
$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
File: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (raw, json)
Hash identifier: FKWGkuhrHToaQ6HQBG2hDishDUxJo1KcIBwHXf6jaDE=
Subject key identifier: 2D:89:3F:74:9A:9E:D7:DD:0B:12:D1:FE:35:CA:F6:7E:87:80:EA:EF
Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656
Certificate serial: 6A1ACDBAAA3515D4DC65F561B8FBD4B26D70E309
Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
Signing time: Tue 03 Feb 2026 08:00:01 +0000
ROA not before: Tue 03 Feb 2026 07:55:01 +0000
ROA not after: Tue 02 Feb 2027 08:00:01 +0000
asID: 149358
IP address blocks: 103.180.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl
rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1a:cd:ba:aa:35:15:d4:dc:65:f5:61:b8:fb:d4:b2:6d:70:e3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656
Validity
Not Before: Feb 3 07:55:01 2026 GMT
Not After : Feb 2 08:00:01 2027 GMT
Subject: CN=2D893F749A9ED7DD0B12D1FE35CAF67E8780EAEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:38:60:1d:78:8c:ff:90:c1:14:9b:8d:ac:
c4:44:4e:3d:2a:a5:1b:04:56:fc:f6:04:50:08:c0:
15:bb:cc:2b:ff:35:12:5f:69:e2:9f:e0:b0:a9:d8:
4f:52:e6:b9:df:29:78:dc:be:9d:8b:df:fb:77:07:
77:94:08:36:02:81:ec:20:55:4c:46:cb:96:6a:57:
25:73:de:86:15:7c:e0:d0:45:dc:6e:66:26:e8:8a:
a4:0d:4b:38:bb:eb:df:fd:32:af:63:d8:05:aa:a0:
5f:a4:0d:b6:ed:ab:c3:f7:90:76:9b:d0:b5:b6:69:
d0:de:a8:42:eb:61:ad:25:91:60:9a:c6:6e:0c:91:
47:68:f2:a4:5a:11:27:9f:ee:51:09:9c:45:60:ec:
99:b0:62:1c:84:27:2c:62:1d:30:a0:26:c9:cb:8f:
fc:17:d1:34:79:b8:50:1a:a9:84:1d:c7:af:a2:60:
df:c0:79:76:e5:5c:c4:fe:07:bd:fa:7e:54:6a:d4:
be:55:69:cd:e0:12:03:ae:f8:7f:53:90:eb:91:e2:
47:d7:7e:51:e6:12:4d:79:1f:03:b8:13:63:f2:89:
e4:71:b6:88:85:c1:e6:61:d0:c6:23:d6:9a:32:96:
bf:c2:ae:76:04:d7:98:64:35:21:ef:1e:9a:65:c2:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:3F:74:9A:9E:D7:DD:0B:12:D1:FE:35:CA:F6:7E:87:80:EA:EF
X509v3 Authority Key Identifier:
keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:21:7e:7f:1d:82:25:6e:c8:1c:5f:4c:0a:0b:4f:df:31:22:
db:93:bf:04:dd:1d:84:84:f6:fb:7e:73:7f:cd:fb:61:87:26:
7e:df:70:27:d9:9c:fa:86:f3:16:4d:4e:3c:9a:73:51:14:b8:
08:13:1b:50:6b:81:fa:29:bb:bd:87:76:c0:a4:79:ae:1e:6d:
34:e0:45:46:2f:10:1a:ee:d7:cf:43:e2:4d:b8:a6:db:49:14:
99:25:98:7b:f9:d3:ac:27:7f:6b:93:2b:dd:50:7c:30:23:ec:
84:2a:78:5b:46:a6:4d:e7:da:34:ce:c1:a9:13:44:31:08:9c:
96:f3:d4:9a:3d:68:d5:50:40:d7:22:a3:e6:1d:76:e1:d8:47:
0f:b7:cc:d0:cd:0a:1b:13:d6:7f:38:ab:c9:a1:3a:8e:70:93:
41:7d:8b:c9:b5:7a:eb:b8:6a:51:3a:20:a0:5c:71:43:f4:ba:
91:4d:f3:26:6e:47:ed:b9:12:16:cf:b1:ee:2a:7b:d8:63:0b:
37:e5:50:18:19:01:37:52:67:15:18:52:2d:70:76:42:30:16:
85:ae:ac:c7:3a:68:6e:9e:94:b8:03:d8:8d:b1:35:3b:e0:50:
8f:35:f9:3d:c3:a7:89:40:5e:f3:40:ca:62:e4:bb:27:30:27:
27:ad:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:51 2026 by rpki-client