
X509v3 Authority Key Identifier:
keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6b:b3:1c:c6:ac:33:d6:65:fe:6b:dd:30:2f:38:c1:ad:47:
6e:3a:60:72:0b:7f:66:cb:0a:7c:fa:69:50:b2:f1:cc:fa:ec:
c6:64:e1:87:0b:aa:03:ef:e9:81:3a:18:12:dd:38:23:94:73:
3b:fd:9e:01:ef:c4:98:d5:d6:ec:2b:12:06:4e:c5:d7:14:9a:
87:22:b4:1c:64:9c:14:d5:0d:07:49:7a:1a:b8:c3:bf:9a:b4:
30:8f:df:90:7d:7e:97:fd:17:66:0e:f6:d6:92:a8:4f:c6:be:
06:35:15:2a:ab:f9:05:ac:18:8f:54:f0:d5:ab:0a:08:1d:b7:
66:f8:ee:68:d7:f4:43:7c:6a:63:cc:09:95:33:9a:8f:8b:37:
c6:02:79:51:ca:de:61:77:75:c3:a1:b7:79:d8:79:03:8d:31:
5a:a3:e1:af:40:1b:56:ad:2d:6c:8a:ce:40:49:16:48:98:07:
ac:45:e8:8f:09:5f:8d:7b:be:99:e5:f4:56:25:48:44:29:36:
21:f5:67:d0:73:1b:9c:c0:6c:13:1c:ad:4c:9d:8e:27:96:34:
33:8f:1d:2c:f2:4f:1e:e7:55:43:f3:7b:08:7f:3c:64:99:a5:
b0:6d:b8:42:3d:03:1b:d3:30:67:a3:30:c2:99:cc:42:81:34:
12:99:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:01 2025 by rpki-client