
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
File: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier: kzVXOwazXJFN9fzfC6sWgiDyHm81pDht76pr6WC1zJY=
Subject key identifier: 01:0C:A5:45:3F:5F:EA:5C:E4:A8:B9:47:43:D6:6F:49:8E:2B:C6:CD
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 04E718375E4CCBB9D7F0E2F698C1236D93D88E32
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
Signing time: Thu 09 Apr 2026 13:00:01 +0000
ROA not before: Thu 09 Apr 2026 12:55:01 +0000
ROA not after: Thu 08 Apr 2027 13:00:01 +0000
asID: 23694
IP address blocks: 103.66.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e7:18:37:5e:4c:cb:b9:d7:f0:e2:f6:98:c1:23:6d:93:d8:8e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: Apr 9 12:55:01 2026 GMT
Not After : Apr 8 13:00:01 2027 GMT
Subject: CN=010CA5453F5FEA5CE4A8B94743D66F498E2BC6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:5d:a9:2d:21:4b:22:1f:7d:5d:9d:26:d8:
1b:da:1b:b4:d9:49:c0:22:53:03:17:0f:bd:54:94:
f3:69:44:58:2c:1c:d4:84:10:bc:a1:34:64:5b:cd:
02:e9:6c:90:7e:40:ef:39:20:15:0d:15:d0:c5:13:
b2:57:b6:b3:b8:cf:e5:d8:f1:2c:b5:51:c0:75:ed:
16:a7:7a:af:2e:52:d0:08:cf:0f:82:09:28:09:96:
f9:42:f8:ad:09:fe:a4:09:5e:c1:77:50:9e:0a:0a:
b1:41:15:c9:87:13:22:bf:c2:9d:80:b7:7e:1a:1f:
66:90:65:9c:83:23:50:da:04:56:2c:7f:8a:b4:e0:
19:15:70:a8:3d:bb:57:50:93:91:86:23:a3:4b:de:
28:e5:2e:bd:eb:e8:93:92:51:32:a2:50:f2:8e:35:
36:b2:47:45:f0:d9:35:2f:60:e0:ee:5d:02:56:f3:
8f:f9:56:b3:6d:bd:18:eb:6c:f7:8e:a5:92:c5:d1:
08:9f:3a:d5:d2:83:c3:20:23:51:9b:29:b5:72:df:
80:1d:3d:82:46:3f:c6:e7:ed:1a:f7:5b:01:d0:b2:
33:fe:5b:1e:c7:8e:4b:04:32:79:11:f3:bc:ad:71:
19:70:69:44:84:15:90:1b:ce:8e:23:ae:6e:32:ee:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:A5:45:3F:5F:EA:5C:E4:A8:B9:47:43:D6:6F:49:8E:2B:C6:CD
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d9:56:35:99:75:9e:ca:95:e8:43:84:6a:24:92:ee:36:e2:
5f:a7:17:6c:c1:90:59:18:9f:8e:35:11:3f:1c:c5:cc:b1:89:
c0:6a:bc:f0:83:96:25:52:31:d9:e1:e8:ca:ef:42:31:45:1c:
11:75:7d:c8:a4:34:ca:28:1f:da:e2:89:91:8d:68:f7:c9:94:
ff:62:f0:1a:ba:54:04:de:85:39:63:86:4e:fd:e3:a0:b1:24:
64:99:24:bf:60:77:46:5a:1e:31:2f:fa:bd:54:b2:78:23:3f:
8f:b8:c2:6d:14:51:9e:48:42:3f:5b:fd:e4:b5:e1:cd:58:71:
39:55:10:a6:34:8a:fe:49:7e:cc:09:f2:52:44:58:95:23:8c:
fa:d9:f4:e9:a0:22:77:9e:e1:86:e3:4d:07:e9:60:c1:5d:ec:
e7:48:32:88:9b:85:9c:5f:f9:55:c7:d1:06:5b:c7:a9:3c:52:
b6:d3:f0:99:d3:a1:65:4d:b7:49:07:6c:e6:47:29:bc:32:b9:
45:22:f5:fd:f2:bc:ac:14:e9:a1:02:83:ed:f7:a4:d8:30:e8:
96:53:b4:45:20:87:c5:0a:cf:b8:6c:93:e4:83:50:a5:0d:df:
a4:12:9a:1b:82:9b:19:3c:ad:f1:a2:b6:58:e0:05:59:2f:70:
15:b8:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:23 2026 by rpki-client