
$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa
File: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (raw, json)
Hash identifier: GTSIKbFo5NJqRXJRvAQHCqPxj9pi/3T3xFnH2S49HTE=
Subject key identifier: 95:26:7A:8B:FD:56:03:56:20:AA:FE:2B:EF:48:96:60:D0:89:D2:85
Certificate issuer: /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial: 477F115AA1F39540A6DA1FD71245520F4B3C9A15
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa
Signing time: Sat 14 Feb 2026 10:00:00 +0000
ROA not before: Sat 14 Feb 2026 09:55:00 +0000
ROA not after: Sat 13 Feb 2027 10:00:00 +0000
asID: 150978
IP address blocks: 103.126.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:7f:11:5a:a1:f3:95:40:a6:da:1f:d7:12:45:52:0f:4b:3c:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Validity
Not Before: Feb 14 09:55:00 2026 GMT
Not After : Feb 13 10:00:00 2027 GMT
Subject: CN=95267A8BFD56035620AAFE2BEF489660D089D285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:c5:00:a4:63:9f:4a:22:58:20:ba:f9:cd:
73:0d:05:31:9f:c8:63:cb:3e:5d:ff:da:6d:b1:a4:
6e:de:d1:2a:37:d1:97:b0:05:a7:88:14:7a:d6:53:
27:ce:46:1f:b4:4d:84:e0:7d:df:21:f2:e8:a1:73:
8d:16:15:93:9e:6b:36:af:45:08:35:7e:b0:f5:11:
a4:1d:ee:d8:de:ca:76:47:4b:d3:53:44:48:c4:e2:
9e:31:a9:a9:08:23:fa:8f:cc:64:b9:cb:ca:f8:bd:
35:39:bc:c7:82:c8:78:41:88:65:6b:65:c9:45:d1:
5d:f2:e9:db:12:34:b0:82:19:ce:ac:67:c9:e5:47:
46:04:a9:11:48:be:1d:7f:5f:f9:5b:62:c5:f8:00:
89:62:79:94:51:8d:ec:4d:a2:1c:a4:0b:ec:60:8a:
77:19:21:2c:a8:69:a5:b1:5e:33:11:5a:ac:99:02:
c6:ee:6b:cd:24:c9:6e:80:47:ea:3a:5f:02:95:56:
8c:e9:92:5a:54:a4:06:34:9c:46:05:4d:33:29:db:
6f:e3:d6:8e:28:b8:24:70:5f:1f:b1:86:df:2a:8f:
67:41:4b:a1:27:df:9b:b4:03:5e:4c:f3:49:5e:27:
4f:c9:52:e4:30:9b:f4:92:56:7b:96:9c:db:10:d5:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:7A:8B:FD:56:03:56:20:AA:FE:2B:EF:48:96:60:D0:89:D2:85
X509v3 Authority Key Identifier:
keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.232.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cf:e8:43:fd:fa:02:a2:b4:e5:ed:b6:dd:9c:50:d0:f0:f9:
e8:69:7d:21:d1:64:6e:0f:4e:9d:2e:a1:c7:e0:2b:4d:c8:50:
53:b0:3e:c8:fc:0a:80:49:f9:a1:72:0f:f3:de:75:ed:59:a0:
68:b3:ef:ea:c3:18:0d:cd:ef:6c:5d:b1:5e:fe:4f:d6:64:16:
14:bd:9c:da:ce:6e:86:b2:4c:8d:16:e8:0c:f7:f1:49:d2:ac:
b5:f8:dd:d3:c9:f3:99:e7:d9:3a:e4:b6:e9:2e:42:85:2d:83:
9a:0e:27:b4:34:7b:fc:d1:69:2f:4c:33:ae:d1:4b:00:c0:ab:
de:48:a5:fb:24:4a:d4:68:7f:7e:ec:e7:0f:bf:f5:3e:fa:1d:
2c:f9:5c:d9:b5:11:01:45:47:08:6a:69:3d:22:e0:3d:c7:60:
0b:66:71:f1:3a:23:25:fe:8a:42:7d:84:37:00:89:cf:88:6a:
55:46:0e:81:8e:9d:76:be:ca:be:e9:c6:2e:23:51:e6:85:b6:
b1:86:a7:1a:6a:0e:b7:60:06:22:3b:ae:6a:c4:70:70:a4:0b:
bf:76:94:2d:d0:f7:c0:a5:1c:61:0f:de:81:52:b7:b7:dc:51:
f7:7e:26:8a:1a:4b:f8:b3:77:a6:ab:32:4b:b0:c1:6d:fb:73:
73:47:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:33 2026 by rpki-client