
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
File: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier: DI8mGUi19aF12orHykc0S36TC5G+Qtw+wyOAf8XRRXA=
Subject key identifier: 61:1A:2B:71:FF:FB:E8:38:64:4F:C2:05:C9:98:91:1E:3F:7E:1B:1F
Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial: 407DC9D9DFD6E719F5E0942F664AF2292E7893E0
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
Signing time: Thu 05 Feb 2026 09:02:04 +0000
ROA not before: Thu 05 Feb 2026 08:57:04 +0000
ROA not after: Thu 04 Feb 2027 09:02:04 +0000
asID: 131773
IP address blocks: 103.134.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7d:c9:d9:df:d6:e7:19:f5:e0:94:2f:66:4a:f2:29:2e:78:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
Validity
Not Before: Feb 5 08:57:04 2026 GMT
Not After : Feb 4 09:02:04 2027 GMT
Subject: CN=611A2B71FFFBE838644FC205C998911E3F7E1B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:96:8a:83:34:f5:a1:7a:5e:61:6b:2f:86:
f9:08:fd:67:6c:ae:77:8b:e8:c0:1b:5d:99:c5:00:
be:24:89:26:71:b5:6e:34:33:2b:4c:24:41:d2:d2:
a2:75:6c:f9:57:e1:7c:18:67:90:53:03:3a:53:56:
50:c9:91:9c:f9:8a:ff:d4:c1:de:2c:82:1b:fa:85:
36:af:98:ca:a0:15:5b:8a:1d:bb:e5:f4:1b:36:06:
15:8e:a2:ea:bc:f5:ba:74:b5:00:1e:d1:cf:05:d5:
a4:2e:fa:39:a5:ef:88:9d:05:9e:03:11:fe:88:f2:
6f:84:19:b5:50:0f:25:e9:66:f3:51:ff:07:bc:91:
c1:d2:52:92:be:69:37:81:ec:a0:37:fa:ae:87:77:
37:aa:04:2e:f3:19:1c:85:d7:a4:09:07:76:38:c6:
96:39:5b:8b:08:1e:92:2d:2e:ed:b0:bc:fc:9b:e6:
63:10:55:85:7e:77:74:11:7f:16:86:64:54:b3:47:
ea:70:93:64:a6:61:54:67:38:c2:3d:87:aa:31:70:
17:2b:fe:bc:1b:b7:d9:12:8e:ef:88:ec:cc:36:5c:
11:29:54:2d:ff:d3:98:84:54:87:e1:b1:e2:c8:04:
72:56:fa:35:4e:08:8d:7f:f8:6b:41:11:92:c3:f5:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1A:2B:71:FF:FB:E8:38:64:4F:C2:05:C9:98:91:1E:3F:7E:1B:1F
X509v3 Authority Key Identifier:
keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.244.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:70:0c:6d:49:81:2d:11:d2:9a:47:ac:5c:c7:aa:2b:cc:83:
6f:c0:52:fe:42:89:ea:86:99:10:2d:5d:1c:af:6d:8c:75:05:
ca:c2:39:b2:0f:d4:9e:bb:f5:f7:9f:24:51:4c:5a:56:25:5c:
29:e6:6c:c6:aa:ac:fc:97:9a:23:ff:e0:53:b1:e0:b2:66:65:
dc:5a:a5:24:4f:15:8f:c4:24:cc:89:c6:83:e3:cd:3b:69:c2:
80:d0:53:4a:88:a7:01:9e:17:8d:9f:17:85:33:d4:27:95:b0:
b2:4d:9c:b3:8c:66:1b:e8:fd:ee:7c:cc:41:af:47:e3:ec:22:
f9:5f:61:60:56:cc:dd:02:04:4a:ef:15:59:c5:15:4b:6a:76:
07:55:a5:f9:44:fb:d3:95:ec:da:55:b5:a6:89:b0:2b:94:ae:
63:28:c0:2c:84:18:b9:ee:9e:15:13:6d:f6:6a:33:1b:29:8f:
b1:20:02:11:dc:cb:5b:f6:e2:65:e2:94:61:de:0b:09:82:2e:
1d:65:2a:cb:4d:10:d4:f6:05:a9:a2:54:27:6a:5f:2e:55:2b:
17:68:5c:47:bd:91:53:38:51:8d:8b:4f:f9:e8:ec:1a:40:4f:
5b:8b:1d:11:23:25:36:b6:d7:ed:b1:f8:5b:66:89:f5:9b:51:
8c:89:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:38 2026 by rpki-client