
$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa
File: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier: 9/L3wXTNlvVgAlYCXmCiOwF8tIjDexhOTb2j9tGrmFI=
Subject key identifier: B7:04:2F:50:BC:79:2C:5E:48:31:53:CD:80:00:D6:BD:6A:1E:BD:45
Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial: 10375B5670855240062F9E4452EE4FBBE00FC108
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa
Signing time: Fri 06 Feb 2026 08:00:02 +0000
ROA not before: Fri 06 Feb 2026 07:55:02 +0000
ROA not after: Fri 05 Feb 2027 08:00:02 +0000
asID: 133823
IP address blocks: 103.104.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:37:5b:56:70:85:52:40:06:2f:9e:44:52:ee:4f:bb:e0:0f:c1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Validity
Not Before: Feb 6 07:55:02 2026 GMT
Not After : Feb 5 08:00:02 2027 GMT
Subject: CN=B7042F50BC792C5E483153CD8000D6BD6A1EBD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:79:30:43:85:b5:5e:c0:36:2e:31:13:c8:
67:84:72:b3:32:ae:20:67:93:ed:11:93:d8:79:0a:
34:27:d5:93:98:d9:34:8a:76:95:15:5e:d4:87:10:
8e:a8:a6:f8:53:29:54:46:ec:f7:7e:3d:75:e0:6f:
3a:4c:c3:22:b1:06:82:b5:05:85:37:14:c3:96:c9:
06:2e:6c:3d:9e:a1:84:eb:a5:34:64:5a:35:62:3e:
cd:0e:51:35:0d:3b:16:36:9d:d9:1a:a0:ad:48:d9:
25:1f:fa:9e:9b:92:a1:8a:25:f1:80:46:a9:bf:30:
2c:13:03:9e:83:dd:af:d2:dc:58:42:95:0a:79:ce:
d4:e1:07:7e:0e:c1:46:f0:c3:8b:dd:28:3d:8b:dd:
70:ca:70:bf:a5:29:90:d1:c9:f9:0c:b4:d5:01:c1:
a3:40:5d:c4:76:0b:71:c6:b8:9f:2b:5d:91:f0:84:
de:44:70:a1:9f:ce:81:7e:6b:00:51:b9:ea:57:52:
46:a1:74:97:73:30:92:4e:0a:4c:3e:dd:aa:a1:c2:
d2:4b:c1:a3:54:7a:04:5d:81:6b:e5:63:77:1d:8d:
cb:a2:7b:71:96:92:c2:9d:da:26:b3:91:6c:6c:28:
43:52:5c:fe:0e:2d:7a:ed:93:ed:d6:48:d1:d3:07:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:2F:50:BC:79:2C:5E:48:31:53:CD:80:00:D6:BD:6A:1E:BD:45
X509v3 Authority Key Identifier:
keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.132.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bb:1c:74:52:d6:a1:88:47:a6:7f:aa:34:5e:63:f7:8f:2e:
a3:87:5b:3d:17:e9:41:d5:0e:cc:31:09:13:c5:21:73:5b:17:
12:b0:36:f0:ce:67:c7:a9:af:73:98:c9:09:9f:71:65:89:b3:
f4:79:4a:8e:61:df:8f:f6:09:e8:e8:00:98:20:f6:c3:5b:65:
be:b4:24:b0:b2:45:3c:d1:70:06:0e:ff:a4:28:75:7e:65:43:
73:20:1c:d8:8a:f1:8c:cf:12:96:83:b1:95:7f:cc:e0:d4:b4:
2e:aa:21:7d:a7:46:e7:e3:e0:56:90:0a:c5:3d:4a:83:56:b0:
be:a4:a0:0e:be:b0:f0:03:e8:ef:1e:68:9f:de:b6:4d:fb:86:
71:65:5b:44:5f:26:5c:d8:64:3b:43:33:f0:4c:d2:e9:00:c9:
dc:43:e7:92:63:8c:13:b7:88:b4:f2:0f:2b:3b:c1:67:cc:7a:
45:84:24:68:49:f0:cd:a0:c1:ea:fe:93:b2:9a:41:dc:f2:bd:
85:1a:42:c2:04:f1:df:04:88:4d:3f:88:db:3c:ca:70:2c:ab:
01:72:1a:33:af:42:ca:df:ab:fc:12:76:78:27:6e:d5:a6:e4:
72:bd:70:82:51:67:96:9c:51:4a:40:17:82:80:05:21:6d:fa:
f6:36:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:20 2026 by rpki-client