
$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa
File: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: gVPQrVQX9oWdBIjWPQSJvyIQ3AEVj+vaeGmFfblKRbs=
Subject key identifier: 99:A9:BC:FD:92:CA:5B:64:E8:2E:44:F8:11:A5:8D:0F:97:9E:1E:5A
Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Certificate serial: 49AB1436F317E5C7A1587A51D776AB9C58EE2D89
Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa
Signing time: Sat 17 Jan 2026 09:00:02 +0000
ROA not before: Sat 17 Jan 2026 08:55:02 +0000
ROA not after: Sat 16 Jan 2027 09:00:02 +0000
asID: 58369
IP address blocks: 103.167.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Mar 2026 12:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ab:14:36:f3:17:e5:c7:a1:58:7a:51:d7:76:ab:9c:58:ee:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Validity
Not Before: Jan 17 08:55:02 2026 GMT
Not After : Jan 16 09:00:02 2027 GMT
Subject: CN=99A9BCFD92CA5B64E82E44F811A58D0F979E1E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:c5:8b:17:23:0c:5f:61:d9:7f:de:33:42:
89:7f:f4:ff:83:b4:1b:c9:d9:5e:88:f6:11:0a:80:
d0:5e:be:c3:46:0a:ca:52:3a:54:b1:ea:9d:63:b7:
f2:e5:37:3e:8f:ac:37:43:cc:10:d3:93:f1:c7:d0:
f3:46:47:0c:e6:e8:50:83:c6:4a:de:d0:b9:c9:cb:
1b:d9:7d:fa:ac:41:ea:d6:2c:5d:56:85:da:c7:a2:
e2:3e:bd:ff:e0:35:9c:09:6a:3f:98:39:7a:bb:ae:
26:af:6d:8a:ca:80:e7:e1:a3:55:e7:71:00:48:de:
9e:13:69:d1:25:ee:c1:3c:17:af:6e:ea:70:8d:c9:
77:9a:96:a0:12:5e:39:e3:e0:5c:94:1f:eb:06:89:
3e:08:a0:e9:f8:da:aa:8e:15:ab:41:38:a2:16:57:
51:07:e1:48:7d:c3:5f:c7:1f:d2:d6:43:68:0f:9d:
ea:07:18:a8:35:e4:08:90:7a:3e:ff:03:17:57:44:
df:a1:4f:76:c6:24:26:ae:f2:a9:37:89:a0:6b:6b:
b6:81:35:1a:85:b5:0f:23:45:a3:47:97:d3:2c:cc:
0c:b0:58:0d:4f:5b:8e:03:3a:24:99:19:70:9f:1b:
1e:7c:3d:ad:04:ae:a3:c7:85:db:9f:14:b0:7b:77:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:BC:FD:92:CA:5B:64:E8:2E:44:F8:11:A5:8D:0F:97:9E:1E:5A
X509v3 Authority Key Identifier:
keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9c:a1:b3:c6:ac:5d:1a:5b:de:33:b5:8b:81:5f:5f:ce:f2:
a1:59:9e:52:2a:70:56:a4:24:4a:b5:b0:34:08:f5:60:97:d0:
cd:49:17:aa:e1:51:15:b2:b1:07:01:01:fc:98:54:7e:85:cd:
f1:2a:9a:4d:ff:2f:1d:3f:1e:c1:31:25:8d:89:d4:a1:6f:91:
02:55:91:d7:cc:b0:1c:15:95:78:75:27:a7:d3:f3:de:cb:4e:
25:c1:58:88:f3:d7:68:38:3d:d5:9a:dd:60:4f:cf:30:57:4b:
8f:4b:ce:6b:83:39:17:c8:d4:5a:a0:d7:ae:37:b1:00:cb:1a:
a0:3f:53:f8:a9:9e:1f:7c:7f:f8:0c:1a:7e:1f:70:6e:de:df:
10:66:a8:85:92:43:e2:b1:c7:56:d0:7e:92:1d:5a:48:79:f6:
55:a6:87:08:03:da:5e:dd:8f:56:d0:f6:ea:f4:63:d2:9d:e8:
eb:9d:21:db:a9:17:ee:c1:7e:31:17:23:f6:69:49:84:1c:d3:
73:af:92:dc:36:87:ef:78:72:83:1d:28:4a:ee:41:74:17:14:
b8:90:d1:66:b5:e9:b5:0d:f7:3d:f1:08:91:16:f8:5b:6d:dd:
0a:b2:b9:c4:e3:b2:20:f2:dc:51:61:09:83:ef:2e:c8:d9:47:
70:04:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:59:56 2026 by rpki-client