
$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa
File: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: 8QP0ny1BafhP87cEV2vXvc0K+sJXt7/6akwyG6gtnuc=
Subject key identifier: D5:F2:6D:C9:7F:C4:B1:75:F4:AF:98:3C:A4:DE:78:D4:68:9F:91:A5
Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7
Certificate serial: 09FDC3C663CD086085C92BA9849CC6F04FEB7135
Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa
Signing time: Fri 27 Feb 2026 10:02:37 +0000
ROA not before: Fri 27 Feb 2026 09:57:37 +0000
ROA not after: Fri 26 Feb 2027 10:02:37 +0000
asID: 24534
IP address blocks: 103.149.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl
rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fd:c3:c6:63:cd:08:60:85:c9:2b:a9:84:9c:c6:f0:4f:eb:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7
Validity
Not Before: Feb 27 09:57:37 2026 GMT
Not After : Feb 26 10:02:37 2027 GMT
Subject: CN=D5F26DC97FC4B175F4AF983CA4DE78D4689F91A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:cd:93:b7:1b:26:f6:7e:0b:69:f1:15:9b:
08:b4:42:85:1e:a2:8e:9a:f4:21:a7:28:c9:01:2b:
e3:52:a2:9d:22:ae:66:9b:04:c3:91:8d:a7:19:76:
b7:bd:49:24:7e:28:ff:c3:3e:98:9b:01:ae:7b:f6:
69:8d:6a:8a:8d:a9:4b:19:3e:59:1a:e8:47:86:4e:
4a:8e:6c:f9:3e:8f:91:d9:a4:a1:4d:b3:6e:f2:a8:
23:b2:f6:36:84:62:d8:b4:13:bf:cc:6f:13:b5:c5:
37:81:89:9f:ed:60:d9:ff:08:31:91:60:4f:3d:f0:
17:c5:74:92:f4:73:41:89:6d:00:4e:82:0d:1d:3b:
ff:2a:bc:1c:41:d0:5f:82:d2:dc:65:91:50:2f:77:
2b:0d:dc:2a:54:ee:12:c6:5f:9d:84:44:c3:fb:d4:
de:ed:33:8e:7c:a0:c2:a7:67:4c:90:c7:61:49:4b:
ab:fd:7b:5e:92:3c:55:9b:06:6f:62:e4:6b:4a:b7:
99:cc:c4:9e:16:8f:01:e2:e2:d2:e2:b1:fa:2a:42:
44:ed:9b:95:51:22:56:86:05:e1:5c:92:c1:dd:ef:
48:4a:f2:4d:b6:a8:2f:42:a5:ef:3e:67:e8:4c:c6:
c9:0e:7b:cd:df:1d:b0:25:78:d9:6f:42:5f:8e:a8:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F2:6D:C9:7F:C4:B1:75:F4:AF:98:3C:A4:DE:78:D4:68:9F:91:A5
X509v3 Authority Key Identifier:
keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.34.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f1:66:85:53:9a:e8:84:05:d8:7a:1d:be:53:ff:78:97:0b:
aa:0c:e6:38:64:72:4d:13:48:35:ec:56:44:e4:98:ac:82:32:
3a:c7:36:32:cb:14:5a:89:92:5f:b5:16:e4:ba:c7:80:c2:5c:
be:40:6e:96:de:c8:93:95:74:23:38:50:cd:4b:95:f4:4b:38:
30:80:e4:6a:bf:8a:16:d6:15:87:71:75:bf:1e:ae:ef:12:82:
4d:cf:5c:a7:a1:f6:42:d9:86:57:15:ed:96:87:a1:ef:54:c4:
55:b1:4a:4c:09:27:04:ed:94:64:50:85:e6:a5:34:39:67:c2:
f7:ce:e3:44:8a:50:2b:a0:36:a0:4e:5c:32:48:c2:fc:af:65:
2c:c9:60:af:6b:be:bc:91:8d:b6:e8:5d:e7:e0:98:cc:f9:11:
af:b5:44:13:94:7e:c7:ea:d5:64:91:38:23:cd:44:51:ba:f3:
70:32:be:25:9d:fd:0b:e9:c1:53:eb:c2:77:be:b4:6c:1e:3d:
e8:91:27:73:6c:3d:9f:04:10:ea:fb:61:5b:b3:de:a9:da:5d:
b0:e2:f1:59:4a:0c:5e:57:d5:ed:a6:06:db:99:07:8a:a5:90:
e8:52:ad:83:6c:9b:ab:73:4b:b6:4b:7f:ef:04:28:8c:bf:35:
e2:d8:31:41
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCf3DxmPNCGCFySuphJzG8E/rcTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1
RTRGM0FCNzAeFw0yNjAyMjcwOTU3MzdaFw0yNzAyMjYxMDAyMzdaMDMxMTAvBgNV
BAMTKEQ1RjI2REM5N0ZDNEIxNzVGNEFGOTgzQ0E0REU3OEQ0Njg5RjkxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhc2Ttxsm9n4LafEVmwi0QoUe
oo6a9CGnKMkBK+NSop0irmabBMORjacZdre9SSR+KP/DPpibAa579mmNaoqNqUsZ
Plka6EeGTkqObPk+j5HZpKFNs27yqCOy9jaEYti0E7/MbxO1xTeBiZ/tYNn/CDGR
YE898BfFdJL0c0GJbQBOgg0dO/8qvBxB0F+C0txlkVAvdysN3CpU7hLGX52ERMP7
1N7tM458oMKnZ0yQx2FJS6v9e16SPFWbBm9i5GtKt5nMxJ4WjwHi4tLisfoqQkTt
m5VRIlaGBeFcksHd70hK8k22qC9Cpe8+Z+hMxskOe83fHbAleNlvQl+OqCFfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1fJtyX/EsXX0r5g8pN541GifkaUwHwYDVR0j
BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5
QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG
M0FCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjM1ZTI1LTg1OTktNDhhZS1i
ZGNiLWUzMjNkZmM4OTZlYy8wLzMxMzAzMzJlMzEzNDM5MmUzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVIjANBgkqhkiG
9w0BAQsFAAOCAQEAEPFmhVOa6IQF2HodvlP/eJcLqgzmOGRyTRNINexWROSYrIIy
Osc2MssUWomSX7UW5LrHgMJcvkBult7Ik5V0IzhQzUuV9Es4MIDkar+KFtYVh3F1
vx6u7xKCTc9cp6H2QtmGVxXtloeh71TEVbFKTAknBO2UZFCF5qU0OWfC987jRIpQ
K6A2oE5cMkjC/K9lLMlgr2u+vJGNtuhd5+CYzPkRr7VEE5R+x+rVZJE4I81EUbrz
cDK+JZ39C+nBU+vCd760bB496JEnc2w9nwQQ6vthW7PeqdpdsOLxWUoMXlfV7aYG
25kHiqWQ6FKtg2ybq3NLtkt/7wQojL814tgxQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:43 2026 by rpki-client