
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa
File: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: zwTS0I3yHyTRPMMjOlix3sPU89yfOA8bdamwt+xt3VE=
Subject key identifier: 53:A3:71:FE:74:9C:82:5D:F5:A2:51:F2:62:CA:5F:37:AA:82:5E:0A
Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial: 7FEB78CDE77B9341C229E075CAA039F55411FECE
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa
Signing time: Wed 18 Mar 2026 08:00:02 +0000
ROA not before: Wed 18 Mar 2026 07:55:02 +0000
ROA not after: Wed 17 Mar 2027 08:00:02 +0000
asID: 9341
IP address blocks: 103.189.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 13:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:eb:78:cd:e7:7b:93:41:c2:29:e0:75:ca:a0:39:f5:54:11:fe:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Validity
Not Before: Mar 18 07:55:02 2026 GMT
Not After : Mar 17 08:00:02 2027 GMT
Subject: CN=53A371FE749C825DF5A251F262CA5F37AA825E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:b8:3f:54:69:06:fa:c9:c0:a1:87:e9:ef:
f2:34:54:33:3b:c0:55:e8:01:5a:66:7e:5b:fe:23:
ff:47:cf:77:94:e1:a1:71:62:e0:2a:ee:a1:60:6c:
1a:d7:93:29:6e:dd:07:07:87:2c:6d:04:dc:94:ce:
78:16:ed:5b:38:99:fd:7a:e0:35:71:6f:ff:d5:c8:
28:38:50:a9:d6:5e:b1:23:f5:21:f9:a5:ff:a0:0e:
37:b3:c2:e8:d5:d0:3d:95:fa:e8:02:e8:a0:a6:79:
26:f5:10:3f:a2:a9:60:e6:8c:8e:31:d7:1d:04:c7:
9e:9e:2a:bd:64:10:1b:16:db:38:16:ef:8d:b0:a5:
56:6a:2b:c8:1f:e7:42:00:b7:9d:2e:a7:e9:15:21:
02:cf:3a:e2:73:d3:b2:a3:40:fd:13:a3:b9:ed:74:
ed:58:63:57:50:de:57:1e:ac:2c:d3:93:82:b9:87:
6e:0b:5b:bd:39:60:45:61:7b:d5:29:b2:ce:fd:d4:
c2:57:b0:14:98:86:53:cd:5b:11:0c:e0:79:59:59:
4b:4d:35:c9:73:8d:1d:e8:05:53:4a:64:9a:b9:b9:
2b:7f:ca:35:9b:b3:7f:5d:fe:71:26:3b:50:18:d6:
1d:e2:0f:20:5f:42:61:a2:13:d0:f7:62:28:6b:f8:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:71:FE:74:9C:82:5D:F5:A2:51:F2:62:CA:5F:37:AA:82:5E:0A
X509v3 Authority Key Identifier:
keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.168.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e9:c0:bd:22:2b:35:87:89:bc:e0:ef:cb:04:12:d2:4b:19:
be:ef:b1:5d:f8:87:a5:be:df:e0:bd:ff:a4:b3:e9:ca:e6:8f:
1d:cb:65:a0:8a:99:cf:59:5f:5e:97:42:fc:ba:ad:90:b4:36:
30:72:bb:04:09:64:2e:9d:7f:07:a4:46:92:1f:5b:48:24:f7:
84:d8:68:da:2d:42:d2:af:61:ff:17:2a:9d:a7:d0:cb:49:20:
b5:be:e9:28:5e:d5:7f:d0:e6:2a:89:7a:96:0f:92:a6:fd:a3:
0d:76:7f:cd:de:c8:5c:d2:be:19:6b:23:b3:64:db:84:45:5b:
ce:39:63:91:e8:a5:8f:d4:05:85:f1:82:04:50:c5:8f:2b:23:
74:3b:fe:77:ea:db:b1:d5:69:61:2f:ac:c3:7b:1e:64:1b:5b:
a9:dc:db:c0:79:cf:e0:2f:6e:19:ce:a7:38:9e:37:02:38:bc:
49:36:24:fe:8e:fe:87:a9:9a:e3:e1:56:51:85:36:05:02:94:
38:ec:4e:0d:b8:b4:6e:c7:5b:c2:af:b8:d7:5a:c2:dc:18:2b:
30:2d:b5:dd:c5:49:11:27:60:90:b7:4a:e8:fb:8b:0e:6f:45:
f2:74:99:82:4b:23:41:98:4f:2c:a3:14:7a:d1:26:13:87:72:
43:10:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:14 2026 by rpki-client