
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
File: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: 2X3lbIbfC5Xa1gf6cGGiN++Vb8x3gUxb+SgNT6itO0Q=
Subject key identifier: EA:C6:C6:B4:FA:32:3A:BF:31:8B:AA:84:7E:7D:49:05:E1:CF:97:8C
Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Certificate serial: 7746B3A8BD9B8FE4AAF395C14110637CD5F50DAA
Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
Signing time: Mon 30 Mar 2026 10:02:49 +0000
ROA not before: Mon 30 Mar 2026 09:57:49 +0000
ROA not after: Mon 29 Mar 2027 10:02:49 +0000
asID: 38320
IP address blocks: 103.169.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Apr 2026 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:46:b3:a8:bd:9b:8f:e4:aa:f3:95:c1:41:10:63:7c:d5:f5:0d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Validity
Not Before: Mar 30 09:57:49 2026 GMT
Not After : Mar 29 10:02:49 2027 GMT
Subject: CN=EAC6C6B4FA323ABF318BAA847E7D4905E1CF978C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:28:2b:5b:b8:cc:38:83:77:55:a0:15:06:
41:6e:8e:63:f6:9b:f9:43:ba:ca:56:da:8b:4a:53:
75:3a:30:1b:77:2b:85:ff:f3:c4:b9:bf:b1:57:e8:
c3:0d:7c:98:9b:6e:70:a3:b8:97:99:fc:38:e2:9b:
9f:5d:86:82:2c:0f:6b:e8:23:e0:81:fb:7c:97:7f:
52:1d:b8:96:97:1c:d1:51:68:18:d7:09:51:7d:f8:
24:a3:0b:33:72:3d:fa:22:65:03:2d:f2:12:b5:7d:
be:ed:a0:5c:40:f2:04:83:e1:60:2d:80:6a:0a:92:
13:f8:6d:76:b1:9b:66:d2:36:74:9e:0b:83:6d:41:
43:13:5b:83:95:08:a0:53:e1:3d:81:99:20:a0:13:
4b:d1:dc:3f:f0:90:23:b4:bb:86:15:4b:c5:32:51:
2c:b7:be:c7:4e:c0:cf:7c:11:08:5a:06:7c:82:95:
97:c7:88:3c:6c:26:e6:d8:04:ad:23:4a:a3:be:c0:
58:d2:a3:62:1a:cc:65:b7:06:31:17:6e:fb:58:0d:
5c:7b:46:aa:ca:26:fb:4f:6f:61:ec:f0:d3:96:bf:
f7:a8:51:cc:85:80:d9:22:d5:3d:9b:e5:a3:06:c8:
74:d7:0d:fc:60:ab:f3:d1:c2:ff:0c:37:64:1e:00:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:C6:B4:FA:32:3A:BF:31:8B:AA:84:7E:7D:49:05:E1:CF:97:8C
X509v3 Authority Key Identifier:
keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.72.0/23
Signature Algorithm: sha256WithRSAEncryption
27:32:f2:4b:f4:61:02:64:52:ae:2d:c5:44:c6:3a:b0:bf:99:
55:9d:50:f5:74:de:81:d7:47:2b:64:2e:7e:b6:3d:8d:ad:09:
f3:e8:0a:66:b3:6b:35:08:6c:10:31:07:ee:cd:09:69:aa:8f:
e3:58:d3:b6:42:a7:11:d7:83:a6:e8:06:b0:0e:0d:58:f6:95:
64:6d:5d:f9:64:80:da:a3:b5:c0:31:a2:4c:aa:ff:62:72:7a:
7f:90:24:2f:8f:b3:c8:57:43:a6:2a:ea:99:c0:a0:c7:49:05:
86:e3:36:10:6c:85:9f:2d:28:26:d4:3e:7d:63:fa:9c:6c:c2:
2a:8a:b1:e3:20:51:44:d5:6f:e8:86:34:b9:7f:ba:2a:b2:de:
3c:39:a1:15:97:bb:48:26:8e:22:d2:6f:55:04:12:35:e7:5b:
12:4b:57:77:0f:77:c3:09:2f:ad:89:a2:2f:85:4e:5d:b3:2e:
c4:a8:36:29:57:57:98:df:ff:34:58:92:b5:d2:62:3a:8d:1c:
70:40:dc:3d:92:13:01:2f:cc:3c:95:a1:c7:86:3a:4f:c7:f2:
f9:78:85:6d:8b:6e:d6:c8:e6:ae:09:ef:4e:a0:71:9c:6d:a7:
84:8d:a1:a0:bb:a6:a1:b2:c4:27:c9:0f:3f:91:ce:0d:f8:17:
73:e3:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:25 2026 by rpki-client