
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
File: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier: VHLDU/rCLMP5jEq0vdx3vRHq8gBH9YMtoAFWWFLLuno=
Subject key identifier: 48:1C:0B:9D:C7:64:19:E8:55:E2:9B:3B:0D:CC:36:6F:52:D3:CC:24
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 4006CE01903BED185FB346C13A4F1ED6C38E4015
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
Signing time: Mon 02 Feb 2026 19:00:01 +0000
ROA not before: Mon 02 Feb 2026 18:55:01 +0000
ROA not after: Mon 01 Feb 2027 19:00:01 +0000
asID: 139419
IP address blocks: 103.43.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 04:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:06:ce:01:90:3b:ed:18:5f:b3:46:c1:3a:4f:1e:d6:c3:8e:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Feb 2 18:55:01 2026 GMT
Not After : Feb 1 19:00:01 2027 GMT
Subject: CN=481C0B9DC76419E855E29B3B0DCC366F52D3CC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:84:81:9e:02:83:16:a3:81:ff:c5:1d:d9:
3b:1a:d3:d1:2d:83:25:5b:7b:27:9e:cf:1b:e2:69:
47:66:d8:e9:b2:81:24:c2:59:86:27:94:59:fb:86:
b9:25:34:8e:49:6d:ff:24:86:44:5c:04:aa:e3:b3:
0b:c9:ae:e8:46:46:18:67:3f:f8:77:6f:6c:e1:12:
47:b1:cd:a9:fa:b9:50:02:d4:c2:db:c6:89:ef:dc:
de:91:87:d7:cf:7d:01:e9:90:56:46:2c:74:50:67:
68:1f:ce:22:bc:23:fa:1a:64:0d:db:cd:df:44:59:
5a:56:2a:de:e9:61:a4:d1:08:b1:36:12:8f:14:60:
68:90:04:f9:9b:69:b6:d7:fe:37:ff:a8:4b:82:9b:
a8:43:6e:51:1f:82:33:1b:7b:1a:31:00:f4:4b:0a:
0e:77:7d:49:6b:f7:c1:80:03:5e:49:ea:e0:ac:0b:
58:19:10:cd:35:e9:53:3a:e1:93:b0:19:fb:47:4b:
f1:a0:fc:02:eb:5b:c9:0f:9b:bc:56:77:68:11:f1:
3d:93:e7:9f:4c:ba:20:7d:db:27:03:79:ad:16:75:
77:ec:8d:88:b0:f0:69:0a:45:7d:29:89:9b:9b:31:
3f:92:f0:6c:7f:97:4f:ad:d2:4f:6f:5d:f5:72:72:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:0B:9D:C7:64:19:E8:55:E2:9B:3B:0D:CC:36:6F:52:D3:CC:24
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ce:d2:5f:1d:d6:08:c3:89:9f:54:94:2b:da:88:75:6f:cc:
45:54:ed:25:56:a7:79:db:b2:4d:ad:26:28:ef:de:53:de:f8:
51:62:da:dd:1d:16:d0:c0:af:ca:5a:6e:88:7b:5c:11:82:da:
9a:32:19:f0:fe:9f:34:d6:fb:48:69:12:e7:b4:6f:e4:ee:4b:
46:1f:25:9e:cc:f9:62:97:9b:80:59:73:b1:27:6c:48:1b:b2:
59:a1:9a:01:3e:1e:b3:7b:da:6a:e6:79:17:29:b2:1a:15:4c:
9c:48:5c:a6:4f:36:f5:09:d2:79:3b:eb:23:08:2c:9c:45:a8:
b7:bb:04:b5:5c:21:78:89:d1:73:8c:41:6f:06:e6:c0:b9:ba:
83:7a:07:44:92:3b:9e:b7:0f:67:ab:29:7c:88:89:74:5e:67:
3a:86:00:ff:b1:77:10:7a:f6:40:24:52:e5:58:45:02:fd:c7:
be:c9:e6:73:ba:eb:61:84:96:f1:35:a1:03:d9:cf:20:09:92:
94:d5:b4:c8:f5:16:c2:b7:05:0d:bb:ce:e8:38:a0:b6:f9:78:
bd:5f:cc:25:02:f5:c2:36:20:98:63:19:a3:61:75:ea:83:bf:
ed:ab:03:53:54:ad:f7:54:73:8f:92:0c:ad:0d:68:2d:41:a1:
d4:6d:7e:58
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQAbOAZA77Rhfs0bBOk8e1sOOQBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0
MzFFMTc1RjAeFw0yNjAyMDIxODU1MDFaFw0yNzAyMDExOTAwMDFaMDMxMTAvBgNV
BAMTKDQ4MUMwQjlEQzc2NDE5RTg1NUUyOUIzQjBEQ0MzNjZGNTJEM0NDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBK4SBngKDFqOB/8Ud2Tsa09Et
gyVbeyeezxviaUdm2OmygSTCWYYnlFn7hrklNI5Jbf8khkRcBKrjswvJruhGRhhn
P/h3b2zhEkexzan6uVAC1MLbxonv3N6Rh9fPfQHpkFZGLHRQZ2gfziK8I/oaZA3b
zd9EWVpWKt7pYaTRCLE2Eo8UYGiQBPmbabbX/jf/qEuCm6hDblEfgjMbexoxAPRL
Cg53fUlr98GAA15J6uCsC1gZEM016VM64ZOwGftHS/Gg/ALrW8kPm7xWd2gR8T2T
559MuiB92ycDea0WdXfsjYiw8GkKRX0piZubMT+S8Gx/l0+t0k9vXfVycr6XAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUSBwLncdkGehV4ps7Dcw2b1LTzCQwHwYDVR0j
BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw
RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF
MTc1Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMDgzZDQ0LTc4MzUtNDQzZC04
NTNhLTBhNzljZjAwZTk1MC8wLzMxMzAzMzJlMzQzMzJlMzIzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcrGDANBgkqhkiG
9w0BAQsFAAOCAQEAms7SXx3WCMOJn1SUK9qIdW/MRVTtJVaneduyTa0mKO/eU974
UWLa3R0W0MCvylpuiHtcEYLamjIZ8P6fNNb7SGkS57Rv5O5LRh8lnsz5YpebgFlz
sSdsSBuyWaGaAT4es3vaauZ5FymyGhVMnEhcpk829QnSeTvrIwgsnEWot7sEtVwh
eInRc4xBbwbmwLm6g3oHRJI7nrcPZ6spfIiJdF5nOoYA/7F3EHr2QCRS5VhFAv3H
vsnmc7rrYYSW8TWhA9nPIAmSlNW0yPUWwrcFDbvO6Digtvl4vV/MJQL1wjYgmGMZ
o2F16oO/7asDU1St91Rzj5IMrQ1oLUGh1G1+WA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:21 2026 by rpki-client