
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa
File: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (raw, json)
Hash identifier: ZY6/yTzTB0VPLAu2EmeaFz398YorukpRHSOffB+JUQQ=
Subject key identifier: 3D:5F:0B:11:C5:7E:F3:10:AC:D3:DE:9F:3A:2F:C9:6A:C7:6E:E4:B1
Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial: 166D1B5BE1A7D38F419C7980E51BCF26B53A0925
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa
Signing time: Tue 17 Feb 2026 08:00:03 +0000
ROA not before: Tue 17 Feb 2026 07:55:03 +0000
ROA not after: Tue 16 Feb 2027 08:00:03 +0000
asID: 141907
IP address blocks: 103.163.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 12:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6d:1b:5b:e1:a7:d3:8f:41:9c:79:80:e5:1b:cf:26:b5:3a:09:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Validity
Not Before: Feb 17 07:55:03 2026 GMT
Not After : Feb 16 08:00:03 2027 GMT
Subject: CN=3D5F0B11C57EF310ACD3DE9F3A2FC96AC76EE4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:36:fe:73:2c:72:54:65:3d:30:05:73:86:
1f:60:55:7b:c0:a2:d3:1f:dc:f7:53:65:cd:10:e7:
ed:d3:06:56:e4:ea:9f:92:3c:ae:e5:cb:a7:d2:18:
c6:01:53:fd:9d:b1:44:87:54:1c:b3:3b:e1:e0:8a:
cb:00:40:0e:a3:17:8e:65:ba:84:75:9f:7a:5e:3b:
86:e4:3d:ae:0b:4c:39:96:31:5e:51:c0:31:30:d7:
bf:74:8f:1a:bc:45:03:0d:b2:a2:f1:55:1d:b3:a3:
6f:6e:42:79:f1:a1:c6:7a:7d:e6:91:9e:3f:b5:3f:
0d:79:6d:cc:97:23:5c:62:70:d2:0b:7d:4f:5a:ff:
b8:72:93:8d:20:d0:56:02:b7:2d:4d:a7:52:2a:71:
44:e3:5f:23:95:95:f8:3a:cf:55:fd:82:49:d5:af:
f2:e9:e8:8a:15:05:5f:c1:6f:d2:f3:dc:5b:19:78:
66:83:4b:63:8c:2f:8d:59:74:63:a5:20:cf:c5:00:
6b:35:a2:b8:62:76:d7:d0:ed:a7:c5:ad:1a:f5:6d:
77:b4:e0:be:e1:14:d3:68:44:c8:df:39:58:6b:63:
20:aa:9e:dd:b6:af:a0:d8:be:02:ef:4c:22:d3:bf:
a6:d6:c5:ac:21:55:a7:b4:c2:ec:19:35:b1:e6:9b:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:0B:11:C5:7E:F3:10:AC:D3:DE:9F:3A:2F:C9:6A:C7:6E:E4:B1
X509v3 Authority Key Identifier:
keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.230.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8b:fc:6d:81:2e:d3:96:4e:d7:c8:ee:62:2d:b2:6e:5b:4a:
bf:6e:84:22:db:88:25:c6:12:80:b3:b1:c6:67:88:bf:ed:10:
11:ff:c2:90:43:04:d7:70:e6:46:da:4f:77:30:05:3b:ab:85:
32:17:1e:56:d7:3f:a4:ec:cf:55:9f:b5:ce:e4:94:3f:c7:8e:
16:67:b4:b1:9e:b9:f0:34:b8:0d:4b:5b:9b:a7:5a:b5:80:47:
cb:cc:9c:20:b7:35:ef:68:86:8b:d0:20:bc:8e:e9:c5:72:41:
cc:4c:30:d8:84:03:db:41:54:42:54:9e:c2:ae:f0:a0:30:60:
5e:85:11:84:37:f7:1f:70:22:f2:4e:f2:fb:78:cc:66:89:11:
84:17:ff:a7:46:ec:82:be:bd:98:7b:2c:6b:c3:4a:aa:f3:f1:
7a:d6:63:3e:a9:e5:24:a5:78:5e:9e:bd:8c:00:6a:91:27:d7:
f6:23:c0:00:6a:16:b8:70:12:3b:dd:b4:68:48:29:01:73:4d:
e9:f0:11:e2:7b:de:8b:a9:41:be:02:f2:46:56:b9:e3:e2:1b:
85:ab:f5:95:30:99:3e:d6:36:ab:4e:ab:58:7a:db:99:8d:19:
22:17:68:9f:1e:3f:65:ff:43:89:1a:9f:32:21:e4:19:b1:cf:
0b:f3:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:21 2026 by rpki-client