
$ rpki-client -vvf repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
File: 3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa (raw, json)
Hash identifier: weHgiF/WpaOh93FMRIOYJ8hVM9moLBMkbwYGZZzGsiY=
Subject key identifier: 96:0B:66:FF:74:39:B5:C4:D1:3A:71:31:FB:5E:EC:89:38:F7:AC:A9
Certificate issuer: /CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
Certificate serial: 219B70B6836ADBC8D76D1C70DF41F2D856102599
Authority key identifier: 50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
Signing time: Tue 17 Mar 2026 01:00:02 +0000
ROA not before: Tue 17 Mar 2026 00:55:02 +0000
ROA not after: Tue 16 Mar 2027 01:00:02 +0000
asID: 131760
IP address blocks: 103.30.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl
rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 13:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9b:70:b6:83:6a:db:c8:d7:6d:1c:70:df:41:f2:d8:56:10:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
Validity
Not Before: Mar 17 00:55:02 2026 GMT
Not After : Mar 16 01:00:02 2027 GMT
Subject: CN=960B66FF7439B5C4D13A7131FB5EEC8938F7ACA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:33:8d:38:67:98:79:1c:0f:37:25:e5:c4:
a7:87:f4:f9:d5:54:5c:05:48:0f:a3:ca:f8:66:5d:
a5:1e:5e:6e:79:6a:b6:e3:60:27:7e:eb:c6:ad:3f:
62:65:6a:65:d6:58:47:c8:39:26:e0:62:c5:ba:96:
b4:14:6c:de:26:7d:81:a6:7c:55:d7:88:0b:c4:bb:
4c:48:90:53:59:af:cb:08:49:1b:a9:fd:e6:29:cd:
63:24:c1:41:eb:77:ff:88:f7:36:bf:c4:1a:27:17:
e2:3b:a3:05:1b:81:d0:b1:aa:c2:fa:0e:8e:be:3c:
9f:e3:71:cd:b2:e4:b2:10:52:2c:d5:57:bf:5b:5f:
00:ae:59:14:a9:91:67:2c:59:04:86:92:89:ae:ab:
32:75:d2:e0:c3:c8:ad:d2:b3:61:ea:bc:9a:be:cd:
aa:c3:dd:6f:b1:95:ed:60:2a:e6:20:77:ad:6b:46:
25:e5:e5:2a:16:08:91:40:41:99:96:12:b4:7b:2c:
49:ec:eb:51:11:61:f8:19:0c:32:4d:fc:80:d2:44:
4d:d2:7d:4a:1c:69:8b:dc:16:f0:bc:1c:3f:85:47:
cc:72:99:b3:bd:f4:88:eb:1f:8e:cf:97:00:4a:a6:
3e:78:cf:a0:62:29:a6:a4:dd:a2:57:d3:fa:d8:2e:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:66:FF:74:39:B5:C4:D1:3A:71:31:FB:5E:EC:89:38:F7:AC:A9
X509v3 Authority Key Identifier:
keyid:50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.170.0/23
Signature Algorithm: sha256WithRSAEncryption
60:68:82:0d:0b:f4:18:61:cc:4c:1f:6e:04:4b:99:f3:86:e0:
a2:d4:03:ed:97:a2:d7:af:10:17:64:6c:b0:69:f1:67:1f:62:
e6:48:55:a1:19:4f:67:3a:56:96:0b:8a:97:8a:27:90:f8:ef:
80:87:5a:e1:ed:32:15:9f:7a:b9:78:fb:05:63:b6:dd:4f:1e:
27:1d:9f:ca:5d:f7:1c:02:1d:72:a4:8e:dd:0b:b2:a8:01:f9:
9e:5a:ba:a0:06:f1:ee:eb:e3:6d:00:45:50:06:56:9e:77:1f:
43:fe:68:1a:7f:5f:ba:0e:56:7a:d3:53:05:4a:47:fc:e5:b9:
a6:c4:88:32:ca:07:c8:d4:35:94:4e:bd:1c:a7:c7:c8:1b:e6:
1f:2f:3b:21:33:c4:69:5e:b2:0e:25:a7:4d:ac:7e:6c:a8:77:
bf:23:ab:28:3b:38:ae:4c:09:85:ff:6c:72:b0:77:90:09:69:
a0:63:32:31:e0:97:d7:5a:50:7a:04:48:9c:71:08:72:e3:a8:
1d:ed:f7:33:d2:9e:4c:ea:dd:b0:10:bf:f8:3a:db:31:3d:be:
fa:95:3a:85:55:08:f1:89:a4:fa:15:ca:4d:d2:83:7b:93:63:
b4:1a:6f:1d:d4:2c:5b:2a:2e:e9:48:3a:af:95:60:47:49:5d:
43:59:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:55:56 2026 by rpki-client