
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32342d3234203d3e20313431303634.roa
File: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (raw, json)
Hash identifier: g42xSqBdbww2iHC490qUVGv715w1+ed6Uwshy2/cUBk=
Subject key identifier: 9A:BC:A6:1B:8F:3E:2B:AD:95:D0:9D:04:E4:2D:09:F9:F5:22:6A:8A
Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Certificate serial: 6A2C0104A51FEE8707C38080B8061EC90C4309DA
Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32342d3234203d3e20313431303634.roa
Signing time: Mon 16 Feb 2026 10:32:53 +0000
ROA not before: Mon 16 Feb 2026 10:27:53 +0000
ROA not after: Mon 15 Feb 2027 10:32:53 +0000
asID: 141064
IP address blocks: 103.29.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:2c:01:04:a5:1f:ee:87:07:c3:80:80:b8:06:1e:c9:0c:43:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Validity
Not Before: Feb 16 10:27:53 2026 GMT
Not After : Feb 15 10:32:53 2027 GMT
Subject: CN=9ABCA61B8F3E2BAD95D09D04E42D09F9F5226A8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:22:3f:17:19:b2:b4:bb:ea:72:29:7f:65:
80:28:81:02:da:22:2a:13:78:c8:d0:13:5b:9e:11:
2f:17:36:34:9c:8d:d5:6a:9c:83:a5:c0:30:d5:e6:
98:86:c7:8a:46:71:44:76:f8:c3:98:e5:dd:61:92:
86:82:33:cb:7d:5c:01:6e:e9:da:a7:7b:56:21:80:
9d:77:3c:16:30:cc:4b:d4:b7:a3:02:1c:78:dd:b3:
88:f7:6e:bd:2c:77:cf:5e:27:df:d7:d8:ff:b1:e9:
90:1f:41:72:dd:5f:68:d8:4e:4a:05:cb:78:35:15:
70:41:2a:06:8d:2a:be:3c:52:0a:b0:90:37:e6:53:
ff:e1:72:bd:c7:cc:f0:d9:c1:b0:c1:86:59:0a:4a:
9c:69:78:d6:06:fe:e5:d0:64:82:99:81:fc:99:bb:
52:3c:06:3b:58:ee:7c:d5:ca:84:d2:14:39:38:dd:
73:0a:6e:a3:9f:ee:91:53:5b:db:b5:60:3c:95:ba:
1e:d0:96:85:a0:68:af:27:c2:e5:c6:5a:d6:43:84:
a2:6a:a3:db:ba:eb:f3:ea:f2:f3:8b:4f:cb:e7:eb:
f5:7f:df:31:3e:24:4b:9c:6e:37:4a:db:e5:e5:9d:
a4:7c:7c:be:d5:4b:63:7b:49:96:ad:d5:78:62:86:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:A6:1B:8F:3E:2B:AD:95:D0:9D:04:E4:2D:09:F9:F5:22:6A:8A
X509v3 Authority Key Identifier:
keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32342d3234203d3e20313431303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.10.0/24
Signature Algorithm: sha256WithRSAEncryption
12:07:ef:38:12:43:aa:f4:8d:a4:bf:e1:eb:81:a4:62:96:f3:
71:0a:7c:40:3a:75:f8:07:69:b4:50:fe:a4:de:88:6d:ba:31:
a6:b7:63:22:52:8e:26:82:4a:9b:75:c1:e2:b2:b7:5c:fb:29:
8b:42:ca:6b:45:17:49:88:83:c3:03:b9:5e:1c:df:fb:19:9b:
7c:1f:e7:c7:dd:8e:6c:de:14:a0:ae:ca:ec:91:09:4d:05:b9:
f4:9e:78:e1:08:6c:97:fb:26:9e:c2:59:2e:72:04:14:29:68:
a1:9e:8b:51:8b:14:2b:a9:76:69:84:a0:3b:bb:33:4e:92:6c:
32:e9:d7:8d:dd:45:37:d4:9e:9b:60:57:45:f5:e6:24:a5:10:
87:c0:86:43:50:04:ff:df:14:4f:c6:04:33:f6:23:65:0d:14:
22:51:4c:24:cd:e0:17:0f:b9:ba:51:af:e2:56:d5:46:3a:8c:
3f:51:3e:94:e2:3c:e7:e4:e5:f4:a1:1a:d5:44:78:34:3c:66:
38:53:8f:98:5d:1e:51:70:8d:9e:94:0a:a7:09:5d:1c:ea:2e:
9e:38:50:30:39:15:3e:88:6c:64:e4:e0:69:30:57:26:3a:bd:
d1:cf:db:41:2c:61:d4:f6:14:cb:e8:a0:e1:8e:d1:8e:63:fe:
5b:92:59:97
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaiwBBKUf7ocHw4CAuAYeyQxDCdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2
NTM2N0VCRDAeFw0yNjAyMTYxMDI3NTNaFw0yNzAyMTUxMDMyNTNaMDMxMTAvBgNV
BAMTKDlBQkNBNjFCOEYzRTJCQUQ5NUQwOUQwNEU0MkQwOUY5RjUyMjZBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2SI/FxmytLvqcil/ZYAogQLa
IioTeMjQE1ueES8XNjScjdVqnIOlwDDV5piGx4pGcUR2+MOY5d1hkoaCM8t9XAFu
6dqne1YhgJ13PBYwzEvUt6MCHHjds4j3br0sd89eJ9/X2P+x6ZAfQXLdX2jYTkoF
y3g1FXBBKgaNKr48UgqwkDfmU//hcr3HzPDZwbDBhlkKSpxpeNYG/uXQZIKZgfyZ
u1I8BjtY7nzVyoTSFDk43XMKbqOf7pFTW9u1YDyVuh7QloWgaK8nwuXGWtZDhKJq
o9u66/Pq8vOLT8vn6/V/3zE+JEucbjdK2+XlnaR8fL7VS2N7SZat1XhihrkDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmrymG48+K62V0J0E5C0J+fUiaoowHwYDVR0j
BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy
RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2
N0VCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTMyYzY1LTgwYmUtNGZkZS04
N2QwLTM2YzViZDI4OGNkOC8wLzMxMzAzMzJlMzIzOTJlMzEzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcdCjANBgkqhkiG
9w0BAQsFAAOCAQEAEgfvOBJDqvSNpL/h64GkYpbzcQp8QDp1+AdptFD+pN6Ibbox
prdjIlKOJoJKm3XB4rK3XPspi0LKa0UXSYiDwwO5Xhzf+xmbfB/nx92ObN4UoK7K
7JEJTQW59J544Qhsl/smnsJZLnIEFClooZ6LUYsUK6l2aYSgO7szTpJsMunXjd1F
N9Sem2BXRfXmJKUQh8CGQ1AE/98UT8YEM/YjZQ0UIlFMJM3gFw+5ulGv4lbVRjqM
P1E+lOI85+Tl9KEa1UR4NDxmOFOPmF0eUXCNnpQKpwldHOounjhQMDkVPohsZOTg
aTBXJjq90c/bQSxh1PYUy+ig4Y7RjmP+W5JZlw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:08 2026 by rpki-client