
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
File: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (raw, json)
Hash identifier: hMbf9jb+uOpmKgTWNZ78lbBHNdoxZJUhsCBWsTukCp0=
Subject key identifier: C6:C1:BE:A7:5A:A3:1B:E7:57:82:31:EE:DB:1E:A2:BE:9F:16:D3:32
Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
Certificate serial: 064DEE49FDA5465EFFD6482D9EBEA486D27CC8A8
Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
Signing time: Wed 15 Apr 2026 08:00:54 +0000
ROA not before: Wed 15 Apr 2026 07:55:54 +0000
ROA not after: Wed 14 Apr 2027 08:00:54 +0000
asID: 141909
IP address blocks: 103.164.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl
rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4d:ee:49:fd:a5:46:5e:ff:d6:48:2d:9e:be:a4:86:d2:7c:c8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
Validity
Not Before: Apr 15 07:55:54 2026 GMT
Not After : Apr 14 08:00:54 2027 GMT
Subject: CN=C6C1BEA75AA31BE7578231EEDB1EA2BE9F16D332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:3d:a2:02:05:7e:45:25:c2:df:20:ab:f7:
ec:5a:c9:ca:c5:d3:8a:9a:11:6c:26:de:43:29:70:
e0:f6:a0:8f:47:a8:c0:db:b2:f0:1b:1a:f4:d4:14:
db:21:3d:97:ab:ff:fb:ea:44:59:3f:0e:3e:7f:9b:
f5:4d:2e:50:f1:14:cc:24:97:e0:12:bf:2f:58:77:
16:f9:45:2d:39:dd:b8:fe:5e:f1:43:99:75:44:79:
8d:29:09:c3:71:f0:c9:8a:1b:ae:5b:93:dd:41:ab:
e6:56:b9:00:bf:9d:47:a5:41:f1:7e:c9:d8:2e:df:
44:0f:24:3d:24:80:c2:a1:a8:00:f6:22:8d:29:be:
2e:38:66:ff:02:3b:27:df:47:1c:8d:e1:01:96:ad:
4b:90:bd:26:5a:ef:b6:d0:1a:a0:10:99:48:ee:d7:
ce:35:d7:3d:ab:4c:b5:3c:b5:9e:c0:b7:52:d6:66:
86:35:c8:e5:1e:0f:06:c1:7a:5a:03:3f:c2:28:d1:
ce:7a:50:9a:45:ff:83:ff:5d:83:79:20:fc:5a:e0:
26:fe:f3:22:dc:28:82:6e:f7:ad:fe:bf:a1:7f:58:
20:39:7a:75:79:52:05:d6:92:d4:c9:bd:99:fc:96:
d7:37:19:2d:dc:23:bd:30:f8:bb:40:e1:18:e2:9c:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:BE:A7:5A:A3:1B:E7:57:82:31:EE:DB:1E:A2:BE:9F:16:D3:32
X509v3 Authority Key Identifier:
keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.150.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:68:a5:fb:c6:7e:00:f8:17:e0:70:c0:30:ce:24:b4:ef:d7:
55:d4:d0:d0:f5:27:6b:b2:2a:3c:31:51:22:31:3e:b2:ff:5a:
6c:16:17:fe:33:56:15:da:9c:df:23:d7:98:8d:79:44:e3:fe:
6f:65:80:e1:cd:73:74:9a:8a:4b:5b:c7:51:73:92:50:42:31:
78:7b:57:71:82:2f:42:4f:16:4a:9b:7a:c3:2e:cf:65:dc:92:
36:4e:ed:ae:76:97:3c:ae:bf:77:aa:d6:3e:e8:f8:15:a8:0d:
79:08:8a:cd:de:8b:69:ea:39:1c:27:ac:a7:4d:b4:0f:34:d0:
96:b5:25:69:42:32:17:c8:26:1a:25:4c:2b:88:fa:09:d2:cb:
59:e9:52:8e:d0:08:c9:bc:1d:f7:e6:e0:84:91:06:6e:1b:a5:
55:5b:50:ce:be:72:24:4a:46:74:60:2c:77:20:48:e0:41:26:
e0:b6:f5:a5:af:07:61:93:fd:3d:12:49:bf:27:45:64:0e:c8:
05:86:95:25:44:5e:b9:18:a6:80:04:9f:94:e9:b1:20:51:1d:
dc:d8:66:b2:05:02:6a:e2:90:87:2a:e4:57:d7:95:a2:63:57:
2c:38:44:3e:26:70:5b:38:02:b7:c7:52:34:18:77:01:a8:9e:
95:3c:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:31 2026 by rpki-client