
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
File: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (raw, json)
Hash identifier: inyRQz0IGL4SWivghoLK7CC3a30tKUGX0aiayozGZdw=
Subject key identifier: A8:A9:EF:72:56:AC:94:F7:50:5F:C0:8D:8D:E8:78:62:12:94:C0:60
Certificate issuer: /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial: 2944F0E81A2AE0719031919428CE88071FCE92F9
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
Signing time: Thu 02 Apr 2026 03:02:53 +0000
ROA not before: Thu 02 Apr 2026 02:57:53 +0000
ROA not after: Thu 01 Apr 2027 03:02:53 +0000
asID: 58818
IP address blocks: 103.251.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:44:f0:e8:1a:2a:e0:71:90:31:91:94:28:ce:88:07:1f:ce:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
Validity
Not Before: Apr 2 02:57:53 2026 GMT
Not After : Apr 1 03:02:53 2027 GMT
Subject: CN=A8A9EF7256AC94F7505FC08D8DE878621294C060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:ef:a3:5a:23:31:75:93:42:92:b4:ac:27:
3e:fd:eb:26:f8:2f:8f:af:c7:14:e5:8a:b9:ae:98:
f6:fb:35:ae:42:d1:2f:34:bc:8b:5f:49:36:97:71:
e3:67:1e:5a:e5:b3:ca:29:36:51:7f:70:bb:9b:c5:
43:6f:e6:cf:51:fb:6c:97:e5:83:b5:9d:ae:e0:d9:
96:aa:17:1b:75:4e:91:c5:df:de:b4:f8:3d:5d:4b:
38:4d:f7:e7:e4:4f:92:a3:63:c5:b9:66:ac:e6:cf:
a0:1c:39:c1:85:6c:c6:5f:7c:8b:44:21:f8:21:7e:
08:77:66:f4:d3:3e:89:61:02:bf:08:f8:9e:01:a2:
ad:58:3f:fd:af:c6:6a:37:25:73:e4:df:8f:8d:aa:
de:6b:d8:99:3a:ac:ff:b5:89:a4:fe:c8:0f:47:f4:
e1:33:99:3f:5c:c7:4a:94:70:f1:db:4b:ab:ef:33:
fc:79:09:9a:f0:96:31:c2:8a:e5:bf:31:89:28:ab:
4d:a8:77:2c:35:9e:f5:a9:d2:b9:60:c3:ff:0d:79:
e9:06:da:8a:0c:3f:2a:04:55:f9:60:76:89:58:78:
e9:cf:af:f6:cb:41:53:a0:e9:bb:59:41:87:a0:15:
2f:2c:4f:c8:9b:af:0e:6b:19:6d:4b:a1:24:ab:0b:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:EF:72:56:AC:94:F7:50:5F:C0:8D:8D:E8:78:62:12:94:C0:60
X509v3 Authority Key Identifier:
keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.180.0/22
Signature Algorithm: sha256WithRSAEncryption
34:79:02:65:e0:02:61:5f:f1:00:1c:58:03:f8:b6:2e:8b:ab:
ac:3c:e2:e9:14:46:ea:bf:43:10:ca:ae:32:5c:98:53:5e:54:
7b:e8:b3:39:3d:bc:44:62:3b:1e:81:27:6d:13:02:da:a5:a7:
e2:b6:b6:18:6c:84:a1:74:10:4c:d0:c0:24:9c:7e:ea:a7:29:
34:23:23:76:bf:d6:67:34:6f:56:3b:bf:1f:46:b8:f1:ac:72:
ea:b4:45:2b:e7:f8:d4:87:45:3c:83:d9:74:85:d6:a8:d7:0a:
77:5d:bf:9d:a1:95:de:53:b7:22:03:d1:8b:8a:45:17:e0:26:
bf:ee:23:2d:f9:4f:dc:6a:9b:9f:4f:a5:ac:a9:c2:d7:a1:c1:
86:82:4b:63:f8:6a:fb:ec:92:a1:ca:69:e5:de:3a:24:40:78:
97:d3:10:6c:ea:5e:38:8d:a3:3c:9e:9e:4e:7b:8b:78:0e:08:
3b:4e:b6:6e:3c:50:14:76:0f:58:b6:36:db:83:6f:f4:de:a0:
f4:3a:d5:22:0b:be:61:7a:b5:31:fb:c7:39:e7:a2:29:1a:23:
c6:54:d3:4c:66:0a:53:70:7d:bd:28:aa:0c:10:44:c6:c3:df:
5d:d8:09:cd:79:64:0c:8f:8a:ec:a3:e1:7f:d3:f9:d1:f3:0c:
d8:44:31:8b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKUTw6Boq4HGQMZGUKM6IBx/OkvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5
NjU4NUQzMjAeFw0yNjA0MDIwMjU3NTNaFw0yNzA0MDEwMzAyNTNaMDMxMTAvBgNV
BAMTKEE4QTlFRjcyNTZBQzk0Rjc1MDVGQzA4RDhERTg3ODYyMTI5NEMwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzd++jWiMxdZNCkrSsJz796yb4
L4+vxxTlirmumPb7Na5C0S80vItfSTaXceNnHlrls8opNlF/cLubxUNv5s9R+2yX
5YO1na7g2ZaqFxt1TpHF3960+D1dSzhN9+fkT5KjY8W5Zqzmz6AcOcGFbMZffItE
Ifghfgh3ZvTTPolhAr8I+J4Boq1YP/2vxmo3JXPk34+Nqt5r2Jk6rP+1iaT+yA9H
9OEzmT9cx0qUcPHbS6vvM/x5CZrwljHCiuW/MYkoq02odyw1nvWp0rlgw/8NeekG
2ooMPyoEVflgdolYeOnPr/bLQVOg6btZQYegFS8sT8ibrw5rGW1LoSSrC96/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqKnvclaslPdQX8CNjeh4YhKUwGAwHwYDVR0j
BBgwFoAUbBH/VHS+aQ5UUTIjflMDApZYXTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZTMzYTllZi01YjVmLTQ0MjktODM0Yi05NWIyYjczNjgwZTYvMC82QzExRkY1NDc0
QkU2OTBFNTQ1MTMyMjM3RTUzMDMwMjk2NTg1RDMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5NjU4
NUQzMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlMzNhOWVmLTViNWYtNDQyOS04
MzRiLTk1YjJiNzM2ODBlNi8wLzMxMzAzMzJlMzIzNTMxMmUzMTM4MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/u0MA0GCSqG
SIb3DQEBCwUAA4IBAQA0eQJl4AJhX/EAHFgD+LYui6usPOLpFEbqv0MQyq4yXJhT
XlR76LM5PbxEYjsegSdtEwLapafitrYYbIShdBBM0MAknH7qpyk0IyN2v9ZnNG9W
O78fRrjxrHLqtEUr5/jUh0U8g9l0hdao1wp3Xb+doZXeU7ciA9GLikUX4Ca/7iMt
+U/capufT6WsqcLXocGGgktj+Gr77JKhymnl3jokQHiX0xBs6l44jaM8np5Oe4t4
Dgg7TrZuPFAUdg9Ytjbbg2/03qD0OtUiC75herUx+8c556IpGiPGVNNMZgpTcH29
KKoMEETGw99d2AnNeWQMj4rso+F/0/nR8wzYRDGL
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:37 2026 by rpki-client