
$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa
File: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (raw, json)
Hash identifier: S3rzXKlZfTSEv/Pc9qK555wJstPWA1weX2Foh18lnFQ=
Subject key identifier: A0:52:4A:92:37:8E:32:87:60:C0:17:49:A6:ED:9C:16:F3:3E:7D:9B
Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64
Certificate serial: 3675A76D6B10C67BC16FF5F4F105BB00C54F5B55
Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa
Signing time: Wed 04 Mar 2026 04:00:00 +0000
ROA not before: Wed 04 Mar 2026 03:55:00 +0000
ROA not after: Wed 03 Mar 2027 04:00:00 +0000
asID: 137331
IP address blocks: 103.186.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl
rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 12:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:75:a7:6d:6b:10:c6:7b:c1:6f:f5:f4:f1:05:bb:00:c5:4f:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64
Validity
Not Before: Mar 4 03:55:00 2026 GMT
Not After : Mar 3 04:00:00 2027 GMT
Subject: CN=A0524A92378E328760C01749A6ED9C16F33E7D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:f2:9d:4a:9c:4d:1c:38:b9:6d:51:1f:94:
d4:48:ae:2b:d3:71:8c:83:c9:d2:e0:46:59:e0:83:
c7:54:33:85:5c:72:fc:4c:43:00:63:1a:75:55:be:
63:06:9f:2f:f1:a6:ca:89:f4:a7:e0:c9:79:07:8b:
5d:9b:18:04:64:64:12:0d:dd:a5:04:a3:77:98:d7:
05:23:28:09:b1:7d:d3:a8:b2:2d:18:54:94:70:33:
ca:93:fa:7f:cc:3e:56:8a:8c:f5:a3:2d:12:c7:46:
8d:49:ad:62:12:79:99:d7:8a:fd:fa:73:02:87:90:
4e:a9:b5:e7:5d:1a:94:28:5b:cb:4d:81:a3:99:a9:
bb:0e:3a:21:42:4a:5d:7d:2b:e2:f3:d2:fe:f4:ef:
6a:bd:89:79:94:71:d2:cb:03:b3:12:cf:f4:16:27:
cb:58:a9:b9:33:7f:78:81:76:b4:4d:95:67:8f:bd:
94:a7:fa:4e:28:d6:e8:c5:57:30:06:e3:54:e7:c4:
76:b4:4b:a9:1a:bd:e6:fa:5f:44:28:6f:95:fc:32:
57:ea:77:7f:8b:75:51:e2:5b:27:d0:93:cf:71:61:
0f:d8:64:c2:bc:a4:00:45:bf:42:2f:c7:0c:41:a9:
87:8e:df:59:21:7a:c1:b8:6c:26:e7:68:97:87:82:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:4A:92:37:8E:32:87:60:C0:17:49:A6:ED:9C:16:F3:3E:7D:9B
X509v3 Authority Key Identifier:
keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:89:cb:31:a1:33:23:70:8b:e0:a6:e8:01:03:04:b1:18:9f:
8b:41:06:d3:97:ca:3d:ff:e9:c6:3e:97:7b:32:be:7a:12:c1:
05:16:19:8c:6d:8c:c9:f3:8c:d5:05:45:6d:9d:e0:a7:b7:f2:
62:bd:c6:a5:a3:76:3a:bf:a5:82:83:28:e3:f0:b5:96:e9:c4:
c5:0e:95:45:bb:29:84:21:7d:91:8d:d3:0a:c4:77:95:65:06:
fc:a8:9f:b7:0e:92:ba:aa:0d:78:ae:96:de:65:56:ff:00:d4:
8a:d6:5f:72:2e:70:fa:50:40:b4:24:77:40:91:eb:7e:5c:62:
c3:8a:fc:91:0d:a8:57:96:69:85:9c:c9:dc:95:82:62:ba:09:
b6:b8:85:44:85:80:10:34:a0:e2:46:53:1e:b9:27:a5:cf:34:
16:57:cc:79:f9:c0:65:b9:cd:42:e9:66:51:74:f0:51:0d:9c:
e4:3e:70:d6:e2:e3:05:f9:c7:55:79:50:63:43:22:6d:49:57:
5d:83:39:3e:ec:88:cf:f9:01:bd:30:fb:7c:7b:cd:2a:0c:75:
44:46:1a:99:e3:4c:a1:79:b4:82:e4:48:7d:08:bc:72:d9:45:
45:e8:16:ac:dc:10:61:89:e4:88:af:74:ee:fa:de:88:7a:24:
8e:56:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 20:23:00 2026 by rpki-client