
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538333839.roa
File: 3130332e31312e33302e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier: JIAtKyvQfcpWQ+i6HEHQnh+4RynKPWl0nfQdyAzocl0=
Subject key identifier: A1:52:03:5D:47:33:94:09:1D:B7:A6:AB:AC:03:85:27:84:80:F3:28
Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial: 3329FAABA438FCEDD263C91D1B6068ACB799D74E
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538333839.roa
Signing time: Tue 10 Feb 2026 04:54:59 +0000
ROA not before: Tue 10 Feb 2026 04:49:59 +0000
ROA not after: Tue 09 Feb 2027 04:54:59 +0000
asID: 58389
IP address blocks: 103.11.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:29:fa:ab:a4:38:fc:ed:d2:63:c9:1d:1b:60:68:ac:b7:99:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Validity
Not Before: Feb 10 04:49:59 2026 GMT
Not After : Feb 9 04:54:59 2027 GMT
Subject: CN=A152035D473394091DB7A6ABAC0385278480F328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:c7:55:89:90:7a:81:ea:e7:68:01:4e:ef:
85:f5:e0:2f:f6:8c:b1:52:8a:cf:0c:20:a6:09:3d:
51:b6:65:bb:1d:9c:51:7d:32:06:c4:92:0d:5f:1f:
cc:de:2b:fd:9d:06:d9:df:30:e3:30:e9:b8:fa:ca:
08:31:93:c7:71:c2:ca:31:8b:12:76:53:23:e6:85:
a9:70:be:06:a9:58:8e:dd:e9:d0:13:c3:e1:c2:91:
dd:ee:bb:a4:17:a8:c7:a1:17:d8:0d:fe:e4:ac:70:
1a:3b:2b:ff:12:d3:01:d0:f6:ff:c7:7c:1a:6e:4d:
a8:53:9e:7b:ab:a9:6b:ec:25:4c:f4:0a:1e:1b:07:
3a:99:b3:d7:56:15:d8:71:b7:12:c7:75:15:c9:1d:
67:18:1e:eb:47:f1:75:09:9a:ae:e4:86:80:51:e3:
e2:8d:b4:ae:8b:5c:bc:bf:44:b8:3d:b9:b6:d7:da:
98:b4:c1:bf:86:0e:f7:8a:ad:a0:81:ab:09:b3:80:
ae:db:e6:23:9d:7d:71:e5:cb:3b:fa:82:32:4f:c4:
8d:23:e5:5e:d7:0c:f3:16:ee:87:11:15:cf:d4:fa:
fd:c9:97:36:a5:f1:b9:90:c2:6a:57:72:c0:36:55:
4e:ee:91:0f:18:82:44:10:48:ba:ab:98:6a:70:9e:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:03:5D:47:33:94:09:1D:B7:A6:AB:AC:03:85:27:84:80:F3:28
X509v3 Authority Key Identifier:
keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0a:4b:61:10:18:02:54:c3:f0:0b:e7:1c:0a:59:0a:d3:b3:
3d:d9:d2:08:7a:60:13:67:21:ff:2e:73:f9:11:02:4b:80:71:
f7:9b:a8:ee:01:73:bc:02:c7:05:0d:2a:c7:3f:df:91:a4:3a:
f6:d3:12:d6:be:3f:7e:1b:4b:ea:ab:7a:eb:d3:a9:59:4c:c4:
da:d7:6c:42:c0:f6:e8:58:8d:fe:dc:32:88:b8:76:89:be:0c:
9c:fd:a1:cc:d1:4d:41:33:fc:f5:d3:4c:8d:d9:17:31:58:3b:
90:16:4b:24:c4:17:b5:ee:95:62:8d:3b:b8:03:78:9b:28:aa:
60:29:50:12:8a:25:c9:55:0c:2d:9d:04:23:b4:0c:ba:65:4b:
94:1f:33:c2:f0:cc:72:93:c9:fb:74:0e:eb:f3:0f:3a:5b:67:
a8:7a:a5:10:dd:91:73:00:8b:1a:25:9a:a0:bb:28:96:52:43:
25:e6:73:b9:06:9d:ef:4a:e5:d8:36:6b:ac:67:69:e4:fc:fb:
92:5d:2f:fe:61:d1:d3:2c:e3:81:12:75:37:36:f6:2d:69:35:
7e:fa:53:75:47:ed:52:10:c6:5a:5e:51:7c:40:95:51:b5:68:
64:ae:ef:69:b6:46:8e:42:68:b5:fa:d5:3a:ac:ad:9f:5f:c5:
f1:e8:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:00 2026 by rpki-client