
$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa
File: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier: jM1dJ3YR7TzVljwojJa4q/EeDXXOpsBTj/prM8KE7fc=
Subject key identifier: 53:DE:11:F3:C9:AA:D4:2E:37:27:1C:F2:FD:EF:14:B9:C3:AC:5C:FF
Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial: 4278CC654FDEF148F6453728F6D11E749F44EBF9
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa
Signing time: Sat 21 Feb 2026 09:00:02 +0000
ROA not before: Sat 21 Feb 2026 08:55:02 +0000
ROA not after: Sat 20 Feb 2027 09:00:02 +0000
asID: 45718
IP address blocks: 103.31.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:cc:65:4f:de:f1:48:f6:45:37:28:f6:d1:1e:74:9f:44:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Validity
Not Before: Feb 21 08:55:02 2026 GMT
Not After : Feb 20 09:00:02 2027 GMT
Subject: CN=53DE11F3C9AAD42E37271CF2FDEF14B9C3AC5CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:cf:ff:17:1c:da:50:33:f1:33:ba:1a:cf:
ce:ef:d4:56:92:a5:02:d7:58:de:3c:6b:e1:57:e1:
56:64:1a:a0:2f:85:81:5d:a9:70:f5:82:fc:4f:f8:
a6:48:bf:2a:a4:0b:f6:45:08:44:a0:fe:e7:9a:a9:
7b:1a:da:26:c4:a4:b2:cc:d5:42:2e:79:99:ae:af:
c5:31:9f:4e:28:b8:18:da:10:4b:4f:9e:ce:6a:f5:
94:71:36:64:e6:33:3b:aa:16:ac:1f:e0:ef:96:30:
9a:8e:8d:56:dc:55:12:a4:05:90:51:59:e5:bd:82:
73:12:b9:ba:ce:9b:54:2c:66:03:6f:38:2f:b7:9e:
5a:28:41:cb:e3:5e:ed:b6:34:e4:0e:a4:1a:8b:0c:
45:5e:96:88:db:47:75:ba:e7:f8:79:79:24:ee:98:
5e:cc:62:5d:19:bb:75:5b:1f:47:bf:ba:32:e9:02:
c8:e5:07:16:ca:32:d1:82:5b:ca:12:eb:1e:9f:2a:
08:0a:bf:bf:10:63:4b:c9:83:7e:4e:b8:f4:b4:60:
4f:5a:6c:16:54:64:42:71:7a:b7:e4:e1:20:26:fc:
94:13:4e:1b:2a:b2:e7:6c:24:e3:b1:67:44:8c:61:
c6:3c:b7:da:74:1a:ee:9d:8c:74:82:d2:22:40:c8:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DE:11:F3:C9:AA:D4:2E:37:27:1C:F2:FD:EF:14:B9:C3:AC:5C:FF
X509v3 Authority Key Identifier:
keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7f:ef:dc:40:82:2f:92:2e:19:1a:27:2b:98:98:21:48:84:
3a:c4:b4:a7:4b:69:46:05:60:79:c3:d4:80:19:81:1f:f6:d9:
16:2d:5a:94:bb:82:13:8f:96:43:05:35:e7:0f:5b:c2:eb:b9:
4e:d8:46:c5:bf:4a:00:f1:ef:73:d2:2e:92:e1:ac:8a:f5:87:
f7:99:69:b7:98:bd:ef:cf:76:fe:5b:b3:fb:eb:1d:6d:6d:ee:
d1:73:b5:c3:18:cc:7c:0a:27:71:4a:93:c3:b2:6a:0f:55:be:
4f:21:44:63:a4:20:e4:f6:10:58:c8:62:5a:d9:84:04:56:55:
f3:6e:1c:c8:fb:19:69:e8:92:ea:4b:da:d7:2b:b9:1a:73:06:
5c:ae:9c:cb:e6:b5:11:ef:13:d3:3c:e4:b9:fd:e3:68:ff:4f:
b4:eb:bf:42:97:80:ca:77:9a:18:b9:e4:17:b7:87:4a:f8:5b:
c6:19:ae:4a:9b:55:30:1c:70:69:2c:f3:1a:94:86:e3:9c:54:
5d:ae:92:be:e6:a1:3a:d9:fc:cf:0e:d2:d0:bf:d1:f0:3f:d4:
e7:4a:17:1c:b8:8a:18:53:21:b3:87:c3:ca:0e:a5:c7:05:7e:
05:36:da:35:99:d7:e9:b4:57:1d:b4:4a:82:55:0f:15:6f:f1:
1f:b8:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:52 2026 by rpki-client