
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa
File: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (raw, json)
Hash identifier: siPS5QoYum/BXEiNROt4IMRxgn1AB6K77rmnuo2DlKI=
Subject key identifier: 37:5E:22:B7:21:5D:2D:55:66:6F:00:8D:11:78:F6:7D:08:3D:C0:6B
Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Certificate serial: 262A068ACFF39AA4E8C9895E13F6A91C13AC9FE1
Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa
Signing time: Fri 13 Feb 2026 05:00:02 +0000
ROA not before: Fri 13 Feb 2026 04:55:02 +0000
ROA not after: Fri 12 Feb 2027 05:00:02 +0000
asID: 142366
IP address blocks: 103.163.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl
rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:2a:06:8a:cf:f3:9a:a4:e8:c9:89:5e:13:f6:a9:1c:13:ac:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Validity
Not Before: Feb 13 04:55:02 2026 GMT
Not After : Feb 12 05:00:02 2027 GMT
Subject: CN=375E22B7215D2D55666F008D1178F67D083DC06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d4:5d:ec:a7:8c:3f:b8:a9:de:34:dd:e9:3d:
fa:05:24:0f:75:f6:90:9d:b1:69:74:4c:bd:35:d0:
25:ad:84:03:6c:6e:ed:53:2d:d3:49:e0:24:8a:78:
53:79:fe:e1:8f:cb:3d:f3:06:16:73:0a:01:b6:e4:
3c:b2:55:bd:1e:5d:69:4d:57:0b:93:db:a6:a2:41:
cc:ec:a0:58:30:ef:08:0e:b0:df:5d:33:aa:25:c5:
48:ca:69:ef:5c:83:dd:ec:a9:13:1f:40:fe:6a:7a:
57:fe:ea:6e:4c:95:0b:ff:51:8d:fb:38:b8:b4:4f:
f0:fd:93:f6:fb:c0:46:4b:2d:6e:a5:df:74:4d:c9:
99:f9:8d:c6:7b:7f:79:cf:85:79:e1:e8:83:9b:a0:
16:10:30:0d:a3:1a:0a:87:26:89:e4:a1:f7:48:3a:
57:92:10:96:f6:19:5d:49:30:a6:78:bc:59:2a:4c:
eb:95:ab:d1:32:9f:ef:ce:1d:57:3f:23:b1:81:91:
09:3a:17:05:1c:11:07:57:f2:71:35:f6:b5:29:6f:
0d:5e:9a:ac:35:b3:6f:7b:ed:4c:d4:fd:3a:bb:20:
43:23:37:0f:00:6f:57:a1:78:aa:4a:89:3e:9b:1e:
12:b7:76:f3:8d:2f:21:62:cc:ef:ad:16:bc:8c:86:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5E:22:B7:21:5D:2D:55:66:6F:00:8D:11:78:F6:7D:08:3D:C0:6B
X509v3 Authority Key Identifier:
keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.184.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b2:f0:3d:ef:43:2c:bd:a8:0a:85:ec:7e:f2:cb:d7:c3:91:
69:72:ac:b0:6a:1b:d1:92:ba:1f:7d:b6:65:61:2c:1f:34:20:
2a:9a:4d:00:c7:76:c9:d3:1f:27:8a:00:95:f7:a1:23:f1:21:
72:c0:3d:8d:e5:02:27:82:e5:0f:f2:4e:b6:d5:98:19:99:c0:
6b:a7:72:67:07:d6:cb:33:a1:ee:36:c6:ea:b4:7b:81:62:40:
16:d8:4d:6a:74:b6:20:21:3e:12:6d:23:38:df:a5:7d:e9:a4:
fd:aa:83:30:ae:95:20:bb:e7:89:58:14:db:ae:da:bc:ac:ae:
0e:79:a1:76:88:7d:df:ff:85:43:3d:43:b0:17:6c:c9:1a:ff:
6b:14:e5:06:ec:1c:72:89:d5:c2:50:7e:90:32:08:4a:dd:1e:
f6:65:9e:ff:34:9b:c2:00:78:f9:f1:b6:5d:33:52:18:26:88:
e7:62:a0:bd:d0:17:62:fe:4d:47:32:14:41:fa:a9:a4:7b:aa:
e9:7c:92:d0:49:ee:ea:ab:86:4c:a2:77:4e:84:5f:3a:28:bb:
2c:8b:44:0b:73:e3:5f:d7:42:b3:34:88:79:51:2e:68:b4:0a:
d3:c8:0c:e0:8e:b9:8b:91:df:f5:2c:71:45:a1:3f:33:59:41:
68:6e:cd:e0
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJioGis/zmqToyYleE/apHBOsn+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw
OUE5N0RBRjAeFw0yNjAyMTMwNDU1MDJaFw0yNzAyMTIwNTAwMDJaMDMxMTAvBgNV
BAMTKDM3NUUyMkI3MjE1RDJENTU2NjZGMDA4RDExNzhGNjdEMDgzREMwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD21F3sp4w/uKneNN3pPfoFJA91
9pCdsWl0TL010CWthANsbu1TLdNJ4CSKeFN5/uGPyz3zBhZzCgG25DyyVb0eXWlN
VwuT26aiQczsoFgw7wgOsN9dM6olxUjKae9cg93sqRMfQP5qelf+6m5MlQv/UY37
OLi0T/D9k/b7wEZLLW6l33RNyZn5jcZ7f3nPhXnh6IOboBYQMA2jGgqHJonkofdI
OleSEJb2GV1JMKZ4vFkqTOuVq9Eyn+/OHVc/I7GBkQk6FwUcEQdX8nE19rUpbw1e
mqw1s2977UzU/Tq7IEMjNw8Ab1eheKpKiT6bHhK3dvONLyFizO+tFryMhrrPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUN14ityFdLVVmbwCNEXj2fQg9wGswHwYDVR0j
BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC
QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5
N0RBRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiMTY2NGE3LWM5YzktNDQ0Mi04
NzE4LTlhZWM5ZTIxMTBhMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTM4MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABno7gwDQYJ
KoZIhvcNAQELBQADggEBABiy8D3vQyy9qAqF7H7yy9fDkWlyrLBqG9GSuh99tmVh
LB80ICqaTQDHdsnTHyeKAJX3oSPxIXLAPY3lAieC5Q/yTrbVmBmZwGuncmcH1ssz
oe42xuq0e4FiQBbYTWp0tiAhPhJtIzjfpX3ppP2qgzCulSC754lYFNuu2rysrg55
oXaIfd//hUM9Q7AXbMka/2sU5QbsHHKJ1cJQfpAyCErdHvZlnv80m8IAePnxtl0z
UhgmiOdioL3QF2L+TUcyFEH6qaR7qul8ktBJ7uqrhkyid06EXzoouyyLRAtz41/X
QrM0iHlRLmi0CtPIDOCOuYuR3/UscUWhPzNZQWhuzeA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:11 2026 by rpki-client