
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31312e302f32342d3234203d3e20313431303634.roa
File: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (raw, json)
Hash identifier: 7ZuQrAyTpSXLw2zTTFdrCC17EZNzNmUBwi/56OEgq84=
Subject key identifier: C2:17:A4:28:7E:CD:D9:74:BB:94:8E:D8:9C:AD:04:EE:2C:90:77:9A
Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Certificate serial: 07EDB44DE8DCE3C9A0078D06A80A29A1755464D7
Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31312e302f32342d3234203d3e20313431303634.roa
Signing time: Mon 16 Feb 2026 10:33:11 +0000
ROA not before: Mon 16 Feb 2026 10:28:11 +0000
ROA not after: Mon 15 Feb 2027 10:33:11 +0000
asID: 141064
IP address blocks: 103.29.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ed:b4:4d:e8:dc:e3:c9:a0:07:8d:06:a8:0a:29:a1:75:54:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Validity
Not Before: Feb 16 10:28:11 2026 GMT
Not After : Feb 15 10:33:11 2027 GMT
Subject: CN=C217A4287ECDD974BB948ED89CAD04EE2C90779A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:80:04:bf:c8:ea:42:45:ce:bc:e4:fb:ca:
be:1e:e8:45:76:ab:38:67:9a:fa:44:64:21:84:98:
48:4d:77:ca:bc:af:0b:9a:eb:47:f0:d3:f2:15:b6:
ae:b7:8c:50:39:13:33:8e:0c:5a:2a:6b:48:db:a3:
5f:2e:49:3e:25:98:3a:04:8b:f9:cd:e9:5f:02:b3:
2d:3b:17:d0:b4:b5:f0:47:f8:68:43:a5:2c:33:e4:
6b:5d:50:78:98:e4:e9:e4:5a:57:e7:e8:e6:79:f9:
eb:08:9e:43:c0:ee:f8:be:6e:18:33:cf:b3:db:4a:
c9:53:02:4c:5f:01:d9:31:b5:fa:21:0e:81:e0:79:
92:4c:45:0b:79:a8:36:46:92:04:3c:b5:fc:4d:9e:
0c:e9:7c:d4:fd:e2:85:12:85:30:00:e2:d3:b0:5e:
04:ca:a7:7e:7c:8e:4b:03:19:b4:9b:e5:96:ad:96:
ea:c4:41:73:99:e1:bd:32:ea:3a:7d:7a:0e:2d:60:
20:ae:81:5e:ad:40:c6:7e:cf:c2:cf:41:23:a8:73:
10:54:15:87:06:02:c2:07:29:ea:8c:cd:cf:40:a3:
69:a3:ee:9a:1e:66:1d:de:79:bd:dd:7c:d5:c3:6a:
14:51:4a:e0:cf:18:57:19:36:c5:f9:69:c0:33:78:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:17:A4:28:7E:CD:D9:74:BB:94:8E:D8:9C:AD:04:EE:2C:90:77:9A
X509v3 Authority Key Identifier:
keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31312e302f32342d3234203d3e20313431303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.11.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ec:6d:d4:a9:e1:18:a0:87:7b:84:29:75:a6:54:d5:7d:64:
70:2e:f7:c9:09:74:a1:58:fc:f0:da:1e:55:fb:4d:64:7c:c2:
bb:7a:1c:d2:0f:35:05:d7:19:7f:07:d5:5b:c9:fe:68:e1:ea:
c2:eb:2c:89:bf:fa:f0:cf:22:aa:ae:10:79:db:3b:9c:8d:88:
65:27:58:e4:2a:e4:60:88:88:f8:ff:55:0c:f6:06:19:3e:91:
7a:f2:fa:5a:59:f2:11:42:a5:e8:03:b9:68:79:2f:59:d0:8f:
e2:e2:fd:2f:3c:1d:a8:36:10:6e:70:0e:a6:20:ce:79:ad:13:
fd:81:e0:b2:a0:a3:51:34:ca:4c:44:5f:c6:e1:aa:55:54:63:
fd:bc:47:5a:9b:ac:50:68:09:24:be:c1:25:5b:2e:85:79:de:
1f:41:74:99:fc:39:68:75:84:f2:0e:74:ab:09:08:ce:69:73:
83:e9:06:4f:76:0b:60:6a:40:6c:b1:8f:87:23:30:bb:e2:c5:
db:af:ec:d6:aa:22:2e:d5:57:b2:93:cf:3e:f7:d1:21:b5:c9:
3f:ef:d9:0f:95:5d:30:af:ab:33:14:66:d2:5d:e0:38:50:c2:
e7:65:1f:d0:94:f6:71:8a:97:9c:ac:70:9a:46:32:ec:4a:79:
64:91:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:03 2026 by rpki-client