
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
File: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: nuaGJGZ3YXO78mNDVOo1HOsr1j0BBeisM+PdT4vV70U=
Subject key identifier: D9:BE:7D:40:E3:AC:D4:FD:B6:FA:BF:06:87:66:F4:01:79:06:D0:D6
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 6B2F02ECCB41F57D71A38114320F3FCF3ED49DCD
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
Signing time: Thu 05 Feb 2026 09:00:00 +0000
ROA not before: Thu 05 Feb 2026 08:55:00 +0000
ROA not after: Thu 04 Feb 2027 09:00:00 +0000
asID: 58816
IP address blocks: 103.248.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2f:02:ec:cb:41:f5:7d:71:a3:81:14:32:0f:3f:cf:3e:d4:9d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Feb 5 08:55:00 2026 GMT
Not After : Feb 4 09:00:00 2027 GMT
Subject: CN=D9BE7D40E3ACD4FDB6FABF068766F4017906D0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:a3:bd:cc:0c:c1:94:cb:f6:fc:f8:90:ab:
7f:e5:99:a3:35:eb:be:9f:f2:b9:e5:06:2a:f7:d7:
ba:bc:19:8a:e8:49:76:97:b8:8b:d4:c6:ce:f4:79:
22:ea:f2:9f:45:77:b5:db:7c:77:5f:53:ff:cb:e6:
61:86:f8:fe:85:ec:47:17:a6:8a:a4:d5:71:96:60:
cd:ab:62:63:0f:48:4e:7b:63:ef:57:38:c8:37:a7:
05:fd:27:8f:1d:c1:c5:2c:0c:eb:bf:88:b3:ec:41:
85:bf:94:6e:fe:42:c2:21:d6:05:ea:83:6e:08:3e:
66:51:0a:51:48:19:dc:32:dd:54:fb:a2:fa:bf:96:
55:9b:63:4f:f7:63:83:3d:83:9c:fe:ab:af:87:43:
14:a4:cc:e2:9c:6a:98:e5:53:e2:12:8d:90:99:6d:
63:d6:4d:41:7c:b3:8f:87:1a:d0:09:51:85:8d:c7:
da:f8:78:4e:64:db:6a:4a:5a:79:d9:d2:8d:d2:f6:
46:0e:5f:ab:70:a4:a3:41:63:0f:8b:21:ef:48:20:
8e:16:c7:a5:69:1c:c8:50:1a:10:4f:bb:a4:73:32:
a9:42:1c:5c:b9:35:10:c9:10:51:bd:67:b8:4a:61:
c2:a6:40:83:00:c1:af:23:5c:28:4a:d7:13:4a:ae:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:7D:40:E3:AC:D4:FD:B6:FA:BF:06:87:66:F4:01:79:06:D0:D6
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:75:4d:d1:8e:11:88:cc:d7:97:e0:c9:2c:87:fb:95:5c:0a:
2b:4b:07:a7:94:a4:a4:21:d4:92:ab:ed:37:a2:06:35:df:28:
3e:55:61:46:d4:10:05:29:73:89:88:67:43:bf:ce:c2:0d:8e:
c7:d9:dd:bd:cb:1d:b9:23:5d:ae:5d:54:f8:e9:e6:4b:d8:8e:
03:cb:d0:c9:86:c1:40:83:aa:c0:2b:18:b5:67:25:16:8a:08:
a3:86:48:8d:9f:7b:6b:cb:98:69:5a:4f:16:34:44:1e:c5:72:
e0:9a:5e:16:f5:c4:d1:54:e0:87:34:86:4a:f1:30:f2:cd:94:
5e:bf:9c:88:20:7f:6c:02:60:58:09:a4:b4:e7:24:db:2e:25:
65:1d:75:3d:bc:b4:3f:9c:85:12:c2:e6:77:11:66:41:53:25:
dc:c0:3e:34:ad:d3:57:31:29:5b:d8:d3:79:6b:57:05:34:21:
07:34:9c:74:64:09:70:8b:1a:c7:17:4c:ca:0e:eb:09:e6:ac:
c9:2c:86:73:f1:8d:ff:8c:73:38:25:0d:92:5c:28:45:4b:ae:
b6:b3:59:7d:95:ae:93:60:75:5a:22:d4:8e:10:e4:65:2f:15:
99:18:9e:e0:ab:ec:d6:c0:a0:4c:c1:cf:60:46:c3:86:5e:27:
04:d4:13:6d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUay8C7MtB9X1xo4EUMg8/zz7Unc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF
MkY5MjE2NjAeFw0yNjAyMDUwODU1MDBaFw0yNzAyMDQwOTAwMDBaMDMxMTAvBgNV
BAMTKEQ5QkU3RDQwRTNBQ0Q0RkRCNkZBQkYwNjg3NjZGNDAxNzkwNkQwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvqO9zAzBlMv2/PiQq3/lmaM1
676f8rnlBir317q8GYroSXaXuIvUxs70eSLq8p9Fd7XbfHdfU//L5mGG+P6F7EcX
poqk1XGWYM2rYmMPSE57Y+9XOMg3pwX9J48dwcUsDOu/iLPsQYW/lG7+QsIh1gXq
g24IPmZRClFIGdwy3VT7ovq/llWbY0/3Y4M9g5z+q6+HQxSkzOKcapjlU+ISjZCZ
bWPWTUF8s4+HGtAJUYWNx9r4eE5k22pKWnnZ0o3S9kYOX6twpKNBYw+LIe9III4W
x6VpHMhQGhBPu6RzMqlCHFy5NRDJEFG9Z7hKYcKmQIMAwa8jXChK1xNKrvZHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2b59QOOs1P22+r8Gh2b0AXkG0NYwHwYDVR0j
BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD
ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5
MjE2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzMxMzAzMzJlMzIzNDM4MmUzNTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf4OzANBgkqhkiG
9w0BAQsFAAOCAQEAPXVN0Y4RiMzXl+DJLIf7lVwKK0sHp5SkpCHUkqvtN6IGNd8o
PlVhRtQQBSlziYhnQ7/Owg2Ox9ndvcsduSNdrl1U+OnmS9iOA8vQyYbBQIOqwCsY
tWclFooIo4ZIjZ97a8uYaVpPFjREHsVy4JpeFvXE0VTghzSGSvEw8s2UXr+ciCB/
bAJgWAmktOck2y4lZR11Pby0P5yFEsLmdxFmQVMl3MA+NK3TVzEpW9jTeWtXBTQh
BzScdGQJcIsaxxdMyg7rCeasySyGc/GN/4xzOCUNklwoRUuutrNZfZWuk2B1WiLU
jhDkZS8VmRie4Kvs1sCgTMHPYEbDhl4nBNQTbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:29 2026 by rpki-client