
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
File: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier: J7nzxQoOQZd+f5FsS1z2JuLaZuo8BSYFqnL/f85DF9g=
Subject key identifier: A8:0D:67:4B:FB:A4:FB:28:43:C8:64:02:C2:E5:BB:01:D7:3A:64:84
Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial: 34369B40CF59B1C2F0D211B172C85DA426157AA2
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
Signing time: Sun 08 Feb 2026 06:00:01 +0000
ROA not before: Sun 08 Feb 2026 05:55:01 +0000
ROA not after: Sun 07 Feb 2027 06:00:01 +0000
asID: 58485
IP address blocks: 103.247.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 11:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:36:9b:40:cf:59:b1:c2:f0:d2:11:b1:72:c8:5d:a4:26:15:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Validity
Not Before: Feb 8 05:55:01 2026 GMT
Not After : Feb 7 06:00:01 2027 GMT
Subject: CN=A80D674BFBA4FB2843C86402C2E5BB01D73A6484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:f0:6b:03:ee:7b:19:e5:99:0c:c3:7a:11:
c8:2b:82:af:9e:47:94:48:06:6e:ff:10:29:ed:ea:
f0:6f:87:8a:b7:c9:a5:58:64:86:31:fc:00:9c:77:
22:79:50:a9:35:46:91:c1:ff:17:9f:ce:3f:02:e1:
2d:05:5c:25:26:50:dc:33:46:a1:cc:3e:9f:49:86:
4e:64:ed:96:bd:9a:ac:53:96:2a:a8:be:f9:1d:cc:
b4:8e:01:12:84:d2:f6:a7:c7:91:1a:d9:a0:78:85:
ff:5c:9e:04:9c:d6:45:b7:55:5e:b1:bd:55:7d:80:
28:fd:c3:ae:b6:b5:b8:14:4c:01:62:95:a0:a8:f7:
c6:07:05:07:0f:31:78:15:2d:d2:3e:3d:cd:0a:22:
6e:77:99:ab:8a:70:98:12:93:16:d7:b6:52:3e:95:
46:76:e6:e4:63:fe:27:42:b8:66:e7:ad:38:bd:7e:
34:e7:b5:a7:25:30:68:c8:d3:b9:d2:81:b8:11:8d:
27:33:f1:2e:17:10:e2:c7:f7:f7:76:25:20:38:df:
39:ef:3a:5a:74:c0:37:cb:52:f6:0e:96:a3:5a:9e:
be:1d:31:56:5f:75:ca:61:0f:a5:5b:b6:ba:d6:b6:
5d:5c:25:f6:89:2b:1b:6a:e4:72:da:9e:bf:27:35:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:67:4B:FB:A4:FB:28:43:C8:64:02:C2:E5:BB:01:D7:3A:64:84
X509v3 Authority Key Identifier:
keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:48:13:ce:26:31:d5:03:6b:a9:ed:c1:d3:59:91:50:a5:31:
ca:47:23:4a:dc:dc:14:f6:84:7c:f3:43:ac:7c:69:6d:fa:d1:
da:80:0f:ef:6c:06:c7:8e:be:94:12:d7:39:fb:8d:0c:a3:b2:
0d:4b:7e:3f:2a:c0:b3:2c:fa:69:8e:39:e2:4e:c2:d8:15:77:
ee:cf:92:c8:5e:ff:9a:27:1b:ef:cb:bd:31:46:89:8a:26:16:
e2:a8:11:fc:04:ac:28:7b:75:a8:33:37:d0:54:2c:92:5b:d5:
e1:65:77:97:d4:3d:be:4b:0f:0e:c4:01:e3:9e:f3:a3:26:bd:
e9:a5:3f:68:4e:2b:d7:d5:3c:1a:e8:3b:d5:7f:86:5e:9a:c7:
2f:57:1c:88:03:04:2a:4a:75:13:ff:bc:55:9f:da:2c:de:6b:
4c:33:28:29:e9:51:c6:67:80:f6:57:91:62:df:62:46:91:49:
ea:0d:f4:98:1c:be:db:bf:1b:00:94:e8:bc:0e:b5:24:e7:66:
18:9f:d1:08:a3:36:da:1c:13:00:2f:81:9d:1f:1e:d3:e2:62:
33:ce:be:df:83:91:fa:8d:a6:a8:87:d6:b2:0a:17:4a:30:5b:
b7:b8:5e:e1:01:21:f7:33:e5:be:d9:1c:ae:f9:fe:96:53:ea:
1e:df:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:35 2026 by rpki-client