
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
File: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (raw, json)
Hash identifier: Ol+8mj4uz+YDl+K02s8/nnKwbaKHiw9jdN56tzENmfg=
Subject key identifier: 41:A7:64:D1:97:30:D7:F2:A4:B3:08:C7:6C:B4:98:80:EF:24:C5:58
Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial: 27961961C5028C0E77BF80E563AF82FA8FB47BCD
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
Signing time: Fri 13 Mar 2026 08:00:00 +0000
ROA not before: Fri 13 Mar 2026 07:55:00 +0000
ROA not after: Fri 12 Mar 2027 08:00:00 +0000
asID: 149890
IP address blocks: 103.190.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 04:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:96:19:61:c5:02:8c:0e:77:bf:80:e5:63:af:82:fa:8f:b4:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Validity
Not Before: Mar 13 07:55:00 2026 GMT
Not After : Mar 12 08:00:00 2027 GMT
Subject: CN=41A764D19730D7F2A4B308C76CB49880EF24C558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:f9:22:9f:c7:9a:f4:89:01:c3:df:53:87:
b3:3b:49:1d:68:12:0e:31:a3:3e:2b:11:be:be:a1:
1b:c8:99:01:40:b0:26:5a:91:41:94:a8:71:93:01:
28:55:e0:33:a1:32:42:49:ac:fe:4e:08:f3:7f:9a:
18:c1:b3:93:ee:2e:c6:74:3e:76:e0:d6:f9:0b:9f:
d3:ea:2d:14:af:d1:97:41:ec:b1:26:4e:3c:82:3b:
83:16:5a:90:83:8f:f1:21:8b:2c:72:9e:44:ae:90:
4c:ad:00:61:66:ab:c4:a9:f2:2c:6d:d2:a0:11:79:
fa:88:c7:7b:b8:8c:da:4f:35:41:30:41:9f:30:f6:
de:bd:2a:2d:82:96:14:0b:6f:5c:62:18:8f:0d:56:
45:b5:82:90:bb:41:4d:d2:0c:59:c8:af:62:08:2f:
4c:be:5f:34:c6:85:d4:c7:6b:6c:08:50:c6:85:1d:
c5:89:fc:d9:db:ef:13:94:33:08:4f:b4:23:f8:e0:
ca:56:8d:29:7e:d0:e5:8d:12:16:ca:f1:ef:89:51:
e5:e0:dc:88:a8:ae:d0:c7:17:2d:30:80:81:94:9b:
f0:09:28:96:c5:16:31:b7:d4:b3:b1:b1:52:10:a7:
fd:52:47:3f:95:d0:76:de:af:56:32:e4:ea:51:30:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:64:D1:97:30:D7:F2:A4:B3:08:C7:6C:B4:98:80:EF:24:C5:58
X509v3 Authority Key Identifier:
keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.0.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f7:48:1e:7d:d3:0e:78:ad:28:9b:aa:28:3f:08:74:69:a4:
b5:66:5b:ac:fd:ac:13:ee:55:f6:bb:3e:ce:9d:65:ab:b2:5a:
54:a0:19:97:55:3d:22:b4:9b:26:3b:9f:9c:43:31:bf:25:a1:
b0:a6:8c:46:12:d8:f2:70:8a:4b:61:5a:87:45:71:ef:92:23:
62:e5:d6:40:49:53:7e:03:8c:ae:b4:41:4a:2e:9a:23:ed:39:
dd:83:8c:14:59:34:c9:d6:63:3c:fc:e2:26:69:d2:61:c8:59:
2a:b5:7a:68:0c:6d:d4:82:74:95:f6:7f:17:a2:76:5b:2b:e9:
ea:2c:b4:49:68:49:09:0b:3b:13:a4:3f:1c:a3:1b:7e:c9:3d:
16:c5:3c:00:57:d1:d3:bc:5b:eb:b0:37:17:a5:df:f7:8d:d8:
7c:2a:62:99:ce:cd:5e:45:e6:ee:40:e2:2e:be:e9:fd:be:0d:
48:20:24:f8:4f:a2:ca:6d:79:85:2c:12:c7:b6:c7:cf:41:7d:
cd:2e:ac:40:67:c9:99:61:bb:dc:59:8c:43:9b:b4:ff:b4:d3:
31:d6:bf:74:4a:62:5a:f5:fe:f6:f6:d7:68:f0:26:09:5f:f1:
4b:fb:f4:8f:b9:a4:84:3d:d0:3b:dc:bb:de:e1:4c:26:67:db:
82:8e:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:37:22 2026 by rpki-client