
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
File: 3132312e3130302e31362e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: hDCh1bCy3DQU6i6DjIVF9Vf/iAJiTAH+faqLcrfOr0I=
Subject key identifier: B6:6E:DC:B0:53:EA:05:25:B2:2B:70:BC:C3:DA:E0:11:81:06:A9:87
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 63F490668EE350B78750220C3512C7BC8784F2C7
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
Signing time: Tue 24 Feb 2026 04:00:38 +0000
ROA not before: Tue 24 Feb 2026 03:55:38 +0000
ROA not after: Tue 23 Feb 2027 04:00:38 +0000
asID: 9341
IP address blocks: 121.100.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f4:90:66:8e:e3:50:b7:87:50:22:0c:35:12:c7:bc:87:84:f2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Feb 24 03:55:38 2026 GMT
Not After : Feb 23 04:00:38 2027 GMT
Subject: CN=B66EDCB053EA0525B22B70BCC3DAE0118106A987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:f8:d9:a5:07:b5:38:d3:54:73:c8:82:c0:
9f:0f:3e:6e:bc:ac:d6:54:48:52:f7:0f:41:79:ff:
8b:f6:4d:d8:76:4e:27:c8:3f:1f:12:14:cf:e4:cf:
3a:86:1d:1f:62:ea:c0:1f:4c:87:02:ef:2d:62:0f:
2e:93:df:16:d0:e9:91:ac:e9:0f:ba:3b:35:92:41:
60:94:f0:d1:ed:8b:65:39:b5:77:ae:5c:2f:4b:53:
b8:8d:e7:6e:73:55:a8:f5:aa:63:ad:d8:cb:35:d2:
b6:57:ec:0e:1c:8e:f8:18:59:a2:fc:94:46:b7:25:
11:1e:4a:e3:f9:66:07:99:9e:00:4d:0b:8b:fe:d3:
e4:bd:88:46:d5:ee:9f:db:b9:f1:f8:e3:d9:d9:82:
40:51:b8:55:31:67:1b:61:f3:ed:54:fc:19:24:d4:
9f:e7:96:b6:d7:f2:72:ec:5a:2b:f5:15:9b:04:a1:
34:33:d7:dd:1d:71:81:6d:e6:55:62:2b:fd:b0:40:
98:c3:a5:38:43:00:6c:c3:a1:6b:12:48:35:d5:7b:
86:ee:1c:57:c4:93:a7:1f:b1:fc:cb:a1:5a:c1:c1:
4f:bb:9d:14:42:1a:e6:04:fe:77:c2:0b:8f:44:34:
2d:db:c2:a8:4f:28:c8:dc:0c:e4:77:67:06:23:43:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:DC:B0:53:EA:05:25:B2:2B:70:BC:C3:DA:E0:11:81:06:A9:87
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.100.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:5f:48:37:69:bf:bb:d8:55:59:c0:83:b6:e7:c2:e3:51:e8:
77:dd:99:bd:ff:c3:cd:bb:68:c5:f7:c8:0e:ce:e9:34:4c:64:
62:e7:a5:1d:ce:77:fb:49:35:cb:2b:77:94:77:e8:3b:8e:13:
32:7d:af:25:83:60:e9:0b:ef:fb:e5:7b:d4:83:4f:7a:22:31:
5a:75:62:9b:4b:11:36:d6:7a:46:c8:fa:3c:7b:47:5b:79:7c:
a2:9a:47:e2:b8:f7:7e:e0:c6:02:e7:ae:40:f1:66:77:18:91:
05:f2:bd:2d:8e:a4:18:52:75:d2:c4:7e:6f:8a:ef:ff:c6:7d:
f8:b9:8c:39:bc:44:33:8a:52:49:0c:19:bf:61:87:4f:a7:78:
d1:3b:64:19:4a:e9:c3:4d:94:5c:4c:81:f8:99:8b:8f:8c:18:
08:8e:47:a3:25:71:95:eb:c6:5b:3e:02:86:62:6b:60:fa:ee:
64:20:30:48:f4:d6:67:d3:76:7f:54:ea:5d:e5:80:eb:50:75:
89:1e:b7:6c:c2:49:41:65:c4:c7:14:1b:83:9d:eb:6f:37:38:
6c:d8:6e:1d:4a:84:16:0c:51:56:41:d2:41:52:4d:d0:7f:cf:
77:4f:d6:cc:14:79:57:95:85:95:a1:c1:78:50:4f:96:9d:6b:
3a:cb:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:53 2026 by rpki-client