
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
File: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (raw, json)
Hash identifier: +aaeTzESf46hiW4iCKWdgpmCd8nyx/eyhjM3ENRIOGY=
Subject key identifier: 7E:7C:AC:31:78:89:D6:3E:8A:4B:68:1C:CC:EE:49:A6:DE:A2:FA:64
Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial: 19A51CDEBEE99FEEADBBC037A66F62E1CE8457B4
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
Signing time: Tue 03 Feb 2026 15:36:49 +0000
ROA not before: Tue 03 Feb 2026 15:31:49 +0000
ROA not after: Tue 02 Feb 2027 15:36:49 +0000
asID: 137334
IP address blocks: 103.112.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a5:1c:de:be:e9:9f:ee:ad:bb:c0:37:a6:6f:62:e1:ce:84:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Validity
Not Before: Feb 3 15:31:49 2026 GMT
Not After : Feb 2 15:36:49 2027 GMT
Subject: CN=7E7CAC317889D63E8A4B681CCCEE49A6DEA2FA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:92:2a:9c:46:c7:82:65:b3:b2:05:11:a8:
dc:80:48:86:be:36:f2:3b:fb:4f:75:14:65:56:1a:
16:eb:1d:ec:9f:21:98:38:7d:86:c3:6f:61:91:3b:
aa:56:67:7b:c8:41:0b:d3:48:bf:ba:44:e4:ad:65:
77:d6:28:0b:7f:c9:a9:42:c8:da:80:11:85:67:dc:
52:5c:7b:86:ef:86:28:3b:05:86:de:a4:45:c0:11:
21:ae:40:77:88:f7:38:49:41:c6:c8:6d:fc:a1:11:
d7:1d:88:8e:a0:8e:88:cb:b1:30:75:87:01:00:9e:
a4:00:f0:57:16:9b:c7:e8:92:6e:d4:66:b6:50:80:
1f:b6:6d:16:66:c8:c8:bb:4d:6f:9c:d6:1b:0a:c8:
88:48:3e:17:ea:09:9b:c3:a9:ac:4f:37:28:07:4c:
77:50:b3:e7:dd:6b:e1:e1:47:03:82:94:49:cc:8c:
a9:f3:21:5d:3f:05:87:68:71:43:23:2c:9e:c6:b9:
d1:39:9b:84:89:8b:b0:17:5a:ee:b9:48:a0:88:c5:
97:33:d4:2f:03:89:65:4d:94:ab:50:aa:c0:6a:27:
63:d1:a1:d6:b3:53:86:a8:4a:d6:1f:c5:e4:46:b0:
e2:ae:d3:e4:7c:3a:a9:ee:f9:3e:be:ba:20:bd:50:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:AC:31:78:89:D6:3E:8A:4B:68:1C:CC:EE:49:A6:DE:A2:FA:64
X509v3 Authority Key Identifier:
keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.144.0/23
Signature Algorithm: sha256WithRSAEncryption
42:4c:0d:dc:68:ab:60:d1:d2:dd:50:fb:e1:32:2c:5b:a1:12:
57:ed:44:0b:04:7f:c2:10:68:ea:e4:b5:2c:9d:f5:6e:d9:80:
52:aa:87:06:7f:22:2d:82:b5:83:83:84:14:09:65:f3:72:6a:
c4:3e:c1:38:d8:60:c2:b4:b4:fd:26:70:90:d1:89:dc:b1:36:
b2:75:6c:b5:17:6f:31:ef:81:9a:f5:3f:b9:0c:08:e8:bb:69:
a6:9b:5e:32:69:a2:12:36:90:07:62:1b:45:56:17:f7:ff:58:
fb:c6:f3:6b:1e:06:38:00:e9:a0:08:a9:ae:d5:50:f6:eb:b6:
7e:d7:d8:99:cf:0d:18:d7:08:05:e5:48:84:d4:bf:1c:5a:b6:
4e:c2:6f:79:55:fd:ed:c1:4e:7f:07:10:28:7a:bc:ac:1e:f2:
fe:ec:b4:9b:fa:1e:39:98:2e:62:cb:91:84:4e:32:a6:fa:9a:
07:cd:6b:cc:b5:8d:b8:8e:60:0c:84:7d:1e:49:32:8c:40:18:
cf:37:18:60:36:d4:b4:3b:56:5b:fb:4e:09:24:2a:ef:5b:83:
17:05:53:40:7d:77:9f:a8:1d:e7:ba:f7:ec:32:92:76:5c:17:
90:7f:ef:81:b6:8e:c6:47:dd:98:36:a4:28:89:e0:ce:47:c4:
d3:6f:78:8a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGaUc3r7pn+6tu8A3pm9i4c6EV7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC
MkM5ODEzQzAeFw0yNjAyMDMxNTMxNDlaFw0yNzAyMDIxNTM2NDlaMDMxMTAvBgNV
BAMTKDdFN0NBQzMxNzg4OUQ2M0U4QTRCNjgxQ0NDRUU0OUE2REVBMkZBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoJIqnEbHgmWzsgURqNyASIa+
NvI7+091FGVWGhbrHeyfIZg4fYbDb2GRO6pWZ3vIQQvTSL+6ROStZXfWKAt/yalC
yNqAEYVn3FJce4bvhig7BYbepEXAESGuQHeI9zhJQcbIbfyhEdcdiI6gjojLsTB1
hwEAnqQA8FcWm8fokm7UZrZQgB+2bRZmyMi7TW+c1hsKyIhIPhfqCZvDqaxPNygH
THdQs+fda+HhRwOClEnMjKnzIV0/BYdocUMjLJ7GudE5m4SJi7AXWu65SKCIxZcz
1C8DiWVNlKtQqsBqJ2PRodazU4aoStYfxeRGsOKu0+R8Oqnu+T6+uiC9UGWtAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfnysMXiJ1j6KS2gczO5Jpt6i+mQwHwYDVR0j
BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew
QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5
ODEzQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIzLTkzN2QtNDMwNC05
MTY3LTQ2M2Q3YzU4ZDVlNC8wLzMxMzAzMzJlMzEzMTMyMmUzMTM0MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFncJAwDQYJ
KoZIhvcNAQELBQADggEBAEJMDdxoq2DR0t1Q++EyLFuhElftRAsEf8IQaOrktSyd
9W7ZgFKqhwZ/Ii2CtYODhBQJZfNyasQ+wTjYYMK0tP0mcJDRidyxNrJ1bLUXbzHv
gZr1P7kMCOi7aaabXjJpohI2kAdiG0VWF/f/WPvG82seBjgA6aAIqa7VUPbrtn7X
2JnPDRjXCAXlSITUvxxatk7Cb3lV/e3BTn8HECh6vKwe8v7stJv6HjmYLmLLkYRO
Mqb6mgfNa8y1jbiOYAyEfR5JMoxAGM83GGA21LQ7Vlv7TgkkKu9bgxcFU0B9d5+o
Hee69+wyknZcF5B/74G2jsZH3Zg2pCiJ4M5HxNNveIo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:55 2026 by rpki-client