
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa
File: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: +lLWVkW77msDkt22BmOKE6zoe3F7Rva3RzwGn4oP4Gw=
Subject key identifier: 31:56:4A:9B:D2:88:0C:9D:90:B7:6C:36:F4:36:FB:97:8E:9C:EF:23
Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial: 04D935DBE2F6D56B4E8ED312FA27A005697C587F
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa
Signing time: Wed 04 Mar 2026 07:00:00 +0000
ROA not before: Wed 04 Mar 2026 06:55:00 +0000
ROA not after: Wed 03 Mar 2027 07:00:00 +0000
asID: 9341
IP address blocks: 103.189.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 08:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d9:35:db:e2:f6:d5:6b:4e:8e:d3:12:fa:27:a0:05:69:7c:58:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Validity
Not Before: Mar 4 06:55:00 2026 GMT
Not After : Mar 3 07:00:00 2027 GMT
Subject: CN=31564A9BD2880C9D90B76C36F436FB978E9CEF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:8c:96:fb:ce:0b:53:4d:87:4d:23:2f:59:
b9:5f:f1:ce:06:1b:dc:b3:59:d2:a2:2c:17:a6:db:
52:3f:54:d3:1d:81:6e:c5:54:94:20:d7:00:2b:58:
9c:9e:a8:fe:f0:e8:54:2e:d3:0c:f2:ab:23:f7:56:
fa:48:7e:9e:65:c8:b7:3d:25:92:05:0e:c8:27:a7:
13:0a:2c:b8:ec:19:4c:28:f9:36:a7:e3:24:bb:c3:
54:fd:a7:c9:ec:dd:c0:35:4a:04:7d:b8:81:21:32:
e4:01:ff:eb:fc:e8:70:e1:dc:59:53:c8:d1:e6:10:
8d:41:73:76:36:66:6c:64:39:3f:ec:3b:a3:fb:fd:
e8:c7:85:66:0e:b2:c5:12:08:ad:2f:1a:7d:fa:69:
0c:3b:72:ad:35:21:de:44:13:86:97:72:59:00:65:
2c:e9:8e:42:f8:ae:30:61:72:db:64:87:2c:3f:cc:
c2:e7:c6:8d:63:4a:60:b2:8b:a0:c8:99:d4:ed:e9:
7c:be:89:da:63:4d:86:99:71:12:67:98:40:dc:b7:
1c:ee:9f:63:e3:95:cd:dd:58:2c:19:20:90:35:aa:
37:bf:96:b3:f7:0c:32:84:69:9c:64:78:b7:ce:b8:
6e:cd:a2:60:c0:bc:6c:63:55:23:12:6a:47:46:43:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:4A:9B:D2:88:0C:9D:90:B7:6C:36:F4:36:FB:97:8E:9C:EF:23
X509v3 Authority Key Identifier:
keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:73:a7:6c:11:ad:b1:1c:f5:cd:8a:08:f4:42:d0:a8:bc:15:
d3:4b:7a:65:0e:f0:d3:ec:3f:2d:fb:76:b8:69:36:4f:db:f2:
94:48:93:0d:ad:57:ae:9c:aa:68:56:14:35:d7:11:f1:7a:c5:
a9:a5:e1:ff:9a:0b:ec:af:a5:76:86:cc:cb:60:32:20:b0:9c:
35:25:15:5e:05:d3:73:8c:1c:a8:ff:6d:11:e6:44:d3:69:6c:
67:8a:3b:26:c0:3d:3c:14:b3:48:61:0c:e3:0c:18:69:89:87:
e0:25:ff:e7:7e:41:d0:08:38:67:1d:2c:d8:c4:c0:24:c1:2d:
46:81:5d:bc:bb:6b:c6:0e:6c:40:bc:a7:58:9b:69:85:95:89:
39:f2:05:ff:2a:70:78:ba:3a:db:f7:dd:d8:e6:59:0b:a5:8b:
da:c2:d5:e3:03:08:94:a1:c8:cc:57:18:93:bf:86:86:57:26:
e8:2b:85:09:78:26:64:d4:4b:75:d5:47:1a:4f:8e:3f:4a:ad:
09:95:b9:b2:d6:ab:13:a5:45:44:98:d7:38:97:6c:58:10:dd:
2e:55:9b:24:d6:79:d1:9d:a0:7f:d8:41:4b:20:93:72:d1:95:
e8:7d:22:62:ae:fa:87:f2:a8:c1:6c:be:1a:36:4d:03:2f:06:
cb:7f:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:15 2026 by rpki-client