
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
File: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (raw, json)
Hash identifier: wDP1bwkSfPBPdBdicM3oI7ui4Fcy39CECDAXZCQ0X9Q=
Subject key identifier: 86:00:55:4E:F1:23:9E:82:D8:66:A4:7A:92:3B:82:80:58:5D:EB:2B
Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial: 53EEAC1F547661A43B09603274170E7DFE754157
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
Signing time: Mon 13 Apr 2026 08:03:29 +0000
ROA not before: Mon 13 Apr 2026 07:58:29 +0000
ROA not after: Mon 12 Apr 2027 08:03:29 +0000
asID: 55659
IP address blocks: 218.100.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 01:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ee:ac:1f:54:76:61:a4:3b:09:60:32:74:17:0e:7d:fe:75:41:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Validity
Not Before: Apr 13 07:58:29 2026 GMT
Not After : Apr 12 08:03:29 2027 GMT
Subject: CN=8600554EF1239E82D866A47A923B8280585DEB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:20:e9:db:6a:d6:4c:7c:f7:00:37:31:90:
dc:0c:50:4c:b7:ea:60:dc:9c:5a:02:ab:3f:ea:84:
f4:dc:3f:e2:fd:d5:85:a7:e1:77:04:cb:08:ab:8d:
8e:c5:0c:71:06:40:ce:1b:91:b2:1f:e1:58:5f:8c:
3c:5b:72:6f:35:25:f1:32:6c:42:d2:0f:62:f8:33:
f8:e1:e7:8b:78:59:35:bd:a4:22:d6:ea:10:b3:7b:
f8:79:b9:cd:ab:34:b4:1d:62:d9:b7:61:1a:73:24:
06:a9:7c:70:23:ea:c4:39:01:0e:6e:e0:12:68:cc:
58:f6:24:4a:66:73:a3:4b:92:1f:fc:da:e4:b7:06:
2b:0e:e3:00:30:bc:11:d3:7f:5a:44:73:03:cb:89:
03:0b:52:52:3a:4a:41:90:22:17:3d:2e:48:c6:dd:
13:fc:7e:1d:93:5e:72:b9:ce:7a:da:13:37:dc:2e:
49:3c:b7:21:71:51:5f:19:27:5f:c1:5c:66:c3:3c:
9c:32:2d:5d:a9:6e:2b:41:dc:20:7a:73:71:54:74:
b4:e5:9d:3c:ff:bb:42:d5:ff:76:f4:b1:7b:75:d8:
db:67:15:bf:81:52:13:48:c2:8b:12:c0:41:6a:d1:
2b:86:d4:64:17:6c:47:8a:47:fc:b8:aa:84:3f:3d:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:55:4E:F1:23:9E:82:D8:66:A4:7A:92:3B:82:80:58:5D:EB:2B
X509v3 Authority Key Identifier:
keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.100.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6b:e9:68:16:46:da:d4:a5:74:01:17:27:ab:62:5f:8c:1b:
3f:c5:00:57:11:f2:51:ac:9a:08:3e:e7:ef:66:3c:1a:5c:68:
bb:fa:31:ec:35:86:14:28:1d:7e:49:9b:62:2e:1a:70:8c:fa:
a2:39:09:7f:36:47:49:10:0e:44:2d:97:d9:df:e8:dc:a9:90:
74:39:72:10:9a:3a:42:e6:90:b6:b2:f9:f2:1b:5c:f0:00:ad:
80:4e:31:9a:fb:d3:43:07:98:fd:a2:80:07:34:11:9a:2f:f6:
f7:01:81:2d:a6:ac:31:9d:b4:7e:6e:1e:7b:f8:6f:a5:37:2e:
ae:f2:53:85:f1:cc:5d:c8:98:72:25:6d:20:9d:8c:75:01:68:
d8:86:76:65:be:c0:cd:57:b8:f7:20:12:c5:6b:44:11:5b:f3:
51:90:5c:6c:1e:ed:1b:71:37:9e:b2:d2:85:93:c8:63:ef:49:
b9:83:8e:a6:a2:01:f7:86:ae:7c:33:53:f1:9b:9c:55:10:e1:
44:13:d6:67:6e:b4:9b:1c:7b:cf:73:e2:d3:6c:2b:fe:66:84:
61:b1:7e:b3:20:f2:ee:86:bc:ac:be:19:f9:f2:e5:33:54:b6:
50:38:34:04:c8:fe:ed:3c:a8:76:a2:5a:bf:39:bb:ff:72:da:
05:fe:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:02:58 2026 by rpki-client