
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
File: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (raw, json)
Hash identifier: f8W5FJ9iU4t8t9EU3XiXSZ62Db4DfGqKJl32gKMiJc8=
Subject key identifier: 4C:B8:AB:40:6F:6A:3A:8A:9A:8F:DC:0E:F4:C7:95:85:BE:79:C4:B5
Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial: 6A1D4785FAA9B26035CAA991465C0D6E999D2FDD
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
Signing time: Fri 10 Apr 2026 16:00:02 +0000
ROA not before: Fri 10 Apr 2026 15:55:02 +0000
ROA not after: Fri 09 Apr 2027 16:00:02 +0000
asID: 152366
IP address blocks: 103.13.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 15:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1d:47:85:fa:a9:b2:60:35:ca:a9:91:46:5c:0d:6e:99:9d:2f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Validity
Not Before: Apr 10 15:55:02 2026 GMT
Not After : Apr 9 16:00:02 2027 GMT
Subject: CN=4CB8AB406F6A3A8A9A8FDC0EF4C79585BE79C4B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:95:3c:e9:88:1f:22:4c:3e:15:9f:40:ea:
23:34:00:63:6e:e7:03:14:a3:e5:3d:85:3a:f7:68:
4d:25:2a:b0:23:0d:f0:99:47:d5:89:4d:33:c3:73:
d1:7f:9a:ae:5b:5e:5f:fa:3d:28:81:d7:f6:1a:c4:
57:3f:3f:5f:01:29:a4:de:af:bc:c3:58:20:8a:e1:
84:af:94:d8:7d:6e:fe:1e:29:06:68:cb:ef:07:ea:
b8:c2:28:b0:40:52:41:ff:81:84:28:20:90:21:00:
e3:ab:c7:bd:d6:6a:a3:88:49:b5:6d:99:28:dc:5e:
09:4e:d2:a4:52:73:25:96:27:22:91:63:c0:5e:b2:
e9:68:37:20:a2:6b:49:41:29:81:cc:74:e9:48:9c:
72:ee:72:ff:d8:8d:fc:d1:9b:6d:4e:b5:60:84:90:
48:0e:c8:bb:e2:64:15:6c:33:43:9e:bd:58:76:d3:
7a:d0:f0:f7:f4:85:31:9f:e9:5b:d9:ce:d5:00:0c:
e9:a5:20:ca:00:91:6a:bf:65:fb:0d:eb:f6:cd:52:
00:6f:ef:69:c5:92:8c:b6:98:77:e8:05:0a:6b:c8:
e3:bc:00:00:6c:6c:e1:71:6a:48:b7:18:ce:91:d2:
39:78:8e:3e:9e:d5:24:1e:fe:98:7d:09:09:9e:19:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B8:AB:40:6F:6A:3A:8A:9A:8F:DC:0E:F4:C7:95:85:BE:79:C4:B5
X509v3 Authority Key Identifier:
keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.205.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:53:8c:32:48:67:da:3f:bf:6e:3f:e7:e8:55:03:70:26:f8:
fc:72:c3:59:89:d1:4c:d0:bf:f1:a0:9b:69:af:b4:12:0d:14:
91:47:e0:c4:49:c8:99:01:9f:28:f4:da:4c:c6:64:58:77:16:
cc:d1:76:1a:dc:15:61:63:97:ad:48:b4:3f:ea:aa:a8:ab:96:
ac:8a:f0:81:27:24:5f:d1:a1:6a:59:31:8d:4b:da:d9:73:11:
29:20:c0:d7:97:41:8b:78:c9:c7:4c:3f:86:64:f0:ca:fb:8a:
c3:6c:e2:4f:a4:49:58:c9:f3:61:d4:41:13:66:40:b9:cc:96:
0f:b1:70:db:7c:57:54:88:e0:5a:0a:cc:38:6b:30:9e:52:3c:
51:b6:48:0f:ef:70:9f:3a:d6:50:80:52:b4:29:19:1e:72:58:
db:b9:88:bb:40:bc:70:31:93:ea:aa:03:52:3a:56:7f:e6:5c:
70:dd:cf:b0:cc:87:94:f8:0b:e8:fc:24:7f:34:6c:ba:b0:dc:
94:fe:12:ee:cd:a2:28:b6:1a:7f:be:a0:3e:d4:07:0a:25:c6:
7b:d8:0e:93:77:f7:31:87:e0:0e:6d:8b:a4:ea:89:00:73:43:
6a:5d:76:06:79:e9:e7:ef:1b:79:43:ae:e7:59:fa:65:7a:18:
a8:2f:b1:93
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUah1HhfqpsmA1yqmRRlwNbpmdL90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky
QzQwNkQ5QjAeFw0yNjA0MTAxNTU1MDJaFw0yNzA0MDkxNjAwMDJaMDMxMTAvBgNV
BAMTKDRDQjhBQjQwNkY2QTNBOEE5QThGREMwRUY0Qzc5NTg1QkU3OUM0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8T5U86YgfIkw+FZ9A6iM0AGNu
5wMUo+U9hTr3aE0lKrAjDfCZR9WJTTPDc9F/mq5bXl/6PSiB1/YaxFc/P18BKaTe
r7zDWCCK4YSvlNh9bv4eKQZoy+8H6rjCKLBAUkH/gYQoIJAhAOOrx73WaqOISbVt
mSjcXglO0qRScyWWJyKRY8BesuloNyCia0lBKYHMdOlInHLucv/YjfzRm21OtWCE
kEgOyLviZBVsM0OevVh203rQ8Pf0hTGf6VvZztUADOmlIMoAkWq/ZfsN6/bNUgBv
72nFkoy2mHfoBQpryOO8AABsbOFxaki3GM6R0jl4jj6e1SQe/ph9CQmeGe3LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTLirQG9qOoqaj9wO9MeVhb55xLUwHwYDVR0j
BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2
QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw
NkQ5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZjLTI4ZGMtNDRlNC1i
NGNmLTk2ZDYzMWI3M2FjMC8wLzMxMzAzMzJlMzEzMzJlMzIzMDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw3NMA0GCSqG
SIb3DQEBCwUAA4IBAQDIU4wySGfaP79uP+foVQNwJvj8csNZidFM0L/xoJtpr7QS
DRSRR+DESciZAZ8o9NpMxmRYdxbM0XYa3BVhY5etSLQ/6qqoq5asivCBJyRf0aFq
WTGNS9rZcxEpIMDXl0GLeMnHTD+GZPDK+4rDbOJPpElYyfNh1EETZkC5zJYPsXDb
fFdUiOBaCsw4azCeUjxRtkgP73CfOtZQgFK0KRkecljbuYi7QLxwMZPqqgNSOlZ/
5lxw3c+wzIeU+Avo/CR/NGy6sNyU/hLuzaIothp/vqA+1AcKJcZ72A6Td/cxh+AO
bYuk6okAc0NqXXYGeenn7xt5Q67nWfplehioL7GT
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:00 2026 by rpki-client