
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
File: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (raw, json)
Hash identifier: 4TOSRtXxwoc1DClbkhe3iiOSNBbwLVpi+J6WdybY63c=
Subject key identifier: 13:7A:E3:31:1F:F4:19:02:14:7E:6C:A0:45:B3:AF:1C:BE:3B:A6:EE
Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Certificate serial: 7307ACB15A2589D393A80D2F03FB852A8E074A96
Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
Signing time: Wed 04 Mar 2026 18:00:03 +0000
ROA not before: Wed 04 Mar 2026 17:55:03 +0000
ROA not after: Wed 03 Mar 2027 18:00:03 +0000
asID: 139455
IP address blocks: 103.145.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 09:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:07:ac:b1:5a:25:89:d3:93:a8:0d:2f:03:fb:85:2a:8e:07:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Validity
Not Before: Mar 4 17:55:03 2026 GMT
Not After : Mar 3 18:00:03 2027 GMT
Subject: CN=137AE3311FF41902147E6CA045B3AF1CBE3BA6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:8d:7e:71:10:ba:a7:dc:f9:01:7e:71:59:
3a:a5:4f:ae:81:c6:ff:7e:de:7d:1b:f9:f5:32:24:
57:6a:a1:c1:b0:ad:2f:59:e8:d2:6d:14:13:22:01:
72:e3:e7:2d:c3:cf:09:ba:46:66:97:d6:d6:a2:60:
5c:85:81:52:50:c4:7d:e6:c4:17:9f:55:a5:0d:5e:
f7:f6:b9:92:73:95:88:4d:a1:84:52:d0:21:4b:61:
66:bb:4f:c3:0e:ee:b5:76:39:89:24:51:70:06:ac:
73:bc:a1:f8:0e:ca:bb:b7:f9:62:a4:bb:ad:c9:9f:
74:a4:9b:cb:da:da:ca:bd:ee:22:a2:e3:4e:e4:58:
7d:36:92:e9:eb:c3:05:97:44:9a:74:49:12:6e:fc:
f2:84:fd:83:eb:72:78:1a:88:aa:a2:29:9a:d7:cf:
fa:be:71:5b:cc:c4:6a:b6:16:34:8b:e9:47:e1:d9:
91:54:d4:32:77:0c:30:9a:36:83:f7:f0:d1:d9:ec:
3d:25:59:04:5b:52:c3:43:78:02:f0:75:df:d5:3d:
b1:da:b1:48:ff:ea:ef:53:86:62:c8:26:cf:30:d6:
7c:01:ce:23:1c:ee:a6:3a:b3:72:07:e3:58:d6:b0:
f0:d1:7d:8d:71:0d:21:58:79:55:88:07:23:43:08:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:E3:31:1F:F4:19:02:14:7E:6C:A0:45:B3:AF:1C:BE:3B:A6:EE
X509v3 Authority Key Identifier:
keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0b:0b:1c:c7:6c:45:ba:c2:6e:89:dd:81:8b:d6:80:8d:e8:
b3:0b:95:78:c2:b6:29:75:86:6e:f3:de:26:5c:c6:b5:fd:a9:
66:09:d0:38:de:1b:41:36:51:85:f1:d3:ca:55:8d:9d:42:dc:
f9:02:90:78:79:aa:b1:6f:61:b6:42:38:77:7c:ca:dd:1d:56:
4d:76:e6:f7:f0:84:50:26:0c:91:ca:27:f6:60:44:cf:da:d7:
37:3f:e3:30:0d:75:da:56:a1:03:a6:e8:db:62:8b:5c:79:83:
7f:1c:79:75:94:3e:c8:80:72:bc:b0:af:f0:f5:d1:96:01:d4:
49:1b:84:d4:07:31:4b:da:32:c4:72:44:2e:cc:d0:a9:4e:18:
fa:d2:a3:86:38:0c:c2:15:fa:e2:db:4a:52:9a:6e:94:88:3a:
df:32:61:b8:c3:e7:5f:50:db:b6:ba:55:bf:cf:7f:40:76:ef:
78:2f:04:f7:19:51:fa:f1:ca:8f:9b:f6:e9:8d:83:ac:8f:97:
d2:93:56:2d:d7:87:97:64:7e:43:4e:ee:cf:1a:62:76:bb:0d:
ba:73:cf:4e:1d:28:d1:89:81:9f:12:55:cb:0c:5e:1c:09:09:
d2:5a:51:3d:4c:71:0c:9f:17:64:6a:0c:b5:73:af:42:63:47:
96:38:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:55:56 2026 by rpki-client