
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131302e302f32342d3234203d3e203130313337.roa
File: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier: TQ1P9+Ueo7t848GajM1Rqo7V7lYwYUfL96+Uk8WEO/o=
Subject key identifier: FC:47:2F:A8:8C:50:A8:D7:E4:13:44:E8:F3:A5:FC:9A:1B:34:C6:82
Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial: 0193219D2ECCBFC3969D86C19F4E9EDF3A1C5B0E
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131302e302f32342d3234203d3e203130313337.roa
Signing time: Thu 16 Apr 2026 09:03:59 +0000
ROA not before: Thu 16 Apr 2026 08:58:59 +0000
ROA not after: Thu 15 Apr 2027 09:03:59 +0000
asID: 10137
IP address blocks: 203.99.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:9d:2e:cc:bf:c3:96:9d:86:c1:9f:4e:9e:df:3a:1c:5b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Validity
Not Before: Apr 16 08:58:59 2026 GMT
Not After : Apr 15 09:03:59 2027 GMT
Subject: CN=FC472FA88C50A8D7E41344E8F3A5FC9A1B34C682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:ef:b4:a9:d3:98:9e:d0:0e:81:d0:f2:6e:
a0:96:72:1c:02:62:4b:02:1a:27:42:df:09:ae:10:
01:07:9e:c4:6a:34:22:fc:02:bb:15:ad:91:90:6c:
c9:2c:dd:ad:08:e3:71:9c:97:7d:4d:44:c9:b3:29:
cf:62:4c:8b:5d:e0:be:2e:36:d8:90:88:9a:b7:60:
be:af:18:ab:68:a2:51:f8:63:98:3b:7d:23:05:86:
18:96:ba:41:40:e3:70:ae:73:eb:86:04:f5:55:5a:
92:9a:36:c1:9a:fe:f1:66:56:60:f4:87:84:e2:15:
04:a0:3d:c9:ac:6c:1f:9d:0c:41:df:63:4c:33:f1:
ff:26:f5:a7:c2:1d:ea:99:7d:ff:24:e6:3c:07:df:
eb:4a:f3:22:9c:a0:b0:3d:f4:12:55:0b:38:c5:24:
80:0b:c2:46:2c:b0:2b:f1:44:d6:ad:5f:59:d1:36:
bc:c2:c7:de:7c:7b:51:fd:4f:fa:50:79:be:62:47:
4b:d1:da:53:ce:13:98:e3:e4:ec:b5:89:36:23:76:
c3:9e:5a:9f:ff:f9:68:77:ad:c6:7d:7e:1e:67:9c:
40:68:17:8f:f7:06:e4:b3:45:5f:73:7e:96:e3:a8:
96:6b:4e:38:bc:06:f2:d9:09:ad:03:4c:00:5c:ae:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:2F:A8:8C:50:A8:D7:E4:13:44:E8:F3:A5:FC:9A:1B:34:C6:82
X509v3 Authority Key Identifier:
keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131302e302f32342d3234203d3e203130313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.99.110.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c3:7e:b1:a3:00:87:60:3c:67:38:40:41:84:5c:b2:d7:8a:
a8:e9:64:64:c5:2b:31:e9:11:1d:e1:fc:11:1f:ab:72:4f:d3:
62:60:b2:56:2f:6b:68:9f:2c:83:d3:65:5d:16:19:88:73:22:
41:1c:99:f9:91:71:a7:f8:da:dc:14:12:d2:33:2c:bc:05:b0:
04:62:37:07:bf:92:1c:28:c0:10:1e:fd:4d:24:8c:28:5c:1b:
92:e8:62:65:67:0e:7c:1c:81:ba:c4:10:5a:d4:99:40:ba:ab:
c6:05:7e:8c:37:26:f3:43:c9:b4:c8:39:cb:a0:0f:7b:2e:3a:
64:3e:40:9f:ee:8c:b3:b3:76:84:2a:f5:40:c4:e4:c0:f2:51:
44:ff:7a:27:57:af:dd:c0:5d:67:fd:a2:58:09:2b:25:18:f0:
74:0a:88:1d:33:24:83:2a:17:e2:59:e2:c1:0a:2c:3d:f3:68:
25:9d:37:2d:b0:b7:75:f7:37:29:c7:1c:3f:20:eb:dd:12:b8:
f4:e6:fd:15:5e:66:2e:2f:6c:f7:ec:db:06:b3:32:4d:d8:ed:
6b:e1:17:14:90:1f:12:6a:77:9d:5f:72:1e:97:3a:f0:67:ef:
f2:28:e8:51:75:77:50:ad:1f:ba:24:14:07:f2:5e:2c:33:cd:
6c:98:a9:ac
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAZMhnS7Mv8OWnYbBn06e3zocWw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz
RkJERjY1ODAeFw0yNjA0MTYwODU4NTlaFw0yNzA0MTUwOTAzNTlaMDMxMTAvBgNV
BAMTKEZDNDcyRkE4OEM1MEE4RDdFNDEzNDRFOEYzQTVGQzlBMUIzNEM2ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkO+0qdOYntAOgdDybqCWchwC
YksCGidC3wmuEAEHnsRqNCL8ArsVrZGQbMks3a0I43Gcl31NRMmzKc9iTItd4L4u
NtiQiJq3YL6vGKtoolH4Y5g7fSMFhhiWukFA43Cuc+uGBPVVWpKaNsGa/vFmVmD0
h4TiFQSgPcmsbB+dDEHfY0wz8f8m9afCHeqZff8k5jwH3+tK8yKcoLA99BJVCzjF
JIALwkYssCvxRNatX1nRNrzCx958e1H9T/pQeb5iR0vR2lPOE5jj5Oy1iTYjdsOe
Wp//+Wh3rcZ9fh5nnEBoF4/3BuSzRV9zfpbjqJZrTji8BvLZCa0DTABcroOrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU/EcvqIxQqNfkE0To86X8mhs0xoIwHwYDVR0j
BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw
NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE
RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05
OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMDMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjbjANBgkqhkiG
9w0BAQsFAAOCAQEAEcN+saMAh2A8ZzhAQYRcsteKqOlkZMUrMekRHeH8ER+rck/T
YmCyVi9raJ8sg9NlXRYZiHMiQRyZ+ZFxp/ja3BQS0jMsvAWwBGI3B7+SHCjAEB79
TSSMKFwbkuhiZWcOfByBusQQWtSZQLqrxgV+jDcm80PJtMg5y6APey46ZD5An+6M
s7N2hCr1QMTkwPJRRP96J1ev3cBdZ/2iWAkrJRjwdAqIHTMkgyoX4lniwQosPfNo
JZ03LbC3dfc3KcccPyDr3RK49Ob9FV5mLi9s9+zbBrMyTdjta+EXFJAfEmp3nV9y
Hpc68Gfv8ijoUXV3UK0fuiQUB/JeLDPNbJiprA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:27 2026 by rpki-client