
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa
File: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (raw, json)
Hash identifier: PAO+Kk4WyW8qQnaa3rlW0GbO1a4tKVv1+JDyB+HgHco=
Subject key identifier: 63:F5:6D:F1:5B:B4:34:C3:B5:B3:94:60:2F:D5:0E:63:E6:72:97:13
Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F
Certificate serial: 30F1A072A88BF49CD992D5CF3D0B5EE6401A19FA
Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa
Signing time: Tue 17 Feb 2026 10:00:03 +0000
ROA not before: Tue 17 Feb 2026 09:55:03 +0000
ROA not after: Tue 16 Feb 2027 10:00:03 +0000
asID: 141920
IP address blocks: 103.165.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl
rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f1:a0:72:a8:8b:f4:9c:d9:92:d5:cf:3d:0b:5e:e6:40:1a:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F
Validity
Not Before: Feb 17 09:55:03 2026 GMT
Not After : Feb 16 10:00:03 2027 GMT
Subject: CN=63F56DF15BB434C3B5B394602FD50E63E6729713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:da:29:9b:97:9c:e9:05:42:bf:75:b7:d4:
e4:ba:86:5b:87:04:a8:42:f0:b2:bf:33:d2:8e:2c:
6f:15:af:e5:59:63:9e:33:8f:cb:b9:32:6c:af:b3:
1c:de:aa:64:8c:8c:35:70:79:c7:55:df:08:e2:d8:
6d:b9:c8:c7:78:b0:45:37:ec:8a:6c:8f:81:62:68:
73:ad:04:0e:46:f1:e5:eb:45:46:db:e8:31:da:69:
ea:c5:53:d3:5a:f5:91:6a:f4:7b:5c:e2:9f:45:7f:
3d:33:cb:c2:da:af:01:0d:05:26:75:ff:96:84:d1:
9f:78:fb:e4:11:de:36:3c:32:d7:22:26:7f:c9:ea:
b7:52:fd:7f:27:e6:b3:f9:0e:ba:42:e1:33:eb:8b:
f3:47:34:76:e4:bc:29:82:14:c2:10:3e:92:78:e3:
55:04:60:bd:0e:89:42:56:2e:2c:49:14:2a:d2:95:
6f:bf:f5:11:69:82:36:0e:b0:2c:c1:cf:81:53:78:
a5:ed:06:67:90:f4:e8:e4:e4:a2:74:12:35:db:73:
fc:b7:23:6c:cb:11:7f:e1:b2:2c:a4:d7:58:6a:0d:
6c:70:9d:6a:63:d8:a0:a0:15:7a:8e:d0:85:24:6d:
23:b3:c0:8e:fa:f3:38:0f:ce:95:f2:d6:cb:a5:2f:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F5:6D:F1:5B:B4:34:C3:B5:B3:94:60:2F:D5:0E:63:E6:72:97:13
X509v3 Authority Key Identifier:
keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a0:2e:a2:25:06:b5:d7:90:3d:c9:17:12:73:79:f7:e7:0f:
23:0c:1c:0b:af:d9:e4:fc:2e:e3:8f:2e:4b:99:21:6a:64:12:
12:54:7f:93:42:57:d5:b6:4a:9b:f0:e2:19:71:ac:c5:05:e0:
88:8c:2a:6e:7e:27:f9:aa:65:27:78:f5:96:d3:12:39:8f:22:
83:93:43:92:ab:f3:04:91:6c:6e:83:d2:70:ab:e0:98:2c:ec:
75:6c:5f:15:2a:95:92:1d:7d:68:c5:84:8e:05:2d:03:f8:99:
8d:c6:96:fa:8b:4c:c4:98:3c:a1:cc:89:7c:90:1e:ad:9d:5b:
00:db:ae:af:31:8a:74:d8:76:40:6c:88:9a:7d:96:b9:38:6d:
fd:35:67:f7:ab:c7:8f:be:96:b7:2d:e5:72:59:b8:33:8d:83:
8e:13:e0:66:25:43:48:1a:d6:3d:86:51:17:ae:b3:da:32:e9:
20:c6:d4:e6:2c:f4:55:e0:93:52:1f:42:9f:a9:18:ac:91:36:
f9:8d:e7:77:ce:43:59:f8:1c:55:7e:d7:80:19:7e:25:7e:48:
0e:74:4f:1b:d9:d4:b9:5b:a5:6e:da:fd:5c:c5:44:0c:25:be:
84:4b:b3:01:58:47:52:68:f9:45:8f:fd:ad:49:34:89:24:47:
c8:31:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:02 2026 by rpki-client