
$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa
File: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (raw, json)
Hash identifier: KhdAwHPIRwMrgrQqaZcX0vHGpMUk+wFVQWNDCczhLBo=
Subject key identifier: 30:65:6C:30:9E:4F:3E:38:48:0C:5E:97:B9:67:52:E7:45:80:0F:AD
Certificate issuer: /CN=F075D91933F7B3147C303794D6C498142A2D33C6
Certificate serial: 7F05048C3CDF929C34FB1DFC4196A91512090F3F
Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa
Signing time: Tue 24 Feb 2026 07:00:01 +0000
ROA not before: Tue 24 Feb 2026 06:55:01 +0000
ROA not after: Tue 23 Feb 2027 07:00:01 +0000
asID: 59142
IP address blocks: 103.253.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:05:04:8c:3c:df:92:9c:34:fb:1d:fc:41:96:a9:15:12:09:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6
Validity
Not Before: Feb 24 06:55:01 2026 GMT
Not After : Feb 23 07:00:01 2027 GMT
Subject: CN=30656C309E4F3E38480C5E97B96752E745800FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:6e:30:bb:74:79:ac:90:d8:6b:99:11:33:
12:80:34:f5:a1:ac:8c:2a:02:2a:cd:9d:c7:80:55:
78:97:ef:6f:8d:de:ac:19:63:7b:02:28:ed:49:2f:
da:70:85:b1:89:8f:c3:33:c3:08:12:b6:b7:a6:2b:
51:39:bb:3e:e9:05:1b:93:68:d5:f7:c8:38:99:3f:
ef:9d:90:06:89:70:d0:e5:5f:4a:08:0e:d8:dc:be:
96:05:2f:76:ad:b3:be:87:02:26:06:ce:a3:84:85:
3a:b7:a2:3f:1f:d1:30:2b:83:92:54:51:68:4c:2f:
07:bf:d5:5a:1a:fe:60:a9:4a:5e:25:2e:8a:37:55:
68:2f:9d:69:e1:66:bf:65:83:fd:51:bc:54:f4:a1:
07:5d:ab:6f:d7:fc:bc:91:87:44:58:72:06:7b:ee:
07:28:2b:7a:99:5c:91:82:3e:59:76:8e:e6:65:33:
ea:a7:93:af:9e:9f:83:00:e4:9c:44:13:64:82:6b:
89:4d:dc:6e:3c:01:9e:d2:27:11:7b:f8:81:fa:b9:
ab:2f:25:95:a4:82:23:d0:48:7d:0a:da:9b:10:fe:
34:81:2b:53:cd:b0:02:ab:fa:56:95:3f:19:10:99:
77:87:58:92:13:3e:f5:01:c4:99:60:e9:7c:dd:2a:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:6C:30:9E:4F:3E:38:48:0C:5E:97:B9:67:52:E7:45:80:0F:AD
X509v3 Authority Key Identifier:
keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:40:cd:75:ae:5e:69:c0:84:a8:98:41:ec:78:07:81:21:e9:
6c:be:02:66:a5:4b:33:8c:58:ac:54:6d:b0:11:ba:01:2d:01:
45:22:bf:39:44:95:ba:04:19:da:6a:2e:a0:f4:6b:7d:6d:d7:
14:a2:65:bb:12:07:86:08:5d:0c:6f:6f:82:b2:da:8c:a5:75:
7d:4e:d9:d2:42:eb:d8:58:7a:02:7c:1c:6b:15:b5:b7:17:9e:
d2:87:1c:4c:2e:8c:9a:8f:0d:d5:b3:58:05:e5:99:bd:b3:ce:
b3:c3:c4:1f:ae:cf:85:6f:e5:ed:64:5b:b4:ae:3e:3a:0a:4d:
de:1e:2a:13:5c:df:af:1d:17:dc:ff:d8:71:5e:dd:a5:5b:0c:
7b:45:38:a5:f3:b5:5e:88:d7:0d:f4:5b:56:48:28:3e:4d:b0:
85:3e:84:a1:9b:75:36:56:83:66:dc:3c:97:93:1f:a3:2d:29:
9a:7c:e4:1c:a4:c4:38:cb:95:9b:59:b3:e6:94:7b:1f:d5:6f:
f5:69:e7:b2:b3:70:32:9c:11:f8:d4:0e:ac:31:b9:2b:c7:c2:
c0:a7:05:d8:c8:84:3a:56:3d:83:20:46:c4:97:02:b5:1c:9d:
98:6c:98:72:9e:74:5b:e3:36:0c:a7:f0:a5:89:51:06:40:0c:
d7:40:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:08 2026 by rpki-client