
$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa
File: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (raw, json)
Hash identifier: 58UUizSLpnG1trHCPIb9AqSu6ju6/9seEtfK+BC6GOc=
Subject key identifier: 7B:8A:88:BC:BB:0A:59:D4:D3:F8:42:C6:DE:0D:A8:D2:22:B9:C9:78
Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Certificate serial: 37E9926CFF6F78CB83990BD9BC2DDA9C4BAC45FB
Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa
Signing time: Wed 08 Apr 2026 12:00:04 +0000
ROA not before: Wed 08 Apr 2026 11:55:04 +0000
ROA not after: Wed 07 Apr 2027 12:00:04 +0000
asID: 136861
IP address blocks: 103.103.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 22:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e9:92:6c:ff:6f:78:cb:83:99:0b:d9:bc:2d:da:9c:4b:ac:45:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Validity
Not Before: Apr 8 11:55:04 2026 GMT
Not After : Apr 7 12:00:04 2027 GMT
Subject: CN=7B8A88BCBB0A59D4D3F842C6DE0DA8D222B9C978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:96:79:12:6a:1a:39:3a:ff:13:88:46:dd:
38:a4:d2:34:b0:17:05:0b:6e:e7:9c:01:5d:81:0f:
08:1c:33:9c:5d:5a:4f:9a:55:1b:8f:00:69:c4:58:
7c:37:1d:79:42:80:04:4d:38:11:f2:6a:9b:06:9e:
c0:0c:ea:ee:3c:ff:99:98:5e:39:b4:85:fa:20:9e:
40:80:e5:13:5e:d5:71:a8:5f:32:9a:84:97:cd:73:
f1:b6:71:e1:39:33:bb:20:2b:b5:03:33:28:ba:62:
c0:1f:77:22:15:17:c8:c2:b6:9a:ab:f1:78:19:33:
1b:91:f7:2f:8d:3b:f7:7d:69:4c:14:84:38:28:85:
d4:81:f2:6b:35:cb:41:c8:df:e5:7a:cc:6d:d8:c6:
97:ee:92:60:fe:dd:38:36:18:8d:69:71:f2:1e:79:
87:60:92:31:83:ee:76:70:de:6a:63:22:07:5b:cd:
be:48:f2:80:86:81:08:18:33:6c:15:89:79:01:20:
d4:67:aa:7c:9f:a8:ed:62:2b:a7:cc:ab:1e:bd:eb:
56:b3:1b:02:3d:f6:d9:74:9a:8b:7b:bb:6d:80:f6:
7a:8b:73:ab:85:d6:ed:69:54:7b:9a:e2:87:72:9c:
47:61:e7:0b:41:cc:b8:07:d2:ec:49:c1:7d:c2:bd:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:88:BC:BB:0A:59:D4:D3:F8:42:C6:DE:0D:A8:D2:22:B9:C9:78
X509v3 Authority Key Identifier:
keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:48:28:1b:b4:1e:08:78:49:05:bb:6d:e2:fd:bb:61:be:41:
c3:7a:1a:01:21:ed:71:c6:d2:c7:81:7e:44:2c:cc:69:d5:1c:
9b:d5:b4:15:9e:d1:f8:15:2e:c2:c0:75:e0:86:95:26:67:1c:
18:0d:a6:ce:7d:8d:c2:00:5b:95:e8:26:5a:5e:c9:66:81:24:
bc:15:25:f5:66:3b:20:e1:f7:ac:1c:5b:a0:40:10:14:4a:c4:
1f:da:46:7a:d5:12:be:ef:a2:bf:8e:7a:c4:02:84:3c:4c:b7:
41:31:d3:36:6b:3f:4a:a2:f2:c1:fe:f9:49:4d:4a:07:46:2e:
77:43:70:04:e6:de:c5:0b:df:f1:54:f4:dc:a0:7e:d2:89:11:
d3:d3:c7:9f:93:3d:21:ad:39:af:5d:fe:e9:43:ca:e1:ca:03:
19:37:a5:63:03:72:ec:e3:cb:53:cf:a6:33:e0:21:d3:78:7e:
11:d3:ad:93:93:f9:59:3b:91:da:2f:f9:1f:c5:b1:90:9e:1b:
87:63:97:c9:cd:0f:a7:84:c2:fd:7b:fd:6e:39:76:28:c1:b4:
ef:94:8c:42:37:18:79:53:21:64:f0:c4:3b:85:94:90:8f:98:
e9:4f:e4:ba:21:30:bd:74:b8:50:17:62:5b:57:db:e8:17:d2:
b1:b3:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:54:58 2026 by rpki-client