
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa
File: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (raw, json)
Hash identifier: 1bNdVmfT+djOhZ89RO79L01jzFp6ENRtflXpl+KJhHY=
Subject key identifier: 3B:65:F8:9A:02:32:7E:FC:45:48:0F:99:DF:DE:38:87:23:00:E2:BA
Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial: 315612FF36CA97D8702EEF5B29611561595ECD53
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa
Signing time: Tue 04 Nov 2025 07:02:29 +0000
ROA not before: Tue 04 Nov 2025 06:57:29 +0000
ROA not after: Tue 03 Nov 2026 07:02:29 +0000
asID: 149320
IP address blocks: 103.178.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:56:12:ff:36:ca:97:d8:70:2e:ef:5b:29:61:15:61:59:5e:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Validity
Not Before: Nov 4 06:57:29 2025 GMT
Not After : Nov 3 07:02:29 2026 GMT
Subject: CN=3B65F89A02327EFC45480F99DFDE38872300E2BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:2b:4b:34:06:52:42:7d:23:95:04:4b:94:
ab:96:e9:7d:a3:41:d2:3b:c7:74:62:89:db:61:d3:
f5:8f:59:3a:d9:dc:25:28:c6:3b:63:75:62:4b:18:
8b:40:d7:c8:91:03:c6:fc:54:7a:82:e0:9d:f7:83:
cf:6d:9f:64:88:ac:df:98:98:26:f1:ed:b2:74:0a:
9b:53:24:03:3b:a0:eb:b5:56:6f:00:f1:84:ef:18:
b8:b7:ae:40:ae:bc:1d:6f:3a:2a:b7:ea:08:47:fa:
4c:e9:3d:d3:9c:0d:2d:08:5f:84:3e:67:c1:72:11:
89:6a:19:ff:6f:50:44:74:c4:96:ec:83:5f:51:27:
ed:1e:35:a9:ac:68:c6:99:d1:18:bd:60:b0:dc:60:
ee:62:1e:9a:9d:26:b3:dd:ef:91:1d:d4:e2:b9:97:
62:54:a2:b8:e5:67:21:15:02:9f:6f:e6:13:63:42:
6a:d0:6a:f2:05:2d:29:41:09:97:1f:4d:b7:59:17:
ec:62:ff:6b:b5:da:3c:bc:3a:52:74:db:d2:e0:03:
f7:91:72:4b:b5:bd:b3:33:d5:6c:6f:3b:cb:ce:0a:
73:cc:dd:18:c7:f7:06:19:80:8b:1e:e4:cb:09:6c:
8d:91:02:ca:79:00:84:37:a9:ad:0c:98:50:fd:a0:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:F8:9A:02:32:7E:FC:45:48:0F:99:DF:DE:38:87:23:00:E2:BA
X509v3 Authority Key Identifier:
keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c1:5d:c4:38:ad:42:87:ad:46:82:22:20:01:cc:4f:d2:74:
2f:95:17:6a:dd:af:a5:00:ee:f2:f4:c9:cb:db:ad:2d:f1:9a:
04:ca:1f:3b:9d:69:90:62:a1:9c:7a:a2:2c:43:4d:3c:ec:90:
d5:a2:cf:97:30:19:12:f2:9d:e9:e3:12:5b:10:d7:58:f3:87:
f1:fe:97:c0:a9:bd:3b:50:89:e3:76:7f:d3:b8:a8:b5:7f:e5:
59:fc:a6:26:96:c6:79:29:b6:3a:85:59:f4:d1:bb:15:78:5a:
63:88:73:ea:19:73:c4:84:6d:fa:70:50:44:55:49:ee:7d:47:
77:13:9e:9b:60:cf:f1:98:8e:c7:16:3e:c6:16:ea:68:de:4b:
c3:46:77:5c:7f:68:f7:05:ed:d6:70:71:88:19:72:63:91:49:
b0:72:ce:f3:79:53:b7:b4:0f:48:0f:00:c6:c5:fa:72:6c:c3:
18:09:e5:ed:f1:dd:bf:42:9e:2a:13:49:96:c5:3b:2d:9a:37:
1a:d0:df:ce:f4:9d:f7:8a:62:de:b0:e0:89:77:97:9a:9d:86:
37:a9:c9:72:bd:4d:6b:fe:ca:cc:70:9c:ce:d0:b6:6b:e5:14:
86:32:48:6c:da:90:6e:2e:de:9e:a7:12:c9:4b:92:19:c7:67:
1f:2c:bc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:20:51 2025 by rpki-client