
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa
File: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: qXl6Y01U+k/Ra/QYHsyqr3b9BVCalPhgbHMkcfSQuTM=
Subject key identifier: F8:32:CC:79:B5:42:FF:B1:53:FD:44:38:AF:92:B7:2C:11:D3:E9:1E
Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial: 156C6B9FD7066CCEDFF9C69C88540884CB073C9C
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa
Signing time: Wed 18 Mar 2026 09:02:51 +0000
ROA not before: Wed 18 Mar 2026 08:57:51 +0000
ROA not after: Wed 17 Mar 2027 09:02:51 +0000
asID: 9341
IP address blocks: 103.189.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 13:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6c:6b:9f:d7:06:6c:ce:df:f9:c6:9c:88:54:08:84:cb:07:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Validity
Not Before: Mar 18 08:57:51 2026 GMT
Not After : Mar 17 09:02:51 2027 GMT
Subject: CN=F832CC79B542FFB153FD4438AF92B72C11D3E91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:30:a2:ae:39:23:be:c1:ed:81:a8:6f:08:
f6:b7:f9:4c:97:d7:76:a9:33:e5:9c:8a:f5:17:65:
b7:a0:fb:22:11:f8:fe:16:dc:d3:42:48:26:7c:95:
f2:ca:e8:55:78:e0:8c:3c:14:df:0d:48:f5:75:61:
29:fc:8b:5d:f2:c6:dd:75:ce:3a:b1:36:49:46:62:
f1:76:56:35:e3:c3:0f:72:9b:98:57:6a:56:4a:a6:
a9:60:af:e0:68:40:cc:b7:7f:94:bb:27:c4:7b:e5:
f3:8f:0e:1b:1a:2f:dd:f9:a0:6a:31:f6:8d:46:cb:
92:1b:96:cb:48:ed:6d:61:3d:df:86:b1:59:7e:12:
27:8b:1c:73:0b:26:ec:00:06:9e:20:76:ff:4a:0d:
18:2a:f3:50:01:a9:94:cf:c4:18:6b:47:a2:9a:2e:
0d:c2:d8:fa:2c:80:c1:80:e9:e6:3e:54:d0:e2:d1:
f3:9c:86:c4:56:bf:1a:52:c5:1a:8f:de:84:66:ba:
a9:fa:aa:e1:ea:3e:43:bc:89:6e:e0:c2:64:72:80:
4c:9e:c6:81:48:25:02:89:e3:a4:47:01:35:21:b6:
b3:db:ee:ff:fe:ce:18:68:82:1f:c6:85:e9:06:11:
ee:41:80:9c:7c:88:65:32:c2:3a:6b:ce:a7:46:17:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:CC:79:B5:42:FF:B1:53:FD:44:38:AF:92:B7:2C:11:D3:E9:1E
X509v3 Authority Key Identifier:
keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.168.0/23
Signature Algorithm: sha256WithRSAEncryption
90:41:64:02:aa:ae:08:a7:9f:91:db:42:ac:97:d2:a8:ef:11:
00:48:8b:96:02:da:cf:bc:6e:43:10:67:ce:eb:12:90:d2:48:
c9:1d:c8:f1:13:fc:b3:06:97:ac:d7:9e:63:8a:ad:9f:5d:a3:
3b:c9:2e:60:c7:d6:e1:b3:16:29:9c:70:43:71:2f:c4:5c:47:
0a:eb:fb:a0:c1:1b:3d:98:3e:0c:e1:59:f1:eb:73:09:36:80:
18:69:db:92:2a:fc:5b:27:eb:1f:f8:a1:6d:9b:38:b6:aa:5f:
e3:b5:6e:de:07:92:5b:35:9e:2e:99:ca:56:6e:2e:43:e4:29:
a1:4c:3f:57:d4:48:06:5b:17:24:83:25:cc:9e:11:19:2c:aa:
18:68:82:82:fc:15:ed:5a:12:bf:83:6f:12:fb:9b:53:e4:2c:
fe:6f:d7:c1:07:2d:89:5d:88:44:69:eb:13:1f:1e:b0:b4:99:
27:73:02:6d:86:47:e6:81:22:16:42:93:96:ad:59:8a:77:46:
bd:8a:c0:39:72:75:e5:9f:1b:25:c8:65:0b:45:6e:f4:83:18:
17:d1:a4:5d:81:b1:75:be:45:03:54:51:16:eb:89:4e:8d:10:
74:a0:76:f3:6f:d9:29:56:da:8f:32:bd:8b:59:08:15:e7:db:
83:6b:9d:fb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFWxrn9cGbM7f+caciFQIhMsHPJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx
REIwOEZEQTAeFw0yNjAzMTgwODU3NTFaFw0yNzAzMTcwOTAyNTFaMDMxMTAvBgNV
BAMTKEY4MzJDQzc5QjU0MkZGQjE1M0ZENDQzOEFGOTJCNzJDMTFEM0U5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NjCirjkjvsHtgahvCPa3+UyX
13apM+WcivUXZbeg+yIR+P4W3NNCSCZ8lfLK6FV44Iw8FN8NSPV1YSn8i13yxt11
zjqxNklGYvF2VjXjww9ym5hXalZKpqlgr+BoQMy3f5S7J8R75fOPDhsaL935oGox
9o1Gy5IblstI7W1hPd+GsVl+EieLHHMLJuwABp4gdv9KDRgq81ABqZTPxBhrR6Ka
Lg3C2PosgMGA6eY+VNDi0fOchsRWvxpSxRqP3oRmuqn6quHqPkO8iW7gwmRygEye
xoFIJQKJ46RHATUhtrPb7v/+zhhogh/GhekGEe5BgJx8iGUywjprzqdGF5IVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+DLMebVC/7FT/UQ4r5K3LBHT6R4wHwYDVR0j
BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw
RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw
OEZEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmNjU5OTA0LTM3MDItNDc5Ny1i
ZDFiLTQ0N2FiOGM5NGUwYy8wLzMxMzAzMzJlMzEzODM5MmUzMTM2MzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe9qDANBgkqhkiG
9w0BAQsFAAOCAQEAkEFkAqquCKefkdtCrJfSqO8RAEiLlgLaz7xuQxBnzusSkNJI
yR3I8RP8swaXrNeeY4qtn12jO8kuYMfW4bMWKZxwQ3EvxFxHCuv7oMEbPZg+DOFZ
8etzCTaAGGnbkir8WyfrH/ihbZs4tqpf47Vu3geSWzWeLpnKVm4uQ+QpoUw/V9RI
BlsXJIMlzJ4RGSyqGGiCgvwV7VoSv4NvEvubU+Qs/m/XwQctiV2IRGnrEx8esLSZ
J3MCbYZH5oEiFkKTlq1ZindGvYrAOXJ15Z8bJchlC0Vu9IMYF9GkXYGxdb5FA1RR
FuuJTo0QdKB282/ZKVbajzK9i1kIFefbg2ud+w==
-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:44 2026 by rpki-client