
$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
File: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier: qlhe8ugwsxt3uspMmDDw6M2qCFy+W45YSb6JDOgXmxg=
Subject key identifier: 98:E3:C2:37:E5:81:B7:7B:BA:21:E9:D8:FB:08:D9:3D:92:FF:AE:D2
Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial: 0169126B93DF6F065CC9F4B521245843BB54AC6D
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
Signing time: Tue 10 Mar 2026 05:00:01 +0000
ROA not before: Tue 10 Mar 2026 04:55:01 +0000
ROA not after: Tue 09 Mar 2027 05:00:01 +0000
asID: 141910
IP address blocks: 103.164.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 10:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:69:12:6b:93:df:6f:06:5c:c9:f4:b5:21:24:58:43:bb:54:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Validity
Not Before: Mar 10 04:55:01 2026 GMT
Not After : Mar 9 05:00:01 2027 GMT
Subject: CN=98E3C237E581B77BBA21E9D8FB08D93D92FFAED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:6a:1e:a7:7e:3a:d4:3c:ce:ae:47:ae:78:
bb:7f:ee:67:6f:af:40:f8:de:7e:7e:3e:63:48:45:
e4:40:39:1d:db:a2:1e:ff:27:39:49:fd:09:81:e8:
44:b1:5a:1b:c7:3f:4d:bb:9d:d9:be:5d:64:d0:b7:
c8:30:48:bb:3b:91:72:c1:4a:c1:fa:e2:dc:ee:bd:
5c:3c:d7:70:a6:2e:d1:31:5d:19:cf:53:7f:64:aa:
10:f9:43:66:38:80:b2:b6:50:92:d1:5c:13:68:25:
51:d8:be:68:28:ad:d9:e9:ce:f7:7c:5c:a9:3d:2e:
cc:bd:4c:0d:c2:1a:ff:f0:5a:c6:65:5c:59:30:5f:
a2:0f:6e:24:34:b3:61:16:18:29:6b:d6:6c:e1:05:
a4:52:78:c7:c3:d1:a1:56:4a:c9:9e:db:3e:94:a2:
fe:9d:7e:c1:6b:84:32:56:19:38:f4:ca:68:a4:8c:
8f:07:c9:64:99:e1:18:a4:e1:47:a4:b1:5b:f7:3c:
3d:ec:82:d9:4b:1e:d3:00:d3:8c:39:c0:5c:01:5d:
de:e5:ad:8f:50:28:f2:ec:d3:b5:16:5f:9d:75:f1:
21:26:63:b9:eb:c4:78:fd:69:f1:8b:e6:5d:74:13:
6b:74:8e:70:80:d1:20:93:76:c9:cd:02:aa:c5:43:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:C2:37:E5:81:B7:7B:BA:21:E9:D8:FB:08:D9:3D:92:FF:AE:D2
X509v3 Authority Key Identifier:
keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cb:cd:6d:20:44:36:fc:ee:b2:3e:a7:b3:b5:f8:45:b6:14:
83:08:cf:3f:7c:fa:05:c8:d7:f3:27:e3:5b:74:35:9f:6a:d7:
2b:5d:d9:61:4e:9b:b3:c1:2a:68:08:db:fe:4c:9f:c7:ed:55:
fb:6d:53:db:eb:ad:fa:c2:7c:c1:02:50:aa:cf:ed:b1:29:bd:
3f:72:65:23:f5:a7:69:25:c7:b4:e5:ce:bb:5c:a3:e4:0d:f5:
14:19:c5:4b:59:20:9f:3a:22:a2:ef:d9:ea:01:0b:a3:ca:5b:
aa:76:9d:ea:21:a1:cc:e4:8a:74:47:d6:b3:3f:19:8d:d3:3a:
fb:2c:bc:84:c3:67:c1:81:f6:39:ee:19:c8:9c:92:af:9f:2e:
bc:37:85:0e:89:70:12:ad:87:15:a8:b1:eb:5a:9b:da:13:93:
f6:86:aa:9f:5f:43:43:86:e2:d7:31:46:33:3a:37:7a:3d:a5:
cc:58:35:40:0e:30:cb:ea:a4:4c:9a:87:50:cd:d3:4d:ca:be:
f4:94:07:ce:ba:91:69:66:b9:f7:73:fe:e3:c1:e6:ab:6d:86:
dc:37:d2:28:30:05:34:0b:cd:b3:37:66:37:9a:75:58:2e:21:
3e:13:85:e5:01:f0:ff:b4:22:3d:90:0f:29:30:21:d0:cf:f9:
f8:a4:ea:bf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAWkSa5PfbwZcyfS1ISRYQ7tUrG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0
RjFDMUQ1RjAeFw0yNjAzMTAwNDU1MDFaFw0yNzAzMDkwNTAwMDFaMDMxMTAvBgNV
BAMTKDk4RTNDMjM3RTU4MUI3N0JCQTIxRTlEOEZCMDhEOTNEOTJGRkFFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+imoep3461DzOrkeueLt/7mdv
r0D43n5+PmNIReRAOR3boh7/JzlJ/QmB6ESxWhvHP027ndm+XWTQt8gwSLs7kXLB
SsH64tzuvVw813CmLtExXRnPU39kqhD5Q2Y4gLK2UJLRXBNoJVHYvmgordnpzvd8
XKk9Lsy9TA3CGv/wWsZlXFkwX6IPbiQ0s2EWGClr1mzhBaRSeMfD0aFWSsme2z6U
ov6dfsFrhDJWGTj0ymikjI8HyWSZ4Rik4UeksVv3PD3sgtlLHtMA04w5wFwBXd7l
rY9QKPLs07UWX5118SEmY7nrxHj9afGL5l10E2t0jnCA0SCTdsnNAqrFQ8SZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmOPCN+WBt3u6IenY+wjZPZL/rtIwHwYDVR0j
BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG
OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD
MUQ1Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1MDFjZGY5LTUyZTEtNGM5OC05
YWIzLWFmYjcwZmFjMzc3Yy8wLzMxMzAzMzJlMzEzNjM0MmUzNTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6Q7MA0GCSqG
SIb3DQEBCwUAA4IBAQByy81tIEQ2/O6yPqeztfhFthSDCM8/fPoFyNfzJ+NbdDWf
atcrXdlhTpuzwSpoCNv+TJ/H7VX7bVPb6636wnzBAlCqz+2xKb0/cmUj9adpJce0
5c67XKPkDfUUGcVLWSCfOiKi79nqAQujyluqdp3qIaHM5Ip0R9azPxmN0zr7LLyE
w2fBgfY57hnInJKvny68N4UOiXASrYcVqLHrWpvaE5P2hqqfX0NDhuLXMUYzOjd6
PaXMWDVADjDL6qRMmodQzdNNyr70lAfOupFpZrn3c/7jwearbYbcN9IoMAU0C82z
N2Y3mnVYLiE+E4XlAfD/tCI9kA8pMCHQz/n4pOq/
-----END CERTIFICATE-----
Generated at Thu Mar 19 10:43:34 2026 by rpki-client