
$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa
File: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier: Huk9VwXKZY5qRslqFA8wI/7KNHFWY9r3OLcCPFaU2PQ=
Subject key identifier: C7:DD:34:68:1F:75:99:4F:62:99:C0:17:8B:2D:83:3A:E9:6A:63:FA
Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Certificate serial: 50D12FBB26C8D0413F4C718261C8EB6FA606D84F
Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa
Signing time: Sat 28 Feb 2026 09:00:02 +0000
ROA not before: Sat 28 Feb 2026 08:55:02 +0000
ROA not after: Sat 27 Feb 2027 09:00:02 +0000
asID: 45325
IP address blocks: 103.169.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl
rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d1:2f:bb:26:c8:d0:41:3f:4c:71:82:61:c8:eb:6f:a6:06:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Validity
Not Before: Feb 28 08:55:02 2026 GMT
Not After : Feb 27 09:00:02 2027 GMT
Subject: CN=C7DD34681F75994F6299C0178B2D833AE96A63FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:f2:87:7e:56:ec:ae:d5:32:18:42:c3:81:
4e:7e:0e:9c:62:21:f9:a8:c0:77:1a:c8:cd:d5:51:
d0:b5:ce:7f:cf:79:e7:63:d7:f2:d8:b9:b4:16:5b:
47:07:15:e7:31:85:8e:30:15:f4:93:30:71:07:b3:
fd:f6:f5:1c:a1:10:bb:ea:95:ba:c9:d0:a8:cc:da:
23:31:65:30:2f:e4:24:d2:cc:97:fd:9a:bc:ec:f2:
f3:fe:bb:4a:16:29:d7:e4:59:45:f8:13:0a:cc:a5:
d0:45:f2:a5:1d:31:62:f6:27:12:f8:97:60:d5:3a:
64:d7:89:c6:79:99:45:61:54:2a:01:68:ee:e4:37:
25:b9:d5:43:99:d6:1b:fb:c4:6a:5b:41:9e:ac:94:
45:29:ef:75:66:9b:d1:2b:b5:70:84:e5:7f:24:cf:
c6:fe:4f:75:90:c5:65:83:d3:dc:5f:28:74:fc:4b:
20:81:33:48:87:95:19:5f:32:02:1e:f7:d7:3f:3a:
fc:8b:fb:60:26:09:86:89:bd:05:6d:37:17:47:a5:
40:1e:d4:e6:27:00:e5:d1:fe:11:73:18:f4:b8:a3:
c7:c1:7d:ff:18:27:6e:cf:52:cf:8e:d1:80:e2:7d:
29:7e:af:20:81:5e:cf:d2:62:88:cf:5e:50:07:b2:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DD:34:68:1F:75:99:4F:62:99:C0:17:8B:2D:83:3A:E9:6A:63:FA
X509v3 Authority Key Identifier:
keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.207.0/24
Signature Algorithm: sha256WithRSAEncryption
45:39:d4:f2:88:65:99:55:2f:30:1f:98:2c:d2:99:2e:4f:8d:
c5:2b:3f:fa:1b:52:c1:1b:99:ac:1b:0d:a7:a3:91:6b:3c:a0:
46:a3:0b:48:7b:57:3d:ea:8f:13:ba:cb:74:e6:7a:c0:9f:8a:
6e:1f:34:f6:88:73:de:03:aa:14:2d:8e:96:43:d5:61:08:ff:
da:4a:8c:28:ce:70:f2:eb:68:21:f6:41:a0:70:ae:15:47:92:
5f:73:6f:f8:d4:6b:b5:5b:15:f5:aa:f1:89:86:69:c8:fc:22:
5a:f4:61:5c:a3:3e:f7:89:a3:c1:df:1f:67:73:79:44:46:41:
a4:f1:ec:7e:69:c4:da:2d:b4:77:8a:40:be:de:b7:86:8b:2b:
7f:b6:83:92:bd:51:6c:9b:75:28:e9:7b:7c:78:99:aa:1e:07:
ea:ae:86:62:1a:cb:d4:7f:0c:4d:ea:bb:54:ba:56:08:80:22:
2e:c9:7c:c1:35:43:aa:3c:d9:e0:53:60:a9:85:55:50:b9:c8:
c9:02:0b:06:23:71:91:7a:25:cc:ed:c6:3e:0b:11:7f:0b:07:
c4:48:a5:ec:ff:54:0d:b9:14:1b:df:76:9c:1e:d4:7d:e9:fa:
1f:aa:a5:d9:fb:a5:b6:78:9a:5e:22:55:21:fa:ff:c5:18:5d:
b5:2f:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:19 2026 by rpki-client