
$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
File: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (raw, json)
Hash identifier: U8QCfT/GcTAUTmlMkXfPTINKFIq2zee/mS/Nl3ODwDA=
Subject key identifier: BC:72:7C:4F:3A:C1:B6:16:FF:CF:1A:80:F9:37:0A:82:AE:74:B2:87
Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
Certificate serial: 3F87F54817DAF38A71780D16A0F9D92EC9414904
Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
Signing time: Wed 01 Apr 2026 08:00:00 +0000
ROA not before: Wed 01 Apr 2026 07:55:00 +0000
ROA not after: Wed 31 Mar 2027 08:00:00 +0000
asID: 131111
IP address blocks: 103.54.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl
rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:87:f5:48:17:da:f3:8a:71:78:0d:16:a0:f9:d9:2e:c9:41:49:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
Validity
Not Before: Apr 1 07:55:00 2026 GMT
Not After : Mar 31 08:00:00 2027 GMT
Subject: CN=BC727C4F3AC1B616FFCF1A80F9370A82AE74B287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:02:e3:2e:93:36:ac:a1:9c:73:6a:b2:c7:
a5:c3:03:fe:81:db:bb:ca:f8:de:bc:93:da:40:a5:
0b:9a:02:f7:ef:6c:2d:1e:b3:87:9f:4d:f3:00:d2:
51:50:4c:db:b1:4f:bc:8e:dc:a3:bd:28:1a:2f:e1:
cf:56:bc:cd:89:85:89:fb:d6:c3:06:bb:2a:bd:a2:
39:a7:13:c4:77:06:85:d3:27:bc:58:c2:ff:5c:ac:
40:b6:93:b1:1c:c3:13:4c:eb:51:dc:7c:58:f5:61:
fd:fa:f1:ad:0d:a5:18:2e:ce:da:ca:b5:f0:80:f5:
a9:39:6d:93:5e:90:d8:95:3a:62:13:d3:62:e2:73:
76:8d:4f:11:7d:ac:c9:08:01:7d:83:cc:df:33:9a:
02:15:76:17:f0:77:73:d1:7e:44:79:88:bb:69:7f:
7f:36:cc:cb:58:14:66:ab:89:aa:dd:92:df:07:64:
72:de:ad:cb:43:98:05:d6:05:89:9d:e7:16:84:60:
26:7e:1a:47:18:18:ee:5a:d2:18:ac:ea:a2:0c:59:
a1:39:bf:79:85:87:5a:67:28:28:f7:d7:af:b5:13:
c8:c8:64:d1:24:ae:29:e4:8c:cc:b3:d6:6d:72:22:
a8:7e:99:7c:57:0f:be:f3:66:85:b2:3e:34:70:25:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:7C:4F:3A:C1:B6:16:FF:CF:1A:80:F9:37:0A:82:AE:74:B2:87
X509v3 Authority Key Identifier:
keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.216.0/22
Signature Algorithm: sha256WithRSAEncryption
87:58:08:3a:8c:f4:23:63:d4:1f:de:99:14:c1:ea:5a:37:5c:
09:c5:10:dc:4a:39:40:bf:e6:bf:e8:4c:17:ff:3b:21:c4:0a:
b7:9f:d9:2a:1e:c2:9b:f4:ca:88:48:99:af:08:3b:00:7e:a7:
b9:d6:bd:3d:16:24:74:45:24:59:c8:06:11:91:33:37:3e:58:
1a:7f:8a:9a:c0:7f:4d:de:fe:4a:cd:6d:60:72:28:12:dd:73:
0d:b2:52:f3:85:e0:40:70:89:51:37:11:dd:c9:2e:11:49:0a:
8d:5f:29:26:e8:45:59:e2:95:e9:92:e5:86:aa:b4:42:3c:bd:
79:23:65:b6:97:f4:9f:a2:41:54:65:bc:73:4b:85:d5:38:bc:
2f:f5:f2:f5:2c:a3:2e:9c:81:08:c3:2b:5d:2e:9e:2a:d8:10:
0d:c8:dc:45:6d:f1:c3:57:4b:a8:85:be:c5:47:6c:78:80:2a:
89:78:cc:d1:4b:17:11:20:33:95:44:d8:e5:f0:bd:b3:8e:88:
9b:11:a4:19:55:94:fc:d8:a0:a1:f3:c0:6b:69:e9:88:d0:c6:
31:a2:61:a3:6b:70:c0:87:97:f6:0a:5a:05:56:34:c0:fc:5e:
b8:57:29:44:17:58:2f:2e:7e:e0:25:76:02:ed:d1:52:d9:93:
78:25:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:13 2026 by rpki-client