
$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
File: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: wuBJwpKwOiGhlkXr5a00YrNTyDMK7HD3QVMHitGSpjk=
Subject key identifier: 19:B5:35:6B:C1:93:2E:65:06:18:E0:88:BC:DB:0E:DD:45:05:D9:02
Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial: 65940D84F4F023AAD1E3217BAA4E1A2F8B39A7F5
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
Signing time: Mon 23 Feb 2026 09:00:02 +0000
ROA not before: Mon 23 Feb 2026 08:55:02 +0000
ROA not after: Mon 22 Feb 2027 09:00:02 +0000
asID: 4800
IP address blocks: 103.189.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:94:0d:84:f4:f0:23:aa:d1:e3:21:7b:aa:4e:1a:2f:8b:39:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
Validity
Not Before: Feb 23 08:55:02 2026 GMT
Not After : Feb 22 09:00:02 2027 GMT
Subject: CN=19B5356BC1932E650618E088BCDB0EDD4505D902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:44:09:37:c7:a0:a1:ed:71:54:e8:95:11:
9b:30:07:fa:d9:e8:80:d8:99:37:cf:d2:6f:38:3c:
99:92:cc:88:d5:aa:15:ef:dd:e6:73:5d:c9:6b:37:
fd:91:76:9b:24:5d:20:f4:8b:13:64:32:3a:a0:f8:
87:87:a6:7c:da:4b:6b:ed:e9:da:11:4d:15:dc:ed:
f7:a3:19:7b:48:46:c9:95:ac:e8:f4:48:ec:d7:76:
cb:30:bf:4e:80:cb:d9:9a:3c:8f:fc:72:e3:85:f2:
28:a1:7a:71:ec:3a:08:95:42:71:6b:f0:7e:c7:85:
a5:87:b8:4e:83:ce:5b:dd:f4:cb:44:20:19:2f:59:
04:41:20:f7:dd:1f:c7:8c:c3:5d:e4:9f:91:76:51:
60:de:92:5c:c5:fa:76:2a:c7:b0:e6:c1:40:3e:ee:
02:9b:b8:82:0a:00:c0:b5:5d:8c:70:fd:6f:fe:29:
be:4e:76:f1:4c:27:43:43:4f:cd:34:dc:13:83:b4:
fc:1f:f2:a5:1a:72:9e:91:7d:fe:b0:76:68:98:83:
57:81:a4:7a:3b:58:17:5c:8a:30:5d:ff:16:f7:5d:
17:b4:f5:3f:3d:d4:04:73:0e:0f:6f:29:10:2f:48:
a5:21:bd:3b:52:5f:5c:b9:5c:28:4f:b5:cb:56:9a:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:35:6B:C1:93:2E:65:06:18:E0:88:BC:DB:0E:DD:45:05:D9:02
X509v3 Authority Key Identifier:
keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:ab:7e:d6:92:68:b5:7d:db:36:9d:36:51:19:5b:48:3f:f0:
06:48:18:e7:de:83:99:98:1b:0c:ae:1c:0b:05:1c:15:59:6a:
44:74:35:78:82:ef:4d:6a:90:47:89:bb:18:d3:cd:2e:98:42:
a7:2f:44:84:dd:f3:05:1e:81:d2:63:07:8f:40:ee:d9:6d:97:
5e:d7:af:ac:2c:57:45:d3:aa:b1:bc:05:a3:0c:36:f0:77:ca:
e2:e6:71:f0:ee:91:e3:57:8b:f2:f9:4b:a5:47:bc:04:0b:c6:
3f:0c:92:5a:8b:42:ab:98:58:43:82:bb:ba:99:4a:2d:8d:e2:
eb:52:9f:7c:33:4e:d5:82:66:86:40:69:c1:b5:42:aa:bb:f2:
90:66:ba:47:80:05:c4:76:ff:3f:e1:98:a3:b9:0e:70:6f:64:
c9:29:aa:86:30:ad:1f:a0:3f:7c:42:98:b4:09:e3:aa:03:81:
fb:ca:88:9e:7d:69:71:40:1a:5a:e5:f5:a5:1c:57:2a:ca:f0:
03:c3:5c:4a:a2:f0:92:d8:41:3e:0a:32:d2:bf:fb:c7:5d:2f:
e6:e5:c4:79:57:45:10:15:e2:11:4f:fd:28:2b:06:da:5c:82:
e1:db:2b:79:1a:5f:72:4c:bc:fe:b6:af:1a:da:36:41:c8:2b:
79:5c:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:28 2026 by rpki-client