
$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa
File: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier: sN0Lb9no/hJGl0+lXH9EevBBFJRidWdgw+BecZlcnrQ=
Subject key identifier: 42:1F:30:9E:6D:F2:8D:FA:EA:39:99:3F:2D:4F:89:04:26:5F:B2:01
Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial: 386626416AA7B72697803013A763285F4610A518
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa
Signing time: Wed 08 Apr 2026 10:00:00 +0000
ROA not before: Wed 08 Apr 2026 09:55:00 +0000
ROA not after: Wed 07 Apr 2027 10:00:00 +0000
asID: 56243
IP address blocks: 103.246.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 00:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:66:26:41:6a:a7:b7:26:97:80:30:13:a7:63:28:5f:46:10:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Validity
Not Before: Apr 8 09:55:00 2026 GMT
Not After : Apr 7 10:00:00 2027 GMT
Subject: CN=421F309E6DF28DFAEA39993F2D4F8904265FB201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:a9:c7:94:93:f5:75:bc:71:3c:0e:34:d7:
86:c5:ff:0c:b7:b8:4d:65:8e:92:52:f8:ac:35:f9:
9e:c8:2f:35:62:75:a9:be:70:2e:e0:ec:ea:56:28:
5b:b4:75:d1:bf:8f:6e:34:e4:e9:c1:e0:b1:44:28:
f5:0f:3d:06:c9:01:11:8d:3b:bb:13:cc:25:a9:d2:
0c:39:99:8c:3a:70:35:44:04:52:ec:91:89:6e:a9:
2d:6b:c1:74:66:ca:cc:bf:27:56:67:5b:7a:55:3a:
e2:9d:90:08:a3:3f:f6:3e:08:d0:d1:7d:75:36:48:
78:7f:94:b7:b7:bd:1f:75:df:cb:85:b9:62:0c:ac:
b9:5a:01:2e:b9:35:34:fd:e2:6f:d7:dd:0b:c8:34:
4e:73:90:69:8b:b7:f1:0c:0c:9d:79:19:6e:a0:cf:
63:cb:e9:31:30:03:9a:0a:b4:2c:32:76:b2:35:7d:
f1:c3:a1:3d:d0:27:de:7a:01:a0:fa:1c:d3:e1:53:
80:64:1f:84:40:87:af:5f:a2:06:d6:53:c7:97:1c:
c1:81:86:22:b5:af:25:73:7a:61:23:ca:10:d0:6d:
e4:09:c9:8e:fb:c3:9e:ce:1e:aa:f9:4f:ba:f3:8b:
04:fd:e0:0a:8a:3c:80:87:44:8f:b7:ca:02:20:9b:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:30:9E:6D:F2:8D:FA:EA:39:99:3F:2D:4F:89:04:26:5F:B2:01
X509v3 Authority Key Identifier:
keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e1:7a:c9:fa:a0:90:42:cf:e3:d3:f9:67:a1:95:b9:e8:0c:
94:25:29:c6:fb:38:40:7e:1b:31:1f:d6:b8:2c:90:d9:b1:6d:
7c:10:32:d5:74:a7:12:7d:96:29:2b:74:0c:d8:73:f9:95:c5:
74:29:01:10:3a:45:0d:71:89:81:5b:a1:5a:ce:00:ae:ab:47:
c3:f0:ae:b7:b7:30:ed:4e:0f:38:74:5c:35:fd:36:5f:ca:0a:
53:c3:22:be:c6:22:c6:ea:d1:e4:f0:a7:51:74:87:a2:79:2d:
1b:9f:68:99:0e:01:c5:e6:0f:5c:19:5c:65:05:81:d7:84:cf:
cc:ba:42:e1:f7:3e:73:b3:aa:d7:2a:7e:f8:14:97:5b:03:9f:
58:8b:89:39:56:93:d2:9d:25:bd:20:4f:d5:06:12:26:4c:60:
8b:ac:2a:28:ff:15:c1:c7:cd:14:89:79:c1:85:77:66:ec:92:
c7:f3:a6:25:49:7e:09:5e:0b:2d:3e:1c:4d:0f:43:22:4d:70:
fc:5f:ec:c1:5e:3c:3d:c8:69:0d:e7:2f:b4:db:ae:ef:18:64:
92:35:e5:d2:17:da:a6:b7:28:77:23:60:07:4f:2f:48:cc:af:
29:9c:74:71:cb:12:92:35:26:eb:24:6b:c2:e7:ff:39:60:a2:
c9:b4:81:00
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOGYmQWqntyaXgDATp2MoX0YQpRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx
RUZEQTkzQzAeFw0yNjA0MDgwOTU1MDBaFw0yNzA0MDcxMDAwMDBaMDMxMTAvBgNV
BAMTKDQyMUYzMDlFNkRGMjhERkFFQTM5OTkzRjJENEY4OTA0MjY1RkIyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJq6nHlJP1dbxxPA4014bF/wy3
uE1ljpJS+Kw1+Z7ILzVidam+cC7g7OpWKFu0ddG/j2405OnB4LFEKPUPPQbJARGN
O7sTzCWp0gw5mYw6cDVEBFLskYluqS1rwXRmysy/J1ZnW3pVOuKdkAijP/Y+CNDR
fXU2SHh/lLe3vR9138uFuWIMrLlaAS65NTT94m/X3QvINE5zkGmLt/EMDJ15GW6g
z2PL6TEwA5oKtCwydrI1ffHDoT3QJ956AaD6HNPhU4BkH4RAh69fogbWU8eXHMGB
hiK1ryVzemEjyhDQbeQJyY77w57OHqr5T7rziwT94AqKPICHRI+3ygIgm6UvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQh8wnm3yjfrqOZk/LU+JBCZfsgEwHwYDVR0j
BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz
N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE
QTkzQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMxMzAzMzJlMzIzNDM2MmUzMTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM2MzIzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/Z3MA0GCSqG
SIb3DQEBCwUAA4IBAQCj4XrJ+qCQQs/j0/lnoZW56AyUJSnG+zhAfhsxH9a4LJDZ
sW18EDLVdKcSfZYpK3QM2HP5lcV0KQEQOkUNcYmBW6FazgCuq0fD8K63tzDtTg84
dFw1/TZfygpTwyK+xiLG6tHk8KdRdIeieS0bn2iZDgHF5g9cGVxlBYHXhM/MukLh
9z5zs6rXKn74FJdbA59Yi4k5VpPSnSW9IE/VBhImTGCLrCoo/xXBx80UiXnBhXdm
7JLH86YlSX4JXgstPhxND0MiTXD8X+zBXjw9yGkN5y+0267vGGSSNeXSF9qmtyh3
I2AHTy9IzK8pnHRxyxKSNSbrJGvC5/85YKLJtIEA
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:34:00 2026 by rpki-client