
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
File: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=
Subject key identifier: A3:3E:DE:22:C7:97:BF:17:03:7E:E9:D0:C0:A1:96:1B:8A:9E:92:8A
Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial: 165284BD48A14208ED86B2F28B231843620DD209
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
Signing time: Wed 15 Oct 2025 10:02:06 +0000
ROA not before: Wed 15 Oct 2025 09:57:06 +0000
ROA not after: Wed 14 Oct 2026 10:02:06 +0000
asID: 46023
IP address blocks: 103.75.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 19:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:52:84:bd:48:a1:42:08:ed:86:b2:f2:8b:23:18:43:62:0d:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Validity
Not Before: Oct 15 09:57:06 2025 GMT
Not After : Oct 14 10:02:06 2026 GMT
Subject: CN=A33EDE22C797BF17037EE9D0C0A1961B8A9E928A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:ab:db:db:37:b9:32:bf:47:1e:13:82:76:
fa:28:c0:0d:e7:12:14:89:ad:b9:85:04:52:30:61:
01:64:9d:61:78:49:8b:a5:79:89:5d:ee:14:38:ee:
2c:4f:a4:ab:e2:27:3b:66:66:c5:e5:2a:fe:15:1b:
6c:0f:06:4f:eb:36:b9:ee:f5:75:04:de:f1:60:74:
bb:33:69:e1:6b:2e:a7:26:22:1d:26:d7:be:da:50:
ab:a6:1e:35:1b:95:49:46:3e:2f:de:33:eb:fd:e2:
e9:19:fe:94:ed:3f:98:15:8f:d6:bd:de:a2:1e:c1:
81:e1:64:e6:c2:5a:75:c6:f3:a8:9a:f9:d8:46:94:
b4:b8:80:f0:64:5f:d2:fd:8e:53:a5:f9:7c:ef:0b:
a2:bf:07:0e:ae:19:55:2a:3c:81:40:e8:2c:1a:04:
cc:59:2c:23:8f:3b:9c:94:4e:6e:33:fa:e0:06:d3:
91:53:d1:f9:1e:e3:72:ce:e1:d5:ca:aa:85:a9:f6:
06:ab:29:1b:bd:a4:68:cb:dd:a6:f3:14:ce:52:87:
2b:67:e3:ea:59:a0:72:51:07:3c:16:eb:12:89:79:
71:3c:e9:68:44:e0:6b:bf:b6:39:d7:87:66:ab:8e:
57:45:5a:60:6e:29:51:e7:d7:94:87:9e:de:fa:3a:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:DE:22:C7:97:BF:17:03:7E:E9:D0:C0:A1:96:1B:8A:9E:92:8A
X509v3 Authority Key Identifier:
keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.54.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:47:55:22:63:d0:73:f4:de:c0:01:7c:11:ff:34:bf:be:ed:
02:80:bf:e9:dd:7b:f2:bb:7a:c6:e6:4a:db:ec:52:41:81:39:
85:bd:8a:44:27:32:3a:a6:1b:98:e3:52:49:62:eb:74:81:2e:
b5:67:ae:9c:fa:6f:ca:16:12:bb:60:e8:e4:ba:20:58:d5:45:
84:56:37:0f:e9:52:2d:a6:5a:14:9e:94:2c:d0:27:92:95:8c:
11:d4:18:5a:ee:13:3e:20:df:dd:f0:03:3c:ff:70:f4:e5:f6:
cb:a8:ac:45:69:25:13:66:d1:5f:d7:6e:15:cb:78:2e:2e:56:
0e:2c:c8:11:ee:3f:7e:93:af:95:a1:04:f0:03:3d:77:0f:cc:
1a:c8:01:42:9a:31:17:37:b2:57:62:eb:76:59:11:0b:0d:d4:
86:bf:f4:63:fc:80:40:3f:7c:a8:7c:2a:6e:d9:0a:0a:c0:31:
19:2b:86:d0:ce:37:28:69:63:ec:73:2e:40:5c:aa:7b:57:be:
4b:ba:ce:ba:1c:2d:65:39:b1:5e:d0:20:ae:df:99:7a:e6:4c:
96:f6:31:be:87:1a:b7:4e:64:ac:eb:db:6f:41:ef:4d:2f:9e:
29:20:c2:c5:53:52:ea:7c:26:2d:0c:9d:83:b1:e4:fc:e4:e5:
eb:27:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:58 2025 by rpki-client