
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35332e302f32342d3234203d3e203436303233.roa
File: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=
Subject key identifier: AE:A3:10:E9:F7:46:EE:E4:3E:96:87:12:69:FD:13:10:79:19:39:9E
Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial: 0A0E40E7026EC1C1DC596F03EC13B297D8EAD585
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35332e302f32342d3234203d3e203436303233.roa
Signing time: Wed 15 Oct 2025 10:02:05 +0000
ROA not before: Wed 15 Oct 2025 09:57:05 +0000
ROA not after: Wed 14 Oct 2026 10:02:05 +0000
asID: 46023
IP address blocks: 103.75.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 19:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0e:40:e7:02:6e:c1:c1:dc:59:6f:03:ec:13:b2:97:d8:ea:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Validity
Not Before: Oct 15 09:57:05 2025 GMT
Not After : Oct 14 10:02:05 2026 GMT
Subject: CN=AEA310E9F746EEE43E96871269FD13107919399E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:59:7c:ba:91:80:22:4d:1f:e1:ed:7b:3a:
6a:08:38:20:94:da:ce:14:30:4a:fe:3a:f5:ed:e6:
92:10:05:0a:6d:00:d4:00:84:4e:c5:7c:b2:07:07:
84:8e:b1:f4:6a:a9:d2:50:4a:c1:7e:cf:a4:45:e1:
db:d1:fa:ff:83:79:c5:7f:0a:48:51:c9:53:6b:60:
f5:16:da:fb:e9:6d:76:cb:41:76:bc:0b:da:74:fd:
94:e6:a8:db:6b:50:af:95:56:ec:2b:73:66:0c:72:
20:07:3b:2e:f1:cf:05:75:11:2d:33:5c:4b:19:7a:
04:19:8e:fc:15:eb:0c:20:fe:c7:65:c3:70:ad:a0:
c7:10:c4:b2:06:cc:6a:42:57:8a:27:67:60:e8:0f:
66:9a:c8:f3:38:c4:25:67:34:22:23:e5:56:c4:4e:
e7:3d:f4:66:a3:95:08:e9:ee:8d:e9:e8:bf:9b:b3:
5e:4e:25:a1:05:6b:9b:f6:a6:e1:ef:ae:20:c5:67:
c0:5e:96:62:77:d7:58:80:85:b7:e1:4a:b5:3c:9e:
5f:5f:4f:8d:59:71:4b:19:8e:c7:86:50:31:42:6d:
3e:a4:01:7c:67:82:48:54:51:c4:32:87:d2:53:d3:
8d:f5:5a:83:b0:42:f1:01:ec:d0:85:ca:fe:00:00:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:10:E9:F7:46:EE:E4:3E:96:87:12:69:FD:13:10:79:19:39:9E
X509v3 Authority Key Identifier:
keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35332e302f32342d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8b:c9:99:f9:bf:d4:a6:34:19:90:e3:34:33:16:a4:c3:2b:
1b:a7:8e:54:d5:45:a6:4e:00:fb:b9:d0:6e:a6:9c:c5:b6:1f:
a2:50:87:a8:ec:a1:56:22:44:00:9a:78:6e:ba:3a:e2:27:57:
df:e8:bc:42:12:21:7a:4a:bc:34:f7:a3:31:e0:11:a8:c7:a5:
b8:d6:46:db:74:97:b8:eb:27:d3:ef:f9:27:af:46:7a:b9:50:
c1:65:d8:50:b2:6f:07:2f:71:f0:f1:b7:ec:7c:1c:fa:72:dc:
56:6a:aa:cd:e5:2b:ed:b0:dd:22:29:23:46:d5:15:ad:c9:9c:
1f:aa:b4:4c:61:a1:42:5c:9e:3a:ed:06:37:06:25:58:06:a6:
7d:c8:ff:b8:63:2e:95:10:67:43:49:eb:a2:0b:70:2a:9c:b5:
e7:6d:2c:35:27:66:a2:ec:26:cd:0d:37:29:03:68:a8:44:d0:
36:35:bf:f9:f1:1d:01:6a:07:3a:28:8c:56:14:2a:ec:7b:ca:
73:5a:e0:a9:40:4e:9b:cf:6f:cc:98:96:fa:6c:24:6d:23:28:
a6:cd:50:b0:4b:0b:13:58:c8:51:14:92:7e:44:94:24:82:e6:
e2:d0:dd:67:87:27:84:db:e6:84:bd:76:8d:c8:be:e6:42:8f:
8b:3e:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:43:02 2025 by rpki-client