
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e332e3230382e302f32322d3234203d3e203138303034.roa
File: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (raw, json)
Hash identifier: 8U66G8gqQw7VmmcQHp7PGVNiyxirbILklyn+Vm+nIt8=
Subject key identifier: 42:6F:E5:8C:B2:A6:11:50:A2:A6:BA:D6:34:48:4E:8A:4B:07:F1:E8
Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial: 50DB09FEB0612E3AD1E0F4D09EBCADFE907E5A0E
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e332e3230382e302f32322d3234203d3e203138303034.roa
Signing time: Sun 05 Apr 2026 03:00:02 +0000
ROA not before: Sun 05 Apr 2026 02:55:02 +0000
ROA not after: Sun 04 Apr 2027 03:00:02 +0000
asID: 18004
IP address blocks: 103.3.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 18:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:db:09:fe:b0:61:2e:3a:d1:e0:f4:d0:9e:bc:ad:fe:90:7e:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
Validity
Not Before: Apr 5 02:55:02 2026 GMT
Not After : Apr 4 03:00:02 2027 GMT
Subject: CN=426FE58CB2A61150A2A6BAD634484E8A4B07F1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:e9:73:5f:1f:43:b5:d6:ac:90:e4:f5:79:
ae:a1:3d:be:33:cd:b9:08:1b:e0:89:80:87:cc:6a:
3c:47:f1:a2:f1:fc:d2:a9:95:72:0e:85:d4:0a:b4:
3f:a0:77:c4:b8:6b:b8:62:4c:34:60:da:5b:9a:dd:
83:e8:57:b4:32:3b:e9:3a:1b:7e:75:73:cb:2c:d9:
c6:9a:fc:88:d3:9b:ef:3b:2e:0c:df:27:d7:6a:23:
2f:3f:92:2c:07:5b:1b:38:ee:f3:6b:d3:d2:d0:17:
e7:db:bc:02:63:c1:d3:94:2c:89:b5:39:95:aa:c4:
ec:17:bd:ad:94:95:cc:0a:4c:31:14:9b:b8:9a:ad:
e0:ae:dd:02:79:08:5e:d4:33:a0:9f:c6:30:4f:79:
9c:c3:d5:34:6a:53:5b:c0:43:f2:6c:7b:7c:0f:eb:
e4:b1:16:2a:8b:b8:d7:a7:84:3e:53:c5:8f:26:ca:
8d:b7:ef:cf:4d:6a:08:99:d4:c8:37:34:f6:0a:ae:
e5:ab:7f:68:48:c8:e3:09:08:3b:6a:02:d4:31:a1:
4f:23:ef:65:50:ff:d3:ee:fe:25:fc:4e:7c:49:0a:
75:41:ac:97:08:23:6f:96:55:73:8f:cb:da:bc:97:
76:dd:b0:83:69:7f:bb:cb:bd:dd:62:e1:b5:d6:ec:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6F:E5:8C:B2:A6:11:50:A2:A6:BA:D6:34:48:4E:8A:4B:07:F1:E8
X509v3 Authority Key Identifier:
keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e332e3230382e302f32322d3234203d3e203138303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:4b:d4:89:8b:34:ec:4c:ba:57:51:17:51:f0:9b:bc:dc:86:
94:79:d7:56:91:cb:9b:99:34:60:2c:b2:db:b8:cf:5b:ad:77:
f0:a2:60:e5:9a:41:7a:59:8c:d0:df:40:f3:5c:6b:45:68:9e:
c0:37:71:25:4e:91:63:16:7e:3c:a6:32:bc:5f:a5:ed:f8:8c:
98:6a:e5:5f:b0:bc:33:db:17:c7:fc:b0:c0:64:e6:b3:37:42:
c3:1b:39:62:1d:ed:77:45:4f:cd:63:e8:df:cd:4c:c0:7d:2c:
83:f4:8f:8a:c3:44:32:3c:c1:43:02:58:c3:50:19:1d:ef:eb:
94:67:21:59:f4:4f:d5:a1:a8:09:eb:7a:2a:aa:09:de:f5:f5:
28:6f:83:ec:1a:01:9a:16:d4:c6:e9:13:8e:9b:8b:c8:65:91:
d5:8b:fe:93:23:ec:6f:34:22:2d:17:0c:06:98:01:75:ba:71:
c8:2c:0e:81:30:40:0f:81:7b:4d:d8:77:ba:8d:69:2c:f4:e6:
4d:a7:28:85:bc:91:cc:86:19:b9:f6:8d:78:d7:ed:64:e2:0c:
65:35:b5:29:45:cb:14:f9:27:11:3c:aa:0a:a5:5f:bb:58:38:
96:d2:2f:70:49:cf:dd:fe:48:36:39:b7:7a:d5:f4:c6:01:ed:
fd:9d:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:22 2026 by rpki-client