
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=
Subject key identifier: A9:3E:30:EE:0A:1D:D5:88:F4:5A:89:E0:28:30:72:3C:60:16:8F:5A
Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial: 71F7E3DA3F85EC6B5427015A4806EE386DE23695
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
Signing time: Mon 03 Nov 2025 15:00:02 +0000
ROA not before: Mon 03 Nov 2025 14:55:02 +0000
ROA not after: Mon 02 Nov 2026 15:00:02 +0000
asID: 136087
IP address blocks: 103.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 18:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f7:e3:da:3f:85:ec:6b:54:27:01:5a:48:06:ee:38:6d:e2:36:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Validity
Not Before: Nov 3 14:55:02 2025 GMT
Not After : Nov 2 15:00:02 2026 GMT
Subject: CN=A93E30EE0A1DD588F45A89E02830723C60168F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:ee:13:a4:8a:97:96:df:3d:f4:93:93:eb:
db:16:b9:ae:36:f6:df:68:9b:84:31:9b:87:ce:32:
18:c9:c0:38:6b:44:5c:8d:c0:f4:94:39:e4:f5:4b:
c1:ea:d7:1d:08:97:0a:7c:05:45:5c:9a:1f:24:dc:
e1:73:f7:4b:7d:61:cb:07:45:7d:e7:2c:7a:dc:2b:
08:5d:ae:e4:61:23:f4:64:29:04:ea:2f:f5:5b:dc:
75:45:23:09:e1:59:57:01:0e:83:b0:62:b4:73:ac:
2f:28:23:66:5f:bd:23:5b:1b:2c:35:c7:95:d9:42:
44:68:e1:db:37:10:d5:15:f6:6f:43:5b:f6:91:83:
54:f8:82:84:33:77:25:99:64:da:07:98:cf:ed:50:
eb:3e:b9:ad:6b:c5:6a:4d:89:a5:cd:28:80:60:86:
74:e4:96:a9:32:59:4c:d5:69:09:2f:15:a8:1d:1a:
47:71:c0:99:20:f9:2d:49:13:1d:a8:0c:72:06:0d:
4f:d4:d9:ba:1a:b3:e1:0e:4c:ce:b0:af:c4:4b:21:
5c:ed:7c:0f:01:c4:f3:e5:9c:d6:dd:b2:6c:de:76:
05:b8:6f:c9:92:6b:51:43:41:b9:65:23:3f:ae:81:
cd:db:87:c0:5b:73:a9:4b:ab:30:f4:c7:fc:94:a5:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:30:EE:0A:1D:D5:88:F4:5A:89:E0:28:30:72:3C:60:16:8F:5A
X509v3 Authority Key Identifier:
keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bc:76:38:67:1a:57:c3:c1:fa:24:32:ab:8e:4f:e1:2d:7b:
ff:82:34:0b:81:9f:cf:27:06:ad:1e:8d:22:ba:93:d7:8d:52:
6d:9a:e3:34:a8:bf:7b:1a:59:b6:7b:24:fd:cc:96:5d:c1:15:
2b:18:b3:69:67:a7:53:ba:4f:7e:eb:b6:9d:4f:cc:60:c9:56:
01:4b:c0:39:d6:20:73:80:6c:f2:8b:0d:cf:a1:76:e5:90:92:
e1:86:5b:30:05:e8:11:01:0d:1b:85:51:08:b8:97:b0:2e:d7:
ea:92:9f:dc:02:9f:5b:4a:4c:26:2c:75:67:f9:d4:53:51:c9:
05:75:2d:d2:b9:1a:a5:d1:73:45:8e:e9:d8:67:de:90:37:15:
9c:bd:a9:4e:cf:bf:c5:ed:ef:38:69:9b:a3:c4:22:17:e7:ba:
1e:08:9c:cb:9a:c2:ec:63:5c:9c:34:6c:b1:4b:a3:6c:f8:c6:
ce:89:8d:be:42:6d:0e:90:13:f8:14:e9:94:59:ec:b3:d5:8c:
20:34:93:8d:cf:8d:f3:d7:15:ff:15:c0:6f:c4:08:db:1b:56:
89:23:16:ab:c9:b5:81:27:e6:fb:99:2c:c5:d3:bc:38:6b:30:
f7:fd:06:c7:76:6e:05:11:36:62:1a:08:2d:84:c3:2b:55:e8:
e4:51:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:17:25 2025 by rpki-client