
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
File: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier: scIeroRPWT1wsIkMgDYKxH7mdRNRBrNreM+NffWY2p4=
Subject key identifier: CA:58:78:FF:7F:DF:DC:43:ED:7F:18:65:0A:41:F5:A6:77:B0:F3:D6
Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial: 260ADDA4E084242D8B5FF99D03F5B4931C3414E2
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
Signing time: Mon 02 Feb 2026 15:00:00 +0000
ROA not before: Mon 02 Feb 2026 14:55:00 +0000
ROA not after: Mon 01 Feb 2027 15:00:00 +0000
asID: 152368
IP address blocks: 103.118.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 21:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0a:dd:a4:e0:84:24:2d:8b:5f:f9:9d:03:f5:b4:93:1c:34:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Validity
Not Before: Feb 2 14:55:00 2026 GMT
Not After : Feb 1 15:00:00 2027 GMT
Subject: CN=CA5878FF7FDFDC43ED7F18650A41F5A677B0F3D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:e6:6b:dc:b9:f5:c2:4f:51:ed:98:98:48:
d9:14:2b:71:67:62:b7:82:91:18:b4:f5:d3:f1:6d:
1e:01:02:2a:d0:ff:34:31:fb:2e:9d:10:31:eb:45:
6f:74:d2:72:18:64:d9:62:0f:bd:1c:94:86:c0:17:
19:fc:fa:e5:78:23:3e:8a:f9:4f:cf:0e:5c:13:32:
09:9c:ef:03:c1:61:93:64:b1:42:f5:0a:1a:fe:36:
2c:a0:b4:4c:3c:1d:c4:69:ae:c3:c1:ac:4a:f0:4c:
02:60:11:2b:f0:06:68:b9:0c:98:28:b2:5b:a4:86:
ca:af:14:4f:24:22:9c:c6:b9:68:45:09:50:39:83:
36:48:5d:2f:7a:bd:7c:71:21:7a:9b:24:d7:19:b1:
4e:c6:e5:78:8d:a0:2a:01:00:ad:82:60:dc:aa:4b:
b2:f0:6b:6d:dc:2d:81:f1:f1:6c:db:60:52:35:0d:
fe:ff:81:ec:4d:38:cc:3f:e5:1b:bb:9e:52:4d:cf:
e8:68:41:95:3c:7c:9d:d3:95:04:c2:2a:fd:aa:56:
a2:eb:dd:c8:51:29:5c:75:34:2f:63:32:63:ce:29:
5f:2c:80:fb:19:89:ce:02:46:73:e8:17:06:b1:cb:
f4:fb:cd:2f:6f:d5:b6:ac:34:1b:2a:6e:18:9d:8f:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:78:FF:7F:DF:DC:43:ED:7F:18:65:0A:41:F5:A6:77:B0:F3:D6
X509v3 Authority Key Identifier:
keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.175.0/24
Signature Algorithm: sha256WithRSAEncryption
67:22:77:e0:f3:e0:82:c6:a4:6a:7f:86:c6:e7:a5:c8:82:fd:
18:fc:f8:c3:66:99:8b:9f:f4:90:a4:ea:47:5f:12:6b:68:2e:
70:9e:9f:20:7a:9f:2e:f3:6d:c5:66:0f:0c:df:25:21:28:da:
b4:64:e0:e6:ff:5d:ae:78:3c:be:df:c2:56:4b:1b:9b:c5:1e:
49:1d:3a:e8:72:d9:70:03:f3:50:0c:a9:d7:9c:7f:e5:5a:67:
a4:d6:04:58:48:e4:bc:e9:ca:67:77:1c:48:51:5b:b4:9c:17:
64:17:01:6a:67:b2:26:97:14:d1:3c:09:cb:83:b1:78:3d:b1:
0a:14:cd:d4:32:26:99:f0:a4:91:73:61:9d:2e:a2:0f:09:68:
7f:62:7f:91:55:99:c5:51:ca:7d:d1:34:16:f6:d4:1e:d1:24:
1f:12:43:4c:98:6a:d1:e3:d0:8c:35:b2:1d:fb:73:59:3b:29:
92:93:3c:b5:f0:8f:c7:8d:0c:8a:d7:ef:9c:13:11:08:55:21:
a4:66:d4:46:55:12:54:46:1d:9c:3c:80:5a:e6:d0:53:76:59:
13:88:e9:e6:fd:f6:2c:34:e4:6f:d3:b5:23:c5:5e:01:3c:a4:
83:e8:36:c1:4e:a8:3f:93:da:17:b9:c8:36:d2:92:2c:f1:28:
46:59:1e:ed
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJgrdpOCEJC2LX/mdA/W0kxw0FOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC
MDhFRkJGMzAeFw0yNjAyMDIxNDU1MDBaFw0yNzAyMDExNTAwMDBaMDMxMTAvBgNV
BAMTKENBNTg3OEZGN0ZERkRDNDNFRDdGMTg2NTBBNDFGNUE2NzdCMEYzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdOZr3Ln1wk9R7ZiYSNkUK3Fn
YreCkRi09dPxbR4BAirQ/zQx+y6dEDHrRW900nIYZNliD70clIbAFxn8+uV4Iz6K
+U/PDlwTMgmc7wPBYZNksUL1Chr+NiygtEw8HcRprsPBrErwTAJgESvwBmi5DJgo
slukhsqvFE8kIpzGuWhFCVA5gzZIXS96vXxxIXqbJNcZsU7G5XiNoCoBAK2CYNyq
S7Lwa23cLYHx8WzbYFI1Df7/gexNOMw/5Ru7nlJNz+hoQZU8fJ3TlQTCKv2qVqLr
3chRKVx1NC9jMmPOKV8sgPsZic4CRnPoFwaxy/T7zS9v1basNBsqbhidj4ilAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUylh4/3/f3EPtfxhlCkH1pnew89YwHwYDVR0j
BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4
OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF
RkJGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndq8wDQYJ
KoZIhvcNAQELBQADggEBAGcid+Dz4ILGpGp/hsbnpciC/Rj8+MNmmYuf9JCk6kdf
EmtoLnCenyB6ny7zbcVmDwzfJSEo2rRk4Ob/Xa54PL7fwlZLG5vFHkkdOuhy2XAD
81AMqdecf+VaZ6TWBFhI5Lzpymd3HEhRW7ScF2QXAWpnsiaXFNE8CcuDsXg9sQoU
zdQyJpnwpJFzYZ0uog8JaH9if5FVmcVRyn3RNBb21B7RJB8SQ0yYatHj0Iw1sh37
c1k7KZKTPLXwj8eNDIrX75wTEQhVIaRm1EZVElRGHZw8gFrm0FN2WROI6eb99iw0
5G/TtSPFXgE8pIPoNsFOqD+T2he5yDbSkizxKEZZHu0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:21 2026 by rpki-client