
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa
File: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier: GqBNlUasP3BBKs1HKiCmKonJkN/x7ynhSUEn/yP8W34=
Subject key identifier: 54:06:A8:B5:62:9E:A9:7D:A3:D0:8F:D0:5A:04:5A:CB:EE:84:15:51
Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial: 475B2B52C12466339D9FAC43B8C71A0862C0EC8A
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa
Signing time: Mon 16 Feb 2026 14:00:02 +0000
ROA not before: Mon 16 Feb 2026 13:55:02 +0000
ROA not after: Mon 15 Feb 2027 14:00:02 +0000
asID: 38758
IP address blocks: 103.233.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5b:2b:52:c1:24:66:33:9d:9f:ac:43:b8:c7:1a:08:62:c0:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Validity
Not Before: Feb 16 13:55:02 2026 GMT
Not After : Feb 15 14:00:02 2027 GMT
Subject: CN=5406A8B5629EA97DA3D08FD05A045ACBEE841551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:dd:1c:69:ea:2e:22:58:96:ff:52:65:20:
3b:dc:a1:2d:04:c4:f0:e2:41:34:9b:4d:26:fe:82:
b9:57:eb:09:f5:c2:6c:9a:85:6a:ab:28:d9:cc:fa:
ed:c6:c6:28:c6:6d:b4:cb:e5:32:ff:f3:54:8b:cb:
3c:a3:32:19:00:05:04:a7:66:51:11:62:1a:16:3f:
43:ce:e8:77:c5:37:0f:38:91:9a:0f:64:81:45:6b:
57:6e:95:2b:b2:52:86:5b:2b:8c:cf:32:fb:9b:3d:
06:c6:13:ac:bd:0e:90:83:a5:1d:9a:2a:64:4d:9e:
9d:e6:99:90:5e:59:03:b3:b2:e1:ee:3f:7a:61:16:
49:b3:5b:48:dd:5d:c9:40:e4:e1:59:13:02:bf:e4:
fa:c8:f5:b4:96:dd:33:7b:f6:59:a2:a5:dd:7f:6d:
08:a3:5b:30:ac:49:6a:cc:07:f5:fa:b5:82:49:8c:
aa:ae:36:c2:91:f7:28:a6:6c:5d:c2:27:a7:b4:ed:
75:cd:a3:62:ef:88:2f:8b:97:46:0f:f9:2a:a1:ac:
11:35:8f:97:48:4f:e5:a8:73:7d:1e:7a:59:dc:11:
53:6d:7d:f0:57:9e:cf:2e:ca:a3:fc:c3:78:24:e4:
a0:fc:f0:b2:cf:15:d3:e7:d3:bd:5b:09:7e:44:2d:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:A8:B5:62:9E:A9:7D:A3:D0:8F:D0:5A:04:5A:CB:EE:84:15:51
X509v3 Authority Key Identifier:
keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.110.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cd:7f:24:a0:3a:80:0f:85:37:96:c4:bf:37:45:20:f4:15:
78:be:6b:44:67:ed:05:09:4e:3c:7a:24:a8:9d:52:12:9b:07:
51:e0:2b:63:78:e2:4f:8a:3f:ea:a9:4c:3f:3a:56:3a:34:2a:
d0:b2:69:49:c0:d0:66:43:fe:04:f6:cd:a0:19:ea:e0:c1:b7:
90:46:dd:18:61:ce:49:71:37:2c:29:43:3f:7a:6a:e8:70:58:
5f:b7:a8:c2:6f:fe:f5:25:7f:f4:c7:aa:4b:8a:c0:66:5f:bb:
4f:15:ce:bf:f3:05:05:a4:ee:0e:a7:cd:84:b1:6e:ce:29:07:
43:a5:24:c0:a8:a7:5e:fa:e1:8a:e4:eb:8b:95:d6:d8:49:74:
34:5f:f4:24:80:95:27:d9:0b:b0:05:89:df:0c:45:91:21:14:
92:98:31:ea:81:34:c6:c8:f4:62:90:c9:c9:d8:2f:c5:0f:91:
21:72:d9:ba:7f:a3:55:95:c9:73:f5:73:e6:44:a3:5d:1d:d5:
90:bb:c9:fd:12:64:98:b3:62:34:30:71:82:58:81:49:f7:78:
e1:1a:0b:fe:53:c4:3c:5a:36:a2:cd:15:ea:ea:53:87:ad:d8:
dc:91:6d:e6:8e:12:f1:4a:14:e7:16:bc:74:07:c8:b0:89:2b:
5b:8e:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:16 2026 by rpki-client