
$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
File: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (raw, json)
Hash identifier: KAmpBoTLVKtQpzZQRpEjJRr9zTKNjSVFlisu1/zsLDs=
Subject key identifier: E6:76:A6:3B:35:67:6D:A1:BC:D8:CA:55:3D:FB:BE:C9:E9:36:17:59
Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial: 4ECE19A9C0CD039AAE55483BCF145FE873C12486
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
Signing time: Sat 07 Feb 2026 04:00:00 +0000
ROA not before: Sat 07 Feb 2026 03:55:00 +0000
ROA not after: Sat 06 Feb 2027 04:00:00 +0000
asID: 64297
IP address blocks: 103.77.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ce:19:a9:c0:cd:03:9a:ae:55:48:3b:cf:14:5f:e8:73:c1:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Validity
Not Before: Feb 7 03:55:00 2026 GMT
Not After : Feb 6 04:00:00 2027 GMT
Subject: CN=E676A63B35676DA1BCD8CA553DFBBEC9E9361759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:50:d7:4a:a1:d7:89:92:55:0a:12:1d:6b:
b3:81:36:ff:cd:a8:30:00:8f:01:ee:c4:d0:f3:97:
b7:78:ae:25:f8:d0:d6:9b:d9:3e:e1:bc:c4:b9:e4:
cc:f8:18:da:c9:b4:81:d2:85:4f:a8:4d:e3:b2:96:
c1:45:2e:34:7c:81:0f:20:1e:b7:4e:0e:67:bb:55:
1f:c6:84:4b:b1:31:75:fc:55:28:11:cb:05:8c:c6:
ac:68:69:e4:84:57:6d:1c:3b:64:59:94:0c:08:98:
46:ae:93:d8:32:8a:c8:43:a1:e3:a6:70:e0:a2:5a:
88:82:c7:92:d9:34:cf:b5:35:3d:e4:c7:35:97:97:
cb:c1:f2:5e:37:d7:27:41:f3:49:a0:bf:c7:a0:19:
a5:fc:ab:7a:2f:2e:b8:99:87:7e:3c:af:dc:4a:83:
49:95:8a:34:39:f4:44:38:94:59:1a:79:a3:c5:9d:
fd:b4:a0:e9:0a:74:4e:6c:41:14:17:49:11:c4:f0:
0b:f0:91:d8:e4:b2:ae:e2:11:3f:3e:a8:a3:72:50:
15:74:6e:39:90:9e:25:41:02:20:a4:4c:47:4d:82:
3e:2f:e6:85:ae:58:6a:95:3c:ce:83:dd:68:a9:1c:
f2:76:6d:2e:88:fb:f3:47:bb:dc:e2:ac:0c:5c:01:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:A6:3B:35:67:6D:A1:BC:D8:CA:55:3D:FB:BE:C9:E9:36:17:59
X509v3 Authority Key Identifier:
keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.204.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c0:63:8c:70:53:35:48:fa:54:2c:0f:51:54:4c:33:3c:31:
93:6d:16:0d:44:f0:57:6c:4d:4e:b3:92:aa:2e:30:63:91:f0:
b8:b1:cc:81:eb:80:07:79:13:94:6f:07:0e:de:f7:65:63:43:
dd:1b:ae:e9:74:c6:20:8c:cd:90:99:bc:c5:33:84:14:0c:24:
f7:a6:f0:39:b1:53:e4:68:d7:f6:fc:41:a3:96:9a:0a:94:c4:
e9:9d:fc:57:ad:d2:4e:28:47:c6:3a:37:23:be:a0:d4:a3:d6:
9e:34:d9:7b:db:62:52:46:39:06:0f:54:7c:dd:4e:04:72:c1:
57:52:19:26:b3:8d:6b:d9:9a:cc:e1:fe:1d:58:ea:f0:60:fe:
8b:e3:ec:ee:f2:47:8a:9a:6e:84:f2:47:74:80:19:91:9f:2b:
da:11:af:58:28:26:5f:36:fd:d7:38:6c:69:cb:d3:23:3b:4c:
68:b1:46:15:78:61:70:4b:c1:74:7f:c1:a3:0b:9d:8a:0e:02:
9a:96:10:51:1f:53:80:32:49:52:f7:49:20:04:20:ec:f2:7a:
57:83:63:0b:5c:87:16:14:36:83:a0:f0:25:3e:07:7a:66:3b:
0c:d1:93:bb:c2:bf:ac:96:7b:00:53:57:08:32:60:a8:61:49:
a6:15:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:06 2026 by rpki-client