
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa
File: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (raw, json)
Hash identifier: 8e+1wP0igCl8ySWWw4cagUwBCAMaKEsf+lcRjBN0WSU=
Subject key identifier: 2A:71:B8:25:C0:16:1E:E1:20:24:F1:B6:16:17:17:BD:1D:F2:8B:C3
Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial: 5A9D01CDAEC9964BE34A066BBBE6EBFEB11D9325
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa
Signing time: Wed 15 Apr 2026 04:00:00 +0000
ROA not before: Wed 15 Apr 2026 03:55:00 +0000
ROA not after: Wed 14 Apr 2027 04:00:00 +0000
asID: 149901
IP address blocks: 103.190.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9d:01:cd:ae:c9:96:4b:e3:4a:06:6b:bb:e6:eb:fe:b1:1d:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Validity
Not Before: Apr 15 03:55:00 2026 GMT
Not After : Apr 14 04:00:00 2027 GMT
Subject: CN=2A71B825C0161EE12024F1B6161717BD1DF28BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:45:85:26:f0:ed:85:2d:d9:d3:5b:4b:e7:
d2:e3:74:91:e7:ac:a1:94:a2:f1:7d:bc:c3:76:68:
bf:a6:fe:5e:ac:92:2a:eb:f8:9a:97:8e:a7:7a:3e:
3b:39:33:47:73:ce:c6:17:c9:9a:dd:7d:48:0a:49:
61:aa:97:70:76:0e:5f:af:bf:e6:79:43:a9:93:9a:
5e:c4:08:0e:99:98:cf:65:78:77:4b:9a:39:3d:c5:
4b:cd:35:ef:0b:be:a0:33:a9:76:ef:ab:69:2f:73:
48:96:c0:68:75:19:dd:88:1c:b4:1f:42:96:81:63:
22:2c:8a:45:d1:f9:cd:f6:6c:e9:57:05:26:c7:af:
8d:15:c6:9d:37:80:7c:77:0d:45:22:69:25:31:ac:
b1:40:46:09:2a:eb:57:49:05:b3:6a:57:88:87:30:
0f:1f:88:da:de:07:df:97:29:36:d3:8e:7a:47:7a:
fa:17:94:c4:24:2b:ae:5d:23:c0:f3:a0:99:54:1a:
10:6f:7c:d6:ba:56:f0:71:1d:67:14:1d:db:77:8b:
19:5c:8a:eb:32:5f:db:b9:11:56:b1:41:36:b6:7b:
3c:22:d4:12:91:fd:30:f5:60:33:f0:50:d0:9f:c4:
c4:31:72:b8:ab:d1:e0:47:07:93:b5:6c:0e:92:69:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:71:B8:25:C0:16:1E:E1:20:24:F1:B6:16:17:17:BD:1D:F2:8B:C3
X509v3 Authority Key Identifier:
keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.60.0/24
Signature Algorithm: sha256WithRSAEncryption
68:13:a7:a0:f1:b6:72:1c:8e:f9:aa:91:f6:c6:5d:b5:5e:0e:
65:17:8a:b3:c8:22:34:d7:b2:17:3b:18:1f:91:37:e2:c1:ec:
34:85:35:bf:86:ed:bd:bf:17:d3:0b:4a:73:1f:15:85:f6:36:
f1:69:43:ac:e4:9f:c0:70:ca:ee:ba:67:a4:04:89:14:2a:3f:
32:a9:04:ef:bc:ef:6c:51:20:b3:27:d3:9c:2f:df:de:93:c4:
80:2b:52:32:fa:d9:87:27:ea:cc:44:77:85:7f:c3:cb:28:e1:
d6:92:51:64:50:07:cf:62:18:25:f5:e4:5c:60:39:69:ca:8c:
1a:46:4e:a0:44:f8:21:b8:86:fb:0e:55:5a:16:93:e2:d5:cc:
0f:93:dd:f0:eb:59:2a:70:7b:b7:a2:3c:dc:65:a7:26:a2:54:
36:e6:98:36:85:a6:6c:2b:8d:a4:9f:8c:96:fb:77:38:2f:71:
79:41:80:d0:fa:5d:19:31:a3:a1:d2:02:ae:42:9b:ae:a8:04:
81:c6:9e:a2:41:4d:26:ed:f0:5d:28:bc:e2:b9:0d:0f:e5:9e:
64:d0:6f:61:b6:2a:9b:17:50:b0:ed:c9:e5:b1:72:d4:bb:20:
33:8e:94:ac:ab:5d:d2:c6:da:13:f2:8d:6b:f7:11:21:ee:49:
04:58:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:08 2026 by rpki-client