
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32322d3232203d3e2039333431.roa
File: 3130332e332e37362e302f32322d3232203d3e2039333431.roa (raw, json)
Hash identifier: 3KfDUJT21PCNIlWk5FCkIg4w1KK3B3QOValkdLkLFP0=
Subject key identifier: 09:C2:F6:EF:A8:1D:41:E2:71:E0:A3:67:3B:17:56:F3:68:63:01:B5
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 4FAC59AA956EDFC6AC3A5C696E11BD4194AB2788
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32322d3232203d3e2039333431.roa
Signing time: Tue 07 Apr 2026 06:02:46 +0000
ROA not before: Tue 07 Apr 2026 05:57:46 +0000
ROA not after: Tue 06 Apr 2027 06:02:46 +0000
asID: 9341
IP address blocks: 103.3.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ac:59:aa:95:6e:df:c6:ac:3a:5c:69:6e:11:bd:41:94:ab:27:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 7 05:57:46 2026 GMT
Not After : Apr 6 06:02:46 2027 GMT
Subject: CN=09C2F6EFA81D41E271E0A3673B1756F3686301B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:dc:4a:8d:2d:5a:a8:ec:b4:d5:c3:4e:83:
e5:9f:14:bd:e2:8b:fe:46:29:f4:01:f9:95:ad:86:
e8:e6:77:9d:39:12:bf:21:ed:a0:5e:97:23:8b:eb:
85:53:63:a8:51:54:9c:7b:24:04:66:a5:83:7b:01:
5a:f1:c1:25:27:b8:2a:c2:fc:96:10:74:44:8a:bb:
a6:93:70:25:b1:e8:37:a8:9a:98:37:73:0d:a6:7c:
ec:a6:1c:b8:6b:bc:ac:09:c5:cd:06:cf:55:97:41:
8d:fe:7a:89:00:01:1d:a4:18:b1:c2:e9:99:6d:2e:
c9:44:16:b7:8d:e7:13:6a:29:29:ec:3a:39:62:74:
6e:18:ec:58:20:46:6d:94:e4:b7:23:db:70:de:31:
18:80:29:4d:b4:1c:94:89:8e:f4:06:e6:ae:64:c9:
fc:d2:cb:55:dc:77:82:0c:e9:7c:07:98:a7:a3:e4:
cc:c1:58:a7:cc:a3:ea:86:7d:80:ef:db:ff:35:79:
24:82:8d:3e:7a:18:2f:bf:55:48:42:17:26:ef:60:
bf:64:9b:ae:3f:5d:1e:bb:ec:a0:7c:2d:d3:81:98:
0a:7f:4e:9e:87:8b:5b:75:92:cb:c6:ac:1a:64:2d:
a9:28:9a:91:17:26:e6:af:e1:cc:28:4c:50:e5:24:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:F6:EF:A8:1D:41:E2:71:E0:A3:67:3B:17:56:F3:68:63:01:B5
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32322d3232203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.76.0/22
Signature Algorithm: sha256WithRSAEncryption
19:af:f7:7e:9e:92:e8:c5:d2:55:d6:0f:76:64:72:ee:69:a0:
8c:e4:58:25:21:b5:3b:09:3a:53:28:f9:86:eb:e4:00:ec:ff:
2f:61:92:fe:04:21:3d:37:88:f9:01:25:b1:bf:1f:f1:9c:94:
02:05:07:ed:98:4a:38:1a:c6:03:84:dd:35:ea:cb:0d:64:dd:
5d:4d:c8:99:f9:e2:5d:c8:d8:3e:c0:1d:52:35:44:3c:f9:6c:
3a:9d:04:9e:f6:1f:e1:a7:1b:17:78:d7:92:25:13:da:01:fe:
58:1c:30:d3:f3:97:fd:6d:9e:a7:f1:47:d0:9b:af:d1:7c:a9:
81:d1:35:39:68:0c:d4:ed:05:cd:af:46:d2:b6:0f:95:dc:16:
e9:5f:ba:6c:15:3a:96:b5:68:35:44:f9:b2:4e:6a:cf:e3:90:
4d:2e:01:c5:e2:94:ec:ff:c5:58:29:7d:68:58:18:f8:64:49:
e8:7d:97:2e:80:51:4e:2e:62:1c:c9:a5:d0:d9:2f:c6:e5:2d:
69:1e:ee:bf:88:b5:46:07:df:ab:54:85:4e:8a:dd:a5:d7:e2:
cd:a2:c8:0c:8e:1c:d5:ce:bf:d7:1e:dc:2a:e1:67:f7:4a:56:
bc:35:39:17:70:e2:1b:92:bc:71:01:9e:02:67:b1:a9:5e:8e:
19:11:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:56:56 2026 by rpki-client