
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
File: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (raw, json)
Hash identifier: eFtycN+JT8tU5jGgNYSVj/q/av7ifXOzPsUFY3TiJd8=
Subject key identifier: B7:41:E2:4E:60:81:F7:E6:E0:BC:E5:71:48:BD:6C:9B:3B:6D:A4:12
Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial: 28A485B1710991F2E56CECD8AEF52242C3B2BA2C
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
Signing time: Mon 16 Feb 2026 04:03:12 +0000
ROA not before: Mon 16 Feb 2026 03:58:12 +0000
ROA not after: Mon 15 Feb 2027 04:03:12 +0000
asID: 63488
IP address blocks: 103.233.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a4:85:b1:71:09:91:f2:e5:6c:ec:d8:ae:f5:22:42:c3:b2:ba:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Validity
Not Before: Feb 16 03:58:12 2026 GMT
Not After : Feb 15 04:03:12 2027 GMT
Subject: CN=B741E24E6081F7E6E0BCE57148BD6C9B3B6DA412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:15:78:07:7e:17:df:3e:01:1a:4f:68:d3:
22:0e:c8:07:dd:7a:b7:d0:53:93:6a:a5:af:3b:9a:
7d:4b:54:ca:6f:7b:c5:f1:32:21:b8:42:7e:58:15:
b9:41:b8:5c:12:a9:09:d7:a9:c2:c2:e5:f8:ae:be:
39:9b:df:81:9e:86:b4:2f:3c:ee:ff:96:b8:df:b5:
98:bd:58:93:a3:36:a3:25:c7:69:87:b4:27:41:97:
f0:36:6e:38:96:15:76:1e:fb:89:15:7c:64:ac:b1:
23:35:3d:ad:81:d0:97:ba:45:c8:76:15:f6:e1:b1:
bc:cd:dc:51:9c:44:98:7a:b2:53:47:92:8e:93:07:
40:4f:d9:01:98:84:3b:ee:1c:12:01:5d:7e:51:25:
fa:c1:89:42:e7:b5:b9:e9:eb:9d:51:8e:5e:87:3b:
25:98:5c:09:dc:02:36:73:c5:0c:0f:9d:c4:06:66:
53:75:53:ec:9c:ac:b2:8a:68:d0:8e:bd:23:db:eb:
bd:c3:39:a8:13:e0:61:eb:a4:e6:54:8d:90:69:e5:
d8:06:bb:71:17:a9:53:d7:fc:69:cc:a7:05:b2:a6:
3d:1a:8e:6a:f5:41:aa:99:67:44:c0:01:fd:4d:38:
f2:78:84:56:88:20:25:05:00:cd:5a:c5:6a:bf:7e:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:E2:4E:60:81:F7:E6:E0:BC:E5:71:48:BD:6C:9B:3B:6D:A4:12
X509v3 Authority Key Identifier:
keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6d:11:65:76:72:b0:bd:2b:f0:19:f0:a6:2e:be:58:dd:c9:
b8:1c:11:5a:56:ba:a7:83:1f:3f:30:b7:f4:1b:06:50:29:5d:
8d:ad:75:28:98:b1:20:d0:31:cd:ee:99:6e:49:a1:91:0a:5a:
e6:cb:0c:a1:da:c4:6a:6a:6d:9d:f3:39:ef:ee:2c:78:0e:8f:
70:89:91:fd:e1:28:95:d5:02:c7:af:11:0b:e5:7f:ed:5c:f1:
72:59:35:eb:36:79:ef:92:91:94:6d:9b:f9:c2:c1:c5:72:33:
28:ce:e7:60:53:b1:19:8d:c5:34:3b:5e:23:76:85:20:46:0e:
0b:e1:0e:ef:a8:f9:4e:cd:c2:c5:e2:08:4f:fd:e6:4c:07:42:
63:8f:58:d1:9d:37:e0:d9:ff:46:53:ec:45:cb:99:b4:41:4f:
76:73:95:e8:a6:35:52:8f:3f:be:0f:30:2d:38:73:80:83:d3:
c3:53:1a:13:6a:56:77:24:f2:41:de:01:62:f4:b3:6b:dd:fc:
a0:56:98:44:a2:82:9a:8d:b9:73:66:27:86:59:fb:e3:81:cb:
9f:f2:97:5d:b0:16:c9:32:65:3e:8e:c0:2b:cb:ff:10:24:90:
05:29:ae:ac:b8:8f:d3:8a:5a:9a:27:07:8a:9f:75:f0:f4:b0:
74:e9:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:36:53 2026 by rpki-client