
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa
File: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (raw, json)
Hash identifier: rsfEnPVSsycki+njgiCyWYWgAdgVcyumzNfOTNHS8n4=
Subject key identifier: DE:F2:E0:D4:3C:E6:16:68:4A:CC:5E:46:53:11:AE:C5:02:80:6E:68
Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial: 76411B019029ECF37DB221768CC41EFEDAE241C2
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa
Signing time: Mon 23 Feb 2026 02:22:40 +0000
ROA not before: Mon 23 Feb 2026 02:17:40 +0000
ROA not after: Mon 22 Feb 2027 02:22:40 +0000
asID: 141952
IP address blocks: 103.166.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:41:1b:01:90:29:ec:f3:7d:b2:21:76:8c:c4:1e:fe:da:e2:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
Validity
Not Before: Feb 23 02:17:40 2026 GMT
Not After : Feb 22 02:22:40 2027 GMT
Subject: CN=DEF2E0D43CE616684ACC5E465311AEC502806E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:be:e6:5e:c8:53:ba:07:33:d8:f6:23:60:
c2:09:98:9f:30:0b:4f:78:b5:e9:69:23:aa:e0:a4:
a8:8d:31:44:55:ac:a8:07:ba:90:0d:59:ef:0a:96:
3c:9c:5c:08:40:45:28:be:02:c5:48:29:d0:48:14:
e9:3d:d1:04:2b:eb:d9:7c:26:b3:f4:73:ef:24:37:
72:52:2d:45:fd:80:8d:f2:b0:e8:48:0b:69:f7:a9:
ac:35:2b:03:17:3d:6d:df:90:cd:1f:70:6f:df:b5:
d5:a1:d9:62:1b:fc:b1:2f:97:d7:c1:27:5e:ac:b6:
0e:85:8f:0d:ea:b9:b8:ab:e6:76:ee:22:d7:71:6f:
09:78:1e:60:7d:cb:cd:bd:7b:17:22:2b:e7:00:37:
fb:60:28:34:82:b5:b2:ee:1d:f5:7a:3e:b2:6b:1d:
74:69:39:6d:35:5b:7b:df:1d:5e:fd:1f:25:8b:22:
9f:79:a5:73:2b:b7:a5:d2:f8:f7:bc:a3:6a:47:7f:
8e:a6:69:38:82:c4:1f:c5:ba:5f:2b:31:ea:d9:4f:
1e:46:d7:b3:47:77:c9:83:35:cf:cf:a5:ac:11:73:
3c:1a:58:e2:70:f7:09:41:ee:0a:35:43:b9:d6:f7:
55:27:9f:f2:03:57:69:82:18:5a:13:3a:e0:c1:18:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:E0:D4:3C:E6:16:68:4A:CC:5E:46:53:11:AE:C5:02:80:6E:68
X509v3 Authority Key Identifier:
keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.160.0/24
Signature Algorithm: sha256WithRSAEncryption
52:81:17:8a:39:a2:07:46:f3:56:f4:5f:64:5f:a8:b7:1d:d2:
5f:1e:2d:4a:08:32:19:fc:a1:09:76:68:ef:e5:fc:36:b0:b7:
1a:56:b1:aa:9f:f1:c3:de:9b:46:8b:86:13:a4:5e:80:cb:55:
88:55:42:2e:b1:80:12:4e:a5:e6:df:b2:ca:14:5c:6a:bd:9c:
c9:7b:09:79:d0:b1:03:46:fe:ba:1e:71:a1:55:86:4d:a5:7f:
34:da:bc:dd:df:75:9b:af:e4:df:af:9a:ba:5d:95:a1:01:43:
9a:c7:a1:34:a0:a9:b9:38:30:7e:5d:5c:3d:90:44:f2:1f:f6:
48:6a:05:78:86:87:b8:80:59:ea:55:d0:96:92:07:2c:51:5a:
f0:6e:37:57:f5:04:3a:6a:c3:f3:a8:88:44:38:b0:4b:a6:ba:
97:96:60:f9:ac:ac:80:4d:48:49:14:be:92:0d:de:a7:22:da:
5c:ab:f5:90:5d:4b:dd:a3:b8:12:df:99:ad:5e:00:10:c9:b6:
45:76:fe:c6:b4:a6:50:c4:ae:78:cd:5b:43:84:9f:19:fa:36:
b3:d8:35:7b:e6:64:41:d5:7e:6d:79:8f:b5:42:10:12:4f:d2:
5b:5e:2e:42:d5:83:3d:d6:80:dd:13:4c:3b:1e:65:33:20:bf:
c3:7a:0e:79
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdkEbAZAp7PN9siF2jMQe/triQcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz
MTgzNjRBQjAeFw0yNjAyMjMwMjE3NDBaFw0yNzAyMjIwMjIyNDBaMDMxMTAvBgNV
BAMTKERFRjJFMEQ0M0NFNjE2Njg0QUNDNUU0NjUzMTFBRUM1MDI4MDZFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjb7mXshTugcz2PYjYMIJmJ8w
C094telpI6rgpKiNMURVrKgHupANWe8KljycXAhARSi+AsVIKdBIFOk90QQr69l8
JrP0c+8kN3JSLUX9gI3ysOhIC2n3qaw1KwMXPW3fkM0fcG/ftdWh2WIb/LEvl9fB
J16stg6Fjw3qubir5nbuItdxbwl4HmB9y829exciK+cAN/tgKDSCtbLuHfV6PrJr
HXRpOW01W3vfHV79HyWLIp95pXMrt6XS+Pe8o2pHf46maTiCxB/Ful8rMerZTx5G
17NHd8mDNc/PpawRczwaWOJw9wlB7go1Q7nW91Unn/IDV2mCGFoTOuDBGKLTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3vLg1DzmFmhKzF5GUxGuxQKAbmgwHwYDVR0j
BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF
NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz
NjRBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiMjA0MWYxLTRjZTYtNDliNC04
M2E1LTMxNWYyMGU0ZTJjMy8wLzMxMzAzMzJlMzEzNjM2MmUzMTM2MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpqAwDQYJ
KoZIhvcNAQELBQADggEBAFKBF4o5ogdG81b0X2RfqLcd0l8eLUoIMhn8oQl2aO/l
/DawtxpWsaqf8cPem0aLhhOkXoDLVYhVQi6xgBJOpebfssoUXGq9nMl7CXnQsQNG
/roecaFVhk2lfzTavN3fdZuv5N+vmrpdlaEBQ5rHoTSgqbk4MH5dXD2QRPIf9khq
BXiGh7iAWepV0JaSByxRWvBuN1f1BDpqw/OoiEQ4sEumupeWYPmsrIBNSEkUvpIN
3qci2lyr9ZBdS92juBLfma1eABDJtkV2/sa0plDErnjNW0OEnxn6NrPYNXvmZEHV
fm15j7VCEBJP0lteLkLVgz3WgN0TTDseZTMgv8N6Dnk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:25 2026 by rpki-client