
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
File: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier: rUzHPQC8rSGdW9E/HydLJJfVCcp4Cg41fMK32WaXBLQ=
Subject key identifier: 9C:1A:61:FD:FF:47:BE:79:BD:DA:83:EA:D7:2D:23:86:1A:5F:21:F0
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 28F6F48755267DD7B723B86D06C6DA758E868F3C
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
Signing time: Thu 09 Apr 2026 11:00:01 +0000
ROA not before: Thu 09 Apr 2026 10:55:01 +0000
ROA not after: Thu 08 Apr 2027 11:00:01 +0000
asID: 23694
IP address blocks: 103.66.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f6:f4:87:55:26:7d:d7:b7:23:b8:6d:06:c6:da:75:8e:86:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: Apr 9 10:55:01 2026 GMT
Not After : Apr 8 11:00:01 2027 GMT
Subject: CN=9C1A61FDFF47BE79BDDA83EAD72D23861A5F21F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:cd:85:96:87:35:4b:de:e5:2c:b7:86:f3:
98:88:7c:a8:4f:00:33:7b:85:53:10:df:3e:e9:e6:
eb:dd:7b:3a:e0:b8:46:7b:21:1e:af:18:d1:ec:01:
90:cd:86:f5:3d:15:19:f4:c7:8c:3a:9d:b9:7f:ec:
0a:47:9a:26:55:8e:00:39:0c:1d:64:5c:e6:eb:81:
35:24:3d:f5:22:c0:7d:b8:7b:dd:91:a9:b3:e1:94:
cf:41:cd:27:98:15:02:c2:1e:01:0f:c2:36:1a:2b:
0d:71:c6:8d:5a:5c:e3:c0:20:36:a4:9f:70:cc:f0:
c6:85:fd:3c:93:4c:2e:70:a5:7c:9d:3a:e4:5c:d7:
b8:69:44:99:78:93:23:b8:07:02:c3:c2:46:1c:40:
74:62:19:70:57:21:4c:82:e8:49:fa:be:0d:89:96:
26:03:93:78:16:53:9a:96:d8:c5:f7:8f:c8:33:d2:
b2:3b:b7:e9:2f:a6:ad:ea:11:fa:fb:77:44:60:75:
5e:19:37:e8:3c:dc:9d:ad:71:3d:87:5b:6c:16:ab:
01:fc:fd:6f:2e:b4:0b:56:52:20:32:1b:43:3a:bb:
8b:7e:95:1e:ba:29:44:60:0d:60:4f:0a:5b:88:35:
9e:36:5d:dc:52:1f:b7:f4:27:9f:0f:de:29:f4:c4:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:61:FD:FF:47:BE:79:BD:DA:83:EA:D7:2D:23:86:1A:5F:21:F0
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.44.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:60:5d:c2:11:41:20:9e:fa:ae:12:0d:c8:b8:d2:8c:c6:30:
ed:a8:48:04:2c:5f:ce:48:94:21:9f:4f:75:99:c5:6c:ca:ce:
e4:09:cb:b4:77:8d:d7:bc:d5:43:7f:a2:a7:3f:69:58:68:d6:
29:53:b8:c0:df:a9:fc:16:fa:1f:3a:cd:be:40:1a:b9:48:df:
47:9a:53:63:d9:26:22:fd:58:d4:6f:b1:2e:7b:19:a3:03:c3:
ae:80:9a:6c:97:b4:41:69:f6:ff:91:b9:4b:32:2d:7a:ff:84:
3f:f5:bd:3e:df:9a:50:d4:69:86:3e:cf:d2:cb:0b:b0:b2:91:
f3:fc:85:4c:a6:ac:c3:7c:2c:4d:fc:81:e2:8e:97:77:21:a5:
e4:b0:e0:dd:a0:82:ae:c7:4e:7a:b4:14:b1:d9:0d:af:3b:e0:
35:41:6a:69:77:31:a8:c8:80:df:3a:e3:9f:a7:fe:0a:d6:cc:
c4:4c:44:cd:ed:ab:2b:9e:2b:ba:9b:d4:9a:41:da:01:69:12:
cd:79:57:93:f2:2f:82:20:67:ed:0f:56:e3:32:31:b8:ed:be:
b3:a0:ab:1d:19:17:fb:73:fe:4f:c8:00:c2:64:e3:62:c3:b3:
88:58:e7:9f:9a:ee:79:3b:b5:e9:bf:ed:49:d7:95:d5:93:27:
83:be:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:33 2026 by rpki-client