
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32332d3233203d3e203538333639.roa
File: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier: dRB55JYcxTP49hg2S8nIf2yM2uVgyTw1DYrL5yjNS5w=
Subject key identifier: 29:E6:5C:01:CA:CD:8F:0B:9A:04:DB:E1:C3:40:76:0E:72:91:73:EE
Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial: 5FC4E459DBB40A3C52A39F517C4393829E4012CD
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32332d3233203d3e203538333639.roa
Signing time: Wed 25 Feb 2026 13:00:01 +0000
ROA not before: Wed 25 Feb 2026 12:55:01 +0000
ROA not after: Wed 24 Feb 2027 13:00:01 +0000
asID: 58369
IP address blocks: 103.140.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 18:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c4:e4:59:db:b4:0a:3c:52:a3:9f:51:7c:43:93:82:9e:40:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Validity
Not Before: Feb 25 12:55:01 2026 GMT
Not After : Feb 24 13:00:01 2027 GMT
Subject: CN=29E65C01CACD8F0B9A04DBE1C340760E729173EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:53:96:44:59:d8:a2:f7:34:aa:8d:8d:37:
20:3e:ec:98:1d:34:6f:25:a4:5b:56:c4:a4:6f:29:
d7:b9:92:5b:02:45:f5:d9:c5:c3:9c:e9:c0:11:8f:
7c:c2:89:a9:9f:8b:88:9f:da:5d:1f:ee:7d:0f:13:
6b:56:ac:5a:68:f4:33:09:a0:8b:f9:b6:75:fb:cf:
1c:fa:fa:be:d5:3e:a4:b7:9c:28:f5:83:32:23:89:
21:34:94:b8:b1:70:53:6c:e9:06:ee:97:72:2f:ff:
8b:42:9f:ec:00:a1:27:97:c4:67:6c:bb:4e:45:83:
4d:72:a7:1b:35:81:0a:40:86:8a:91:d4:95:37:92:
ef:54:97:a7:f3:2d:d6:23:f0:12:f4:94:3a:f7:09:
e9:78:88:b0:c1:8d:bc:7f:96:3b:11:ce:ce:1a:65:
4f:9c:bc:0a:16:99:1c:f1:c6:f6:ed:a1:16:d6:f8:
e7:9a:25:13:ea:1c:c4:2e:a1:3d:98:9f:65:0d:71:
32:67:7f:6c:bb:f0:75:fb:a6:f8:c1:1a:1b:a7:30:
79:72:a4:09:29:45:15:c9:4e:d8:34:d0:a1:42:b3:
b3:e2:b5:50:8e:5e:46:ef:fc:c9:e1:a4:ab:43:5d:
b6:8d:ea:83:a5:d1:43:1b:4c:a8:cb:bf:ff:6d:03:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E6:5C:01:CA:CD:8F:0B:9A:04:DB:E1:C3:40:76:0E:72:91:73:EE
X509v3 Authority Key Identifier:
keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32332d3233203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:dd:7e:eb:84:8d:db:5c:fa:46:1b:bd:fd:ee:1a:f5:67:30:
3a:08:8d:3c:8c:be:b9:03:bf:4f:74:b0:5b:d2:1e:fa:b8:e0:
18:79:4b:03:04:fe:b9:0a:db:b5:7e:a3:57:f1:a8:ac:19:5d:
82:05:6b:c2:21:ef:02:14:dd:9d:3a:26:7c:18:60:c4:b0:2f:
3a:ef:5e:aa:82:b3:fd:95:88:f2:c5:99:bb:dd:e9:fb:6c:b8:
91:a1:36:9c:54:bb:c4:5c:0b:ec:8c:4f:54:2d:13:91:f8:68:
6d:c9:26:3a:a9:80:26:93:fc:0a:97:74:b0:36:3c:cf:22:b2:
a8:96:b2:40:fb:39:c8:c5:69:3b:6e:ff:d6:ff:9a:03:8c:87:
3d:2f:98:23:77:69:d7:00:c7:5d:e8:7c:a5:1d:d7:1f:51:ca:
58:47:d1:5d:54:26:b2:92:ee:76:f7:31:be:cc:f3:03:be:14:
c5:3f:13:9f:65:98:9a:a6:8f:7c:b8:0e:67:d5:b3:4a:db:e6:
e0:2f:e2:8a:89:af:10:fe:45:ae:51:93:34:23:76:dd:05:ca:
29:b0:bb:d9:cd:de:c4:6c:5f:0d:f1:21:32:42:dd:44:aa:93:
4f:46:1b:87:42:55:33:1b:ce:0c:0f:3d:8e:89:b6:89:ba:da:
e3:05:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:02:23 2026 by rpki-client