
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
File: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (raw, json)
Hash identifier: ocoZWOXebE29PM9wf4GH+eYs09gSTcPRxglrbyGrg6Y=
Subject key identifier: AE:98:E3:8D:85:D2:4A:BB:EC:D1:01:67:46:47:71:84:FD:80:CF:DE
Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial: 3ADA517A1A3E39FE376846A3753607DF28161246
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
Signing time: Tue 04 Nov 2025 07:02:29 +0000
ROA not before: Tue 04 Nov 2025 06:57:29 +0000
ROA not after: Tue 03 Nov 2026 07:02:29 +0000
asID: 149320
IP address blocks: 103.178.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:da:51:7a:1a:3e:39:fe:37:68:46:a3:75:36:07:df:28:16:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Validity
Not Before: Nov 4 06:57:29 2025 GMT
Not After : Nov 3 07:02:29 2026 GMT
Subject: CN=AE98E38D85D24ABBECD1016746477184FD80CFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:10:00:f7:d3:da:6c:7f:19:b8:08:cf:3b:
61:9c:7d:f1:4c:b6:79:0f:78:6b:40:ea:00:52:45:
40:63:c1:47:a7:a6:b5:22:ee:94:f0:61:1a:38:cc:
0c:76:6d:12:cf:62:42:17:96:b0:8b:7c:01:f8:42:
dc:4b:70:87:ea:bf:28:7d:d1:6b:ab:03:51:31:cf:
f6:09:c1:94:3a:6f:d2:86:19:fa:fe:23:dd:59:ff:
f8:19:68:43:8d:37:e0:21:c8:4f:5a:af:f6:dc:7a:
62:db:2d:7a:b1:d8:dd:e4:37:16:78:bd:a4:97:a2:
ad:b7:14:e1:09:d5:91:63:67:b3:05:66:36:9d:1e:
fc:de:f3:2c:85:1c:ec:6b:87:ea:5b:e4:03:82:51:
50:70:c1:72:2d:a1:79:54:e8:b9:e2:1c:09:f0:21:
cf:b1:17:86:51:fb:25:08:1d:94:c0:6a:ba:07:cb:
6d:b1:e7:56:b3:c8:ff:6f:e9:1a:97:4f:d7:51:cc:
00:82:83:f4:2b:38:80:90:f1:ff:19:83:90:62:70:
78:b2:64:13:fa:bb:c7:7f:36:17:ee:fa:62:6a:0e:
ce:ef:39:81:ab:23:33:07:06:3e:5d:63:3e:82:2c:
6b:3f:8e:26:8f:5a:9a:d5:e4:6d:ca:c2:4d:fb:0d:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:E3:8D:85:D2:4A:BB:EC:D1:01:67:46:47:71:84:FD:80:CF:DE
X509v3 Authority Key Identifier:
keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:34:03:af:ae:b8:50:ba:9a:cd:a9:6d:e4:c3:f0:d7:4a:60:
41:3d:ad:7e:ad:06:46:0c:17:ea:a2:44:b9:9a:ff:98:9b:5f:
a4:66:ad:4b:2e:a3:4c:f5:f7:5e:02:e1:42:cf:b8:45:a2:a3:
5f:a3:4e:59:29:6b:3b:72:9b:09:ec:17:3e:1e:1c:f6:61:5e:
ab:75:dc:07:d1:6e:55:c9:9e:cb:ed:45:4a:ee:cf:53:10:e1:
97:f2:35:b5:1b:ae:91:17:4f:57:cc:bc:02:66:8f:f7:b4:40:
b4:6f:aa:dc:06:f7:89:43:37:21:35:8c:88:d7:2b:3a:88:b0:
62:72:3c:e5:76:6a:dd:b9:23:3f:2a:28:fa:3a:b1:67:4b:8d:
42:34:90:d3:55:0f:bc:4d:84:a3:38:85:d0:13:d3:aa:93:91:
1a:24:58:20:7c:b1:ac:18:c4:86:d3:a4:7a:e5:e2:37:99:1a:
96:cb:21:ea:63:32:64:70:55:4b:57:19:be:8e:da:7e:79:e0:
5a:5c:47:56:a4:1e:78:b7:78:bd:5f:b5:21:30:72:77:ef:ca:
82:98:5b:8c:24:ad:2e:6e:4a:3f:50:6e:32:39:46:63:17:c7:
47:a1:b3:f3:1f:33:05:c2:93:a2:17:a6:ec:1c:94:da:b2:98:
9f:bd:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:16:16 2025 by rpki-client