
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
File: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier: D7dbL0hVkjDuz3HuH0Fpn/YO9/LOsGy9EAjzsWctv44=
Subject key identifier: CB:F0:62:8B:3F:00:6A:03:4E:7E:04:0C:5F:B7:52:18:2E:E7:EE:BB
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 3055FFA131804681B0EACAF922B0A0085CDA2E96
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
Signing time: Thu 09 Apr 2026 12:02:22 +0000
ROA not before: Thu 09 Apr 2026 11:57:22 +0000
ROA not after: Thu 08 Apr 2027 12:02:22 +0000
asID: 23694
IP address blocks: 103.66.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:55:ff:a1:31:80:46:81:b0:ea:ca:f9:22:b0:a0:08:5c:da:2e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: Apr 9 11:57:22 2026 GMT
Not After : Apr 8 12:02:22 2027 GMT
Subject: CN=CBF0628B3F006A034E7E040C5FB752182EE7EEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:75:a6:3e:94:84:ee:e5:96:8e:2b:51:0f:
e5:e6:4e:f9:9e:48:73:f7:27:6c:fc:24:06:4d:15:
00:13:6a:92:d0:db:69:b5:e3:3f:8b:9a:d5:10:12:
cb:5e:7d:16:57:75:ff:19:2f:9a:a3:9a:9c:0e:0b:
22:b4:d6:5e:4b:5b:b2:78:a9:8e:f5:3a:00:7a:04:
d4:f9:3a:5e:bb:ee:96:1d:22:fa:13:85:e6:2e:58:
2f:c1:6c:59:15:a8:b6:7f:ae:3b:f1:e6:97:4e:c8:
86:1a:85:99:8a:1d:46:6b:cc:16:72:2e:76:dc:7b:
d6:88:30:d5:cf:f9:89:28:2e:ce:c3:8c:4c:80:35:
0d:39:17:73:d2:f3:70:0c:7e:bf:a6:85:30:8d:02:
28:ae:f2:0e:82:f7:b0:c2:b3:33:51:58:a6:b3:54:
ed:c5:a9:df:e7:de:ed:d9:b6:be:2f:e8:84:cd:6f:
ba:a6:a7:02:22:d4:1e:4f:ac:74:f4:f8:19:87:ad:
65:fa:26:ab:67:24:d8:ae:ee:f9:71:cf:80:50:fe:
e1:99:f0:f5:c4:58:22:69:7e:2c:8f:76:fd:79:9c:
85:50:25:c5:1b:c3:c1:06:f3:e3:82:b4:ba:f7:26:
f7:6c:41:f5:28:ca:c2:8e:45:b9:5e:2d:d4:a9:df:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:62:8B:3F:00:6A:03:4E:7E:04:0C:5F:B7:52:18:2E:E7:EE:BB
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.46.0/23
Signature Algorithm: sha256WithRSAEncryption
71:9d:e5:d8:17:c1:7c:a5:dc:fa:17:a0:ec:be:49:f6:c4:df:
70:ee:c3:17:cb:06:2e:77:58:66:3c:55:31:1a:64:35:73:3a:
1c:e5:91:69:3e:68:08:26:6b:03:16:9b:1b:5b:3d:f1:23:de:
d8:22:40:7d:a7:2a:ad:9d:5e:83:43:e0:6d:42:09:81:bd:cd:
c0:32:e9:51:a2:8e:91:9b:9b:50:ae:5f:54:7f:fb:39:5a:e4:
d0:4a:60:6d:3e:17:b3:c5:64:8c:fc:0d:45:3b:b0:3d:9c:60:
ae:8a:14:fe:67:1e:4f:72:f7:2a:e0:79:07:a6:7b:6e:6e:59:
fa:a1:c7:ac:e0:2f:7b:96:5c:e9:f0:82:c3:e7:b8:81:ca:d6:
c5:bd:ec:3e:1f:af:7c:54:b9:38:59:f4:b4:3e:8b:2c:dc:05:
a4:cc:be:2c:e6:04:f8:9d:ba:76:7d:a9:93:a2:d4:fc:bc:d5:
57:4c:0e:91:59:23:7b:6a:f9:1e:ea:80:9c:dc:c2:03:1c:64:
35:b0:00:56:5b:4e:26:5b:9f:21:d8:31:ee:b6:29:0d:36:e9:
b8:7a:0e:5b:49:3b:12:da:55:ea:15:26:85:3e:39:c0:ff:e0:
c1:d5:87:a7:9d:8b:40:84:cc:9c:6f:6e:20:89:03:8d:20:51:
65:84:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:30 2026 by rpki-client