
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32332d3233203d3e20313431303634.roa
File: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (raw, json)
Hash identifier: ox/jPDjPCSM2yBDuW5lKFEBzvZUEEtg9kdQcbRM/Nsc=
Subject key identifier: F9:5A:FC:7C:BC:37:92:84:E7:A4:50:7A:D8:C3:1E:63:33:1B:67:71
Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Certificate serial: 3831C3AA9C63B0D3C82795F8111C24DAA02BF5E7
Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32332d3233203d3e20313431303634.roa
Signing time: Mon 16 Feb 2026 10:32:18 +0000
ROA not before: Mon 16 Feb 2026 10:27:18 +0000
ROA not after: Mon 15 Feb 2027 10:32:18 +0000
asID: 141064
IP address blocks: 103.29.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:31:c3:aa:9c:63:b0:d3:c8:27:95:f8:11:1c:24:da:a0:2b:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Validity
Not Before: Feb 16 10:27:18 2026 GMT
Not After : Feb 15 10:32:18 2027 GMT
Subject: CN=F95AFC7CBC379284E7A4507AD8C31E63331B6771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:a9:47:3a:aa:e0:01:de:8c:e5:cf:49:e5:
71:c8:29:40:9c:59:9a:19:f2:01:d7:b6:f7:85:bf:
3a:a7:35:6e:e4:92:36:3c:5c:fc:3e:db:ad:21:a7:
80:ca:9b:35:cc:12:c8:fa:a9:53:93:c3:57:5b:75:
c7:16:ec:8f:d8:9c:5b:99:fa:94:86:b7:67:7b:6a:
fd:1e:7e:11:92:33:0c:7b:25:16:66:cb:fb:81:fe:
2e:8a:8b:70:96:33:40:9e:c2:1d:98:f5:ee:41:fd:
b8:db:94:a2:da:3f:b7:82:2d:81:ef:8e:50:0d:47:
10:de:24:a1:86:51:cc:2d:09:c5:ef:fd:0f:84:1f:
92:59:96:2f:02:6b:58:78:2c:64:c8:4e:b3:53:41:
bc:f2:97:3e:67:56:32:4a:13:03:97:86:c4:2f:76:
c3:69:5a:e3:9b:36:f0:0a:27:d4:af:4e:4b:d2:39:
24:75:a5:6d:38:08:0b:12:a5:6d:aa:47:36:03:59:
b0:23:e1:3c:50:67:95:98:fa:7b:d9:a6:26:06:ed:
3b:c6:21:3a:81:1b:e3:8b:3d:9e:c1:18:ad:78:4c:
71:ae:c0:f3:ca:14:2b:1e:4a:0a:76:cb:52:33:7c:
c7:1c:a6:8d:1b:2e:45:38:dc:7e:04:4e:c0:cf:e9:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:FC:7C:BC:37:92:84:E7:A4:50:7A:D8:C3:1E:63:33:1B:67:71
X509v3 Authority Key Identifier:
keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32332d3233203d3e20313431303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.10.0/23
Signature Algorithm: sha256WithRSAEncryption
98:3f:d9:c1:c1:c0:e2:b9:2e:e1:f7:e5:e7:81:b3:98:5c:27:
50:4a:a8:ef:a6:d4:db:8f:4b:38:02:8b:51:51:ac:fc:2f:96:
8b:e6:f2:65:4b:10:1f:8f:2d:02:f9:bb:5e:81:15:12:d8:40:
8b:67:f5:42:08:a3:98:2e:81:15:7f:67:f7:ec:d3:81:ab:68:
17:b4:4b:bb:d2:11:c8:15:d0:42:1d:7e:f1:8b:68:8e:c1:2a:
11:59:47:94:fa:35:eb:a1:85:33:89:cf:dc:db:61:6e:3e:2f:
5f:f2:bb:27:26:0c:46:3b:54:36:5c:1e:44:55:a2:41:69:92:
9b:1b:c9:e4:8e:c1:b1:18:f8:6f:1c:3b:60:77:41:ad:19:32:
12:85:b2:fc:04:56:3c:bf:6f:8a:cd:b1:03:eb:ca:dc:3a:e4:
1a:4f:03:14:21:be:af:26:9b:b2:77:f4:58:e1:52:a4:47:3f:
4c:e9:ee:45:74:69:35:1a:21:bf:ae:7a:e3:18:95:12:84:40:
dd:ad:31:a0:e1:40:c3:33:90:ab:45:ed:50:4f:cf:00:8d:e6:
aa:23:f3:c5:ed:a8:ca:bb:0c:8e:1a:7f:53:81:76:1a:48:94:
9d:46:57:54:de:ec:a6:df:7b:d9:cb:53:ea:2c:6d:72:bf:bf:
ff:ca:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:18 2026 by rpki-client