
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
File: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (raw, json)
Hash identifier: xOFYW7iQm5qoeDLJ0+fcBg/w78CpzGMdoNL2cYq7/Nk=
Subject key identifier: 8F:95:58:22:04:15:DA:22:7F:D1:3A:57:4A:C0:87:F4:6E:7F:AE:E1
Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Certificate serial: 7411526CA784692FC59DC81D191BFFF7078CFF31
Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
Signing time: Thu 16 Apr 2026 12:00:01 +0000
ROA not before: Thu 16 Apr 2026 11:55:01 +0000
ROA not after: Thu 15 Apr 2027 12:00:01 +0000
asID: 150469
IP address blocks: 103.51.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl
rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:11:52:6c:a7:84:69:2f:c5:9d:c8:1d:19:1b:ff:f7:07:8c:ff:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Validity
Not Before: Apr 16 11:55:01 2026 GMT
Not After : Apr 15 12:00:01 2027 GMT
Subject: CN=8F9558220415DA227FD13A574AC087F46E7FAEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:4d:49:27:26:42:2a:03:b8:51:1a:1b:0d:
0d:d0:cc:e1:63:98:e6:0c:06:29:74:67:37:c1:3b:
99:a1:dc:85:4f:cf:69:55:ba:98:e2:b0:12:c5:05:
20:ed:56:03:0c:1b:79:08:04:67:c6:2d:3f:ff:9e:
30:d4:7b:32:fd:55:7d:b9:ca:91:4b:06:a2:d6:f0:
cd:58:3f:1c:6b:24:a3:81:6b:fa:21:00:66:b4:a0:
4c:6a:5d:3f:14:32:12:95:3e:50:68:2b:c4:af:3b:
55:6a:25:5a:d4:8d:b2:42:50:9e:fd:00:36:16:8a:
fd:0e:40:4e:7e:f4:43:b4:f0:1e:13:49:31:fd:79:
d2:87:ec:3b:b3:e9:3d:51:87:23:7c:20:6a:48:c7:
9c:53:e8:e5:29:46:98:e2:b1:fa:a9:97:91:08:f7:
72:83:ca:6d:a5:05:8d:3f:11:22:3e:5b:5d:c9:93:
33:30:c2:ff:9a:6d:01:44:90:55:ad:4d:25:b2:2f:
2e:81:f5:b4:13:29:15:a4:5d:c8:f4:3b:22:d4:29:
1e:d3:b8:c3:78:28:9d:33:14:b9:e0:8f:fd:4d:19:
e9:13:c0:08:c3:a7:dd:f5:b4:54:ee:c5:1c:72:9f:
17:a6:53:52:99:44:d5:02:f8:e2:41:e6:3e:18:b8:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:95:58:22:04:15:DA:22:7F:D1:3A:57:4A:C0:87:F4:6E:7F:AE:E1
X509v3 Authority Key Identifier:
keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.98.0/23
Signature Algorithm: sha256WithRSAEncryption
21:d2:f7:1d:75:6a:7d:5b:12:8c:66:4d:0f:22:76:04:39:26:
cd:d6:bb:59:ac:55:f5:8d:9e:c7:6c:60:0e:6b:c2:77:7b:89:
da:54:62:3c:7b:ff:ca:67:37:2b:12:2d:fa:6b:60:b1:6f:08:
06:c0:81:57:e1:fe:0e:89:2e:f6:8d:ef:ef:e0:c6:de:3f:4c:
07:3f:a7:d9:3a:a2:7e:c6:9c:42:56:9a:0d:c1:c3:f7:43:88:
cb:ae:8d:af:b3:7d:23:94:5b:25:c6:9e:73:a1:7a:15:c0:0a:
21:93:05:4a:0e:e6:b1:7f:34:e8:a1:6f:28:7d:0c:f2:55:62:
10:82:65:f0:23:3d:64:ca:da:8b:0c:2e:70:9a:bf:90:cd:da:
bd:72:66:73:88:39:01:71:35:24:5c:05:1d:d7:22:e1:b9:71:
a3:70:37:ab:ef:9c:9d:93:46:d4:13:1a:e5:38:52:4b:cb:dc:
22:f2:d2:11:0a:61:40:3e:16:f2:61:19:bd:2e:74:7b:41:3f:
e7:55:10:02:29:7a:35:aa:99:5e:e6:e8:f7:32:f3:95:48:a9:
f2:af:5c:38:94:55:94:a0:e7:71:a8:ff:2c:ea:7e:40:03:b7:
77:cf:c9:86:5b:ca:78:eb:c8:a0:33:46:86:eb:c0:54:09:bb:
3d:b1:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:41 2026 by rpki-client