
$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa
File: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (raw, json)
Hash identifier: iHcLKGWmAU5Rv975BVu/xuLL89+aBAlagCLC/juloPw=
Subject key identifier: 30:2F:38:07:6F:DD:5A:F4:03:13:66:26:B4:DC:79:8A:E7:98:9B:C6
Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial: 616DAA3F7F210E9F9D05DBEC1844DF361FF288AD
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa
Signing time: Thu 09 Apr 2026 15:00:02 +0000
ROA not before: Thu 09 Apr 2026 14:55:02 +0000
ROA not after: Thu 08 Apr 2027 15:00:02 +0000
asID: 142364
IP address blocks: 103.170.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 01:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:aa:3f:7f:21:0e:9f:9d:05:db:ec:18:44:df:36:1f:f2:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Validity
Not Before: Apr 9 14:55:02 2026 GMT
Not After : Apr 8 15:00:02 2027 GMT
Subject: CN=302F38076FDD5AF403136626B4DC798AE7989BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:a2:4d:d3:5e:ed:95:64:31:c9:0a:1b:9d:
81:75:2d:f7:e6:65:32:23:ef:8c:77:96:0e:b8:65:
d9:64:7c:84:7a:0c:03:d0:85:90:d4:f2:3f:c6:2b:
5c:ba:06:bd:a0:cd:53:25:03:6d:a6:f2:84:98:85:
34:6f:c8:9b:36:4f:22:fd:d2:7a:e6:69:f6:84:9c:
c7:4d:24:6d:e6:2e:5f:f9:cb:ce:c5:77:6b:8d:08:
bb:36:42:d9:db:6f:6c:b5:d0:85:0e:8d:f6:58:a8:
25:e5:f0:95:33:84:2b:59:ea:a3:5a:58:ef:df:4d:
eb:b7:a6:4b:66:16:0c:1a:62:f7:d9:cc:af:0e:25:
dd:1f:19:ae:63:a7:e7:e2:4b:aa:30:60:68:1d:f5:
71:39:59:a6:45:2b:67:9a:ad:3b:dc:32:a4:36:07:
f1:b6:5b:8a:13:b6:22:09:39:ee:38:7c:99:fc:d6:
cc:1e:9b:42:c9:49:4a:c5:13:a9:c5:76:77:af:6e:
e8:29:6c:06:32:5f:f7:58:f9:75:a9:7f:61:09:ba:
1f:e9:bb:51:91:88:47:01:fc:c9:58:3a:3d:13:1a:
93:9a:b2:67:83:14:54:98:b9:df:35:57:6f:6d:2d:
39:84:b9:6d:9a:b7:ed:be:d9:a8:1e:3a:b2:09:22:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:38:07:6F:DD:5A:F4:03:13:66:26:B4:DC:79:8A:E7:98:9B:C6
X509v3 Authority Key Identifier:
keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.100.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0d:b6:14:6f:3b:5f:01:2a:b4:69:4e:db:19:0d:eb:6d:54:
18:bf:50:52:9e:b2:74:bc:53:79:23:47:f0:5d:8d:ac:7a:82:
2a:77:33:e5:95:72:d5:f0:28:5d:f1:47:4d:da:66:45:82:33:
e6:5b:8d:91:94:4f:8c:45:50:0d:cb:e4:27:b9:3e:55:6b:7c:
fe:0d:23:10:4d:21:58:14:5f:b2:25:e8:75:e7:61:16:d6:24:
dc:20:f1:cf:6b:23:51:e8:4c:9d:eb:50:3b:f3:0a:15:74:79:
26:71:57:2c:af:dc:70:a1:91:8f:60:2e:b6:ee:31:84:1e:0a:
24:e8:13:72:df:41:30:17:d3:89:8b:91:66:42:c9:fe:e0:97:
5c:f1:a7:e7:c7:1b:74:73:21:87:1f:20:90:7e:d7:36:ea:83:
7e:76:5e:bf:27:98:24:6f:fb:4f:37:ad:6c:11:94:e1:ff:88:
dc:6c:df:a9:f7:6a:5f:2d:28:8e:ba:a4:c7:a5:3d:27:29:5e:
5a:2b:11:8f:bb:d1:e3:eb:64:f8:fd:1e:61:69:5c:a4:f1:7e:
69:ed:9a:5e:69:b6:44:51:66:db:03:57:c8:a8:53:2b:fd:7e:
e3:f5:05:eb:d3:d6:c4:2e:a5:64:92:a2:74:30:d7:76:50:6d:
09:68:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:40 2026 by rpki-client