
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa
File: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier: LQCghhVjBQqtajWL79jI6IPFtxv3pbUEdBHeeD2ZFPo=
Subject key identifier: 02:B3:CD:99:05:0E:58:5E:BE:57:03:AE:D2:D0:6C:33:D7:5F:E6:FA
Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Certificate serial: 70B2CCFD3946175ABFCBAAE10376CFF21D2B79F1
Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa
Signing time: Wed 08 Apr 2026 09:00:00 +0000
ROA not before: Wed 08 Apr 2026 08:55:00 +0000
ROA not after: Wed 07 Apr 2027 09:00:00 +0000
asID: 141607
IP address blocks: 103.220.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b2:cc:fd:39:46:17:5a:bf:cb:aa:e1:03:76:cf:f2:1d:2b:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Validity
Not Before: Apr 8 08:55:00 2026 GMT
Not After : Apr 7 09:00:00 2027 GMT
Subject: CN=02B3CD99050E585EBE5703AED2D06C33D75FE6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:27:58:ca:c3:a6:fd:0a:b6:05:76:d9:c1:
1d:70:45:44:40:23:86:8e:cb:c2:f5:cc:08:86:6d:
47:03:67:2b:af:6d:6e:b1:10:9c:68:95:60:4b:1a:
9e:e0:c6:b3:83:9b:be:a8:82:48:11:6f:a2:c6:f4:
60:70:41:a8:8b:61:3c:37:af:43:fe:29:e4:6c:18:
78:5e:c6:8d:6f:cc:39:dc:6a:f3:7a:bd:f4:31:76:
16:17:cd:ab:89:91:f7:d7:42:40:7d:da:4f:0f:2c:
89:3d:4e:51:fa:71:36:12:8b:24:02:ba:c5:58:a7:
70:88:4a:1a:89:0f:c3:59:20:6e:bc:c7:8d:f0:d2:
da:bf:66:51:32:f9:b9:c2:69:fd:57:27:2e:a2:6d:
53:b0:5e:ec:51:e3:4f:1f:91:37:7a:c1:f9:74:79:
2e:35:d5:70:72:ec:21:61:05:ec:7c:a6:64:62:5d:
be:17:33:30:57:e8:7c:c7:ba:11:99:60:0b:73:8e:
a7:f5:51:3f:68:b4:dd:20:43:c2:53:6c:ae:71:48:
46:e6:5e:93:33:4c:21:e5:91:68:c2:e8:42:3a:60:
9c:84:57:34:4b:e6:e6:00:53:e5:0e:1d:d6:40:03:
88:4e:cb:ea:c8:f6:b6:af:1e:4a:af:71:a1:e0:b1:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B3:CD:99:05:0E:58:5E:BE:57:03:AE:D2:D0:6C:33:D7:5F:E6:FA
X509v3 Authority Key Identifier:
keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.23.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:77:6d:48:e2:6f:69:63:4e:ec:f5:68:1a:49:54:0a:76:
ad:60:45:12:39:e0:e5:ba:47:cb:03:5e:be:f0:ea:dd:44:94:
23:8c:fa:af:f6:ad:e2:46:8e:a3:ca:5f:d7:b3:0b:4e:aa:ff:
5d:80:61:6c:6c:45:25:ea:30:dd:51:82:c2:a8:31:90:f5:b0:
90:45:72:d3:d9:98:aa:a0:64:07:22:9a:23:01:d5:2a:8d:4e:
8f:56:f0:64:d7:ca:1b:eb:1f:95:c6:ce:25:3b:17:15:a2:65:
8e:55:b2:be:a1:1c:eb:a0:56:3e:5a:8b:94:6b:e3:d6:96:f7:
1d:40:4e:5c:95:15:3f:51:50:9f:58:8a:4f:8c:5a:4c:29:42:
79:06:c9:8d:86:57:2d:4b:88:4c:72:84:ec:24:7c:66:bb:90:
73:50:52:1a:0e:e7:57:02:68:08:8c:31:14:ec:4e:58:2c:4c:
88:04:f3:97:ac:ab:b1:ef:2e:ac:a9:f8:84:a5:99:73:bb:c8:
f9:8e:7c:f1:f1:18:91:94:25:9f:11:dc:18:96:83:bc:1f:21:
c3:45:58:10:6c:eb:ff:83:22:37:e6:01:9e:5a:e8:e0:3a:47:
a7:b6:4b:c9:6e:aa:d0:dd:b5:da:44:3d:dc:86:ad:c3:9a:42:
e0:4f:04:4d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcLLM/TlGF1q/y6rhA3bP8h0refEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE
OEJBMzg2MjAeFw0yNjA0MDgwODU1MDBaFw0yNzA0MDcwOTAwMDBaMDMxMTAvBgNV
BAMTKDAyQjNDRDk5MDUwRTU4NUVCRTU3MDNBRUQyRDA2QzMzRDc1RkU2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmCdYysOm/Qq2BXbZwR1wRURA
I4aOy8L1zAiGbUcDZyuvbW6xEJxolWBLGp7gxrODm76ogkgRb6LG9GBwQaiLYTw3
r0P+KeRsGHhexo1vzDncavN6vfQxdhYXzauJkffXQkB92k8PLIk9TlH6cTYSiyQC
usVYp3CIShqJD8NZIG68x43w0tq/ZlEy+bnCaf1XJy6ibVOwXuxR408fkTd6wfl0
eS411XBy7CFhBex8pmRiXb4XMzBX6HzHuhGZYAtzjqf1UT9otN0gQ8JTbK5xSEbm
XpMzTCHlkWjC6EI6YJyEVzRL5uYAU+UOHdZAA4hOy+rI9ravHkqvcaHgsYNDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUArPNmQUOWF6+VwOu0tBsM9df5vowHwYDVR0j
BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0
NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB
Mzg2Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNmLTZjYTAtNDY2OS05
OGY3LTZmMzQ4MzdmYWE2Mi8wLzMxMzAzMzJlMzIzMjMwMmUzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9wXMA0GCSqG
SIb3DQEBCwUAA4IBAQCZpndtSOJvaWNO7PVoGklUCnatYEUSOeDlukfLA16+8Ord
RJQjjPqv9q3iRo6jyl/XswtOqv9dgGFsbEUl6jDdUYLCqDGQ9bCQRXLT2ZiqoGQH
IpojAdUqjU6PVvBk18ob6x+Vxs4lOxcVomWOVbK+oRzroFY+WouUa+PWlvcdQE5c
lRU/UVCfWIpPjFpMKUJ5BsmNhlctS4hMcoTsJHxmu5BzUFIaDudXAmgIjDEU7E5Y
LEyIBPOXrKux7y6sqfiEpZlzu8j5jnzx8RiRlCWfEdwYloO8HyHDRVgQbOv/gyI3
5gGeWujgOkentkvJbqrQ3bXaRD3chq3DmkLgTwRN
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:16 2026 by rpki-client