
$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
File: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (raw, json)
Hash identifier: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=
Subject key identifier: 9E:E9:7D:10:95:D2:23:E3:3C:17:B1:2F:62:66:3D:5C:2C:D3:CC:AB
Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582
Certificate serial: 641654FC365E7508C3EE044D153191498EBE8622
Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
Signing time: Thu 04 Sep 2025 06:00:00 +0000
ROA not before: Thu 04 Sep 2025 05:55:00 +0000
ROA not after: Thu 03 Sep 2026 06:00:00 +0000
asID: 141106
IP address blocks: 103.157.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl
rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 00:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:16:54:fc:36:5e:75:08:c3:ee:04:4d:15:31:91:49:8e:be:86:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582
Validity
Not Before: Sep 4 05:55:00 2025 GMT
Not After : Sep 3 06:00:00 2026 GMT
Subject: CN=9EE97D1095D223E33C17B12F62663D5C2CD3CCAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:98:b2:f6:de:2a:66:03:71:c3:73:58:55:
67:c9:86:15:c5:6f:2d:df:52:5b:bb:d3:b1:cf:08:
c8:3c:82:57:80:6d:a7:b8:df:f7:ab:32:86:43:56:
80:0b:e6:91:4b:59:2f:4c:58:08:3e:53:42:fa:03:
69:18:2f:57:71:57:95:f3:11:20:31:77:a7:80:5b:
97:8e:a0:50:6f:cb:ea:d6:9e:ed:75:32:85:65:98:
b6:40:c6:c4:05:1f:7e:39:29:41:4e:4d:4e:31:46:
77:ca:79:5a:73:86:ea:32:14:aa:68:03:45:1a:47:
fd:1f:c7:fa:2b:57:75:1c:28:1b:58:1d:60:5a:33:
b6:af:0c:50:77:57:10:18:36:f3:dc:b9:97:9c:1d:
9b:f5:f7:c6:86:32:e8:cc:a1:3a:85:18:16:32:90:
cc:e0:aa:86:c3:d0:f7:e1:41:c7:3a:08:4f:d3:e4:
d7:6a:19:60:e9:0d:aa:0c:39:de:8d:3a:c8:49:08:
8f:3d:26:c1:44:fc:d6:29:67:20:92:10:8b:40:b5:
87:bd:f0:7e:e8:68:a2:a9:d2:0a:c8:eb:a3:4f:4a:
c4:b3:5e:17:b2:8f:86:fb:7e:f4:66:74:f1:29:f9:
c5:04:e0:3d:d2:a4:97:c8:62:3d:84:0c:64:e4:e1:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E9:7D:10:95:D2:23:E3:3C:17:B1:2F:62:66:3D:5C:2C:D3:CC:AB
X509v3 Authority Key Identifier:
keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.6.0/24
Signature Algorithm: sha256WithRSAEncryption
db:b2:9f:4f:71:f5:3a:98:52:8a:1b:b1:ac:2b:9e:be:00:23:
a9:e7:a7:3e:cd:e2:36:92:b2:c9:65:c2:9b:90:6d:4f:38:aa:
8b:a2:de:1d:f8:ed:36:16:15:b1:57:45:7a:6a:d4:79:d2:43:
c5:8b:38:03:30:16:78:4b:c0:d1:9d:81:bd:1a:5b:ec:25:c6:
7f:e3:ff:27:5e:85:a7:28:ff:b4:a0:1d:f4:08:74:fb:e6:e6:
3c:55:04:65:f3:23:03:a1:b2:10:4b:c2:fa:30:73:11:ad:c4:
2b:e0:22:11:d6:61:a4:d5:99:fe:e3:5e:96:e7:51:60:7e:86:
4e:32:64:f2:50:61:59:ad:c7:e3:6b:f3:01:e8:f8:c0:c5:99:
47:2d:ab:a0:28:f1:77:67:42:d4:73:c7:25:32:bd:4e:18:14:
78:46:a0:24:38:38:ba:89:b1:b3:23:61:51:fe:9d:16:28:19:
01:42:4d:c8:ca:7f:47:ab:a6:8c:81:85:5f:1b:80:a2:08:c5:
a2:90:eb:aa:f4:7e:5e:8a:78:dd:ee:7f:52:6d:81:48:63:89:
2c:12:dd:23:44:a9:61:f7:95:06:e6:e4:3c:5b:ca:65:72:bf:
a0:72:79:8a:26:87:b4:0b:db:82:dd:c6:98:d3:9a:ba:88:48:
ce:97:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:36:35 2025 by rpki-client