
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
File: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (raw, json)
Hash identifier: zbn7bS7zn2tJjes0380O9wZ4ybsEKzCS4tMfNtC1rmk=
Subject key identifier: 7B:1F:C3:30:15:61:1D:69:33:83:26:23:6E:E3:67:82:A6:09:BC:E2
Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Certificate serial: 074988E197F52B1D04206817932E3526D28A7C06
Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
Signing time: Mon 09 Feb 2026 07:00:03 +0000
ROA not before: Mon 09 Feb 2026 06:55:03 +0000
ROA not after: Mon 08 Feb 2027 07:00:03 +0000
asID: 150188
IP address blocks: 103.30.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl
rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:49:88:e1:97:f5:2b:1d:04:20:68:17:93:2e:35:26:d2:8a:7c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Validity
Not Before: Feb 9 06:55:03 2026 GMT
Not After : Feb 8 07:00:03 2027 GMT
Subject: CN=7B1FC33015611D69338326236EE36782A609BCE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:dd:a8:b2:fb:60:42:7e:37:4f:cb:5c:f4:
0f:a8:5c:13:86:f3:99:e9:36:c4:28:a0:0f:47:38:
ef:c1:1f:fb:91:c1:73:7f:9c:71:6d:f8:c1:6f:6d:
2b:b8:56:9a:32:b6:a7:33:b0:61:a6:f3:31:c8:ab:
fc:66:44:99:c6:d2:89:7f:33:08:27:1a:a2:cd:8b:
dc:6c:26:46:15:b3:78:32:2f:2c:60:d5:4c:f0:95:
23:da:28:f2:e9:c0:49:7f:4c:32:b2:1a:ff:79:33:
ed:6f:c8:73:89:2a:e0:b2:bf:cd:e0:ef:9e:90:d6:
ae:a8:44:df:0c:5e:e3:22:ff:99:39:de:ff:ef:fa:
01:35:aa:07:1e:d2:0e:c5:f1:18:98:45:86:c0:00:
c1:36:73:83:46:4b:ad:50:01:f4:99:ae:fb:e1:8d:
01:0d:e0:cf:e0:56:33:e4:90:04:47:35:fd:d1:33:
75:bb:c6:b3:1b:bd:49:1a:53:ae:a4:de:f6:8b:3f:
4a:d8:a2:10:b9:67:66:02:7f:f3:bd:cb:60:c0:cb:
06:d4:53:d8:bf:29:19:6a:0d:28:41:9e:9f:d6:c6:
e8:0e:11:90:37:b8:25:e5:e7:53:18:5d:f5:fa:a2:
91:a1:e0:14:a7:b3:7f:3b:f7:0b:e3:4d:09:a6:a4:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1F:C3:30:15:61:1D:69:33:83:26:23:6E:E3:67:82:A6:09:BC:E2
X509v3 Authority Key Identifier:
keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:51:45:70:74:20:cb:d2:25:5e:06:82:3d:99:63:fa:29:3b:
19:89:03:bd:7f:7c:3e:31:83:a7:5a:10:20:e2:0d:c9:18:21:
63:d2:47:8d:21:50:7a:b6:7e:4c:7d:81:9d:db:21:8f:dd:4f:
23:89:f7:1f:c2:76:e4:5c:d7:65:3c:15:11:7d:ee:41:54:6f:
b7:a0:61:6c:59:9b:7d:67:c4:bb:12:7f:19:47:69:49:78:3d:
7e:e7:77:31:cf:8f:69:da:80:e1:3d:cc:90:fc:f4:cf:9b:74:
47:78:52:5d:8b:a9:2b:d7:bd:8a:b6:eb:49:fc:1b:57:1a:71:
65:ff:d0:39:df:bd:d0:e9:f5:04:e6:33:c4:b7:53:93:9e:9d:
7c:c8:17:c7:f5:cc:41:98:ec:96:57:ef:d6:74:60:24:2a:b5:
b6:65:13:f7:b0:6a:0e:af:c7:dc:18:99:55:f2:63:f8:85:ff:
a7:7a:40:cc:8f:69:5e:d4:40:c6:cb:d6:e7:64:e8:69:5b:b6:
68:3f:db:fc:4d:82:71:b2:95:39:9d:59:7d:24:d5:33:d6:25:
b7:65:46:6b:57:55:14:0c:a1:43:66:ac:d4:b6:77:7c:f7:c0:
6f:27:8e:8e:ef:41:b3:df:dc:77:51:68:5b:cd:36:5d:ba:82:
dd:02:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:50:06 2026 by rpki-client