
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
File: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier: k1S7F23R8eG1LRhjTB3+I4onoSj++9fna5xIs5SQKrk=
Subject key identifier: F2:7E:D6:E2:84:23:7E:F1:25:0C:89:65:77:4D:97:8A:31:37:EA:57
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 604EA420BED3DA2DCA7825BD6141A03019AE4DDE
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
Signing time: Thu 09 Apr 2026 11:00:02 +0000
ROA not before: Thu 09 Apr 2026 10:55:02 +0000
ROA not after: Thu 08 Apr 2027 11:00:02 +0000
asID: 23694
IP address blocks: 103.66.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4e:a4:20:be:d3:da:2d:ca:78:25:bd:61:41:a0:30:19:ae:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: Apr 9 10:55:02 2026 GMT
Not After : Apr 8 11:00:02 2027 GMT
Subject: CN=F27ED6E284237EF1250C8965774D978A3137EA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:46:27:0d:3a:51:2c:67:f8:01:65:16:29:
54:3b:97:a3:d0:b9:f0:49:5e:2d:12:32:da:96:1c:
7b:29:15:11:e3:ea:a9:16:a2:cc:6c:45:8c:c1:4d:
e7:6d:28:78:9f:ca:4a:9f:a8:3a:9e:54:56:d3:14:
ad:a1:db:1f:a8:cf:5a:32:ba:8a:d7:23:30:8b:82:
f8:c5:87:37:89:dd:45:b6:82:c2:52:59:60:6a:67:
af:97:b3:15:7a:2d:63:5a:53:b8:bc:05:be:3e:13:
48:2b:ac:fc:f4:4c:35:f5:35:62:2a:2d:e0:e5:c0:
86:26:56:79:ec:57:a2:e8:27:1f:b9:e8:84:f7:98:
13:be:75:55:c2:18:38:31:88:d0:d6:d9:c8:7f:90:
a7:02:66:1c:10:1b:98:d2:40:1c:7f:f2:57:bf:aa:
f6:70:0b:e3:ad:76:d6:b3:cc:c3:1c:da:2d:f9:05:
91:3b:41:f8:02:d7:8a:e3:18:ac:38:bf:52:4f:43:
4b:3f:be:89:b4:a6:a6:ea:7c:28:5f:cb:02:78:aa:
a4:7e:0e:d1:f5:b5:6c:b0:af:6b:83:c0:13:43:f8:
d9:b5:ac:2a:ee:50:47:c7:68:8c:d4:b3:c8:10:03:
2a:46:32:87:54:94:5c:e3:32:0d:35:8a:e9:89:34:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:D6:E2:84:23:7E:F1:25:0C:89:65:77:4D:97:8A:31:37:EA:57
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.46.0/24
Signature Algorithm: sha256WithRSAEncryption
db:73:22:62:92:48:7c:10:c7:73:5c:24:e4:44:8e:c1:35:49:
29:d8:2e:8b:a6:b5:d5:e4:7b:a8:ea:15:d1:62:c6:b6:17:b5:
81:ed:c4:58:37:75:32:58:50:4d:ff:22:f4:ec:54:67:7d:de:
01:69:a6:30:d2:85:2e:2c:09:76:cf:d9:d9:17:47:e0:7d:4d:
30:01:c2:f9:c8:28:dc:7a:ed:bd:c7:76:fc:ac:72:e0:9f:34:
96:07:9e:5c:0a:d6:85:41:f6:a5:03:62:ee:87:a7:b3:8d:b7:
be:0c:c4:f4:e6:1a:fe:25:22:92:8f:99:00:8c:08:98:6e:be:
ca:32:33:1a:e9:50:5f:1a:23:00:da:db:07:d3:57:96:32:53:
dd:99:62:24:0e:d3:48:71:f4:2f:72:a5:c3:44:16:4f:17:73:
b3:38:19:a7:41:77:07:b1:e1:6a:f2:15:df:45:ed:d4:29:a3:
ce:bc:b5:59:4b:bd:64:71:0b:04:9c:00:78:f0:03:f1:19:d9:
92:47:67:18:15:1a:e5:1e:e6:47:59:0a:b3:09:0e:94:ed:ad:
4f:9c:ee:39:61:31:dd:d9:ae:f0:f1:b7:ec:35:5b:d4:31:f9:
d5:72:fc:81:1f:bf:f0:7b:3e:f7:ca:43:d3:ec:5c:67:2e:34:
c5:2b:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:16 2026 by rpki-client