
$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
File: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier: rGHSmtnO8YlcwKux+iU+plREJhdzVU0+yTBDbs6kXto=
Subject key identifier: 15:ED:BF:74:DC:29:C9:38:14:D9:76:8F:58:58:95:E9:74:02:54:37
Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial: 675095C5DCCDDEAEBC25D6FAC42219ED9819195C
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
Signing time: Sat 21 Feb 2026 09:00:02 +0000
ROA not before: Sat 21 Feb 2026 08:55:02 +0000
ROA not after: Sat 20 Feb 2027 09:00:02 +0000
asID: 45718
IP address blocks: 103.198.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:50:95:c5:dc:cd:de:ae:bc:25:d6:fa:c4:22:19:ed:98:19:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Validity
Not Before: Feb 21 08:55:02 2026 GMT
Not After : Feb 20 09:00:02 2027 GMT
Subject: CN=15EDBF74DC29C93814D9768F585895E974025437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:33:5b:d2:5c:ca:d3:6e:d6:4f:5a:b6:11:
6a:8c:b6:27:20:75:78:2f:f8:bf:2c:d7:55:bc:54:
1a:e9:94:ac:a0:d1:02:2b:89:dc:96:e9:3d:34:25:
2e:ab:54:ac:c2:70:a4:7c:5b:72:43:0c:47:89:d1:
be:6d:6b:b1:04:c8:b7:49:fe:67:29:6e:7b:d0:5b:
19:6b:e1:58:18:02:a8:54:e4:ea:a1:71:4d:bd:52:
4e:b1:90:bf:d6:e4:31:81:4e:18:3e:e4:0d:b4:49:
41:07:cf:8d:8c:07:45:fe:55:b7:49:a9:7e:ca:7b:
eb:ee:cf:59:03:51:51:37:04:a7:59:8c:04:b8:d7:
4d:7c:03:67:1e:d1:c7:d2:1b:ff:a9:8d:a7:3a:bb:
02:f9:a5:1d:b7:80:23:63:d1:09:9b:eb:49:13:d7:
1d:82:ea:bc:10:75:7f:99:ba:8b:15:7a:8c:e7:ef:
1e:70:64:d4:54:35:fc:10:20:fd:15:ce:a0:c6:79:
50:89:07:36:7c:79:65:03:8c:01:b8:f9:10:e3:e9:
ff:65:0f:8d:56:65:2b:9b:f0:66:3b:83:4c:4a:51:
b1:81:86:ad:12:3a:ae:26:ae:58:7c:ac:0a:81:4a:
7b:67:ad:e9:c0:16:23:77:ef:4c:03:e4:64:fd:32:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:BF:74:DC:29:C9:38:14:D9:76:8F:58:58:95:E9:74:02:54:37
X509v3 Authority Key Identifier:
keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.93.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f2:43:ff:4c:72:8f:28:65:87:13:42:18:99:ba:74:48:24:
af:8d:b2:fd:b6:66:e5:ba:a9:36:ed:85:0f:39:90:d6:49:f9:
56:0e:79:fc:a4:a6:1f:43:b7:33:0b:2a:ad:c4:39:13:59:c0:
49:7d:11:7e:a1:9a:ab:75:ed:24:48:56:6d:19:a8:43:1a:c3:
61:56:0e:22:4c:f3:c8:0b:6f:b2:b0:69:47:cc:79:00:d9:97:
e6:ff:e8:61:00:d7:76:c5:1a:47:8e:91:8e:dc:1e:c9:34:8a:
16:c0:92:3a:bc:f1:9e:60:4b:23:00:2b:54:d5:75:9f:f7:f8:
ec:df:4b:a1:4c:11:30:1d:7e:e9:7d:63:07:db:aa:0f:75:42:
dd:2c:36:d6:76:5e:9b:74:37:d1:26:9d:a7:30:95:1a:c6:9f:
86:a9:4e:20:1f:b4:30:83:5e:f4:6d:43:9f:d9:74:62:c4:81:
0c:c5:17:80:ff:cc:ad:c4:94:f7:11:fd:ed:c4:71:96:d0:ba:
8c:7a:34:7a:bf:62:8b:7e:50:15:df:d4:eb:f4:ca:0b:b5:df:
80:36:6a:96:d0:0f:d8:2d:94:9e:11:72:f8:12:69:bf:33:b3:
d7:e6:66:f8:3b:35:b3:f5:d0:aa:f1:0a:92:3e:40:d5:12:e6:
05:c8:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:46:17 2026 by rpki-client