
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32332d3233203d3e203633383237.roa
File: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (raw, json)
Hash identifier: /MRMfiUThW9lIqFQqwoyGRpjuxEJIvMy57nFzNfDNLg=
Subject key identifier: F8:C2:A2:79:F5:23:16:9B:99:DA:F7:14:06:A8:B4:40:FB:55:A4:19
Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial: 5A85D7CB923DE03E11D353500BC49281C9DEDF15
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32332d3233203d3e203633383237.roa
Signing time: Wed 08 Apr 2026 13:25:12 +0000
ROA not before: Wed 08 Apr 2026 13:20:12 +0000
ROA not after: Wed 07 Apr 2027 13:25:12 +0000
asID: 63827
IP address blocks: 103.39.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 09:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:85:d7:cb:92:3d:e0:3e:11:d3:53:50:0b:c4:92:81:c9:de:df:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Validity
Not Before: Apr 8 13:20:12 2026 GMT
Not After : Apr 7 13:25:12 2027 GMT
Subject: CN=F8C2A279F523169B99DAF71406A8B440FB55A419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fe:76:9f:0e:e1:e9:4e:52:f8:31:06:64:0d:
19:7b:1a:34:15:ab:45:4a:c4:f7:e3:15:08:74:15:
c1:1f:d3:d6:a9:be:38:6b:a4:a6:b4:d0:27:80:5a:
d5:87:16:5e:32:92:4e:6e:7c:f2:bb:fb:87:fe:a1:
b8:bd:e0:c5:7a:46:05:e1:6b:a2:3d:6d:e2:9b:a3:
e1:cb:17:61:b2:a0:e3:49:9d:35:d7:64:46:3c:de:
ee:2e:0e:8f:2e:97:32:10:af:fe:25:ab:46:36:f2:
66:f7:f7:53:f7:49:0b:6a:1f:1e:20:d7:89:05:d5:
40:b6:92:4c:90:cf:f8:73:ad:d2:42:6c:3a:de:18:
c1:86:df:32:43:29:e9:f1:08:53:09:80:65:eb:6f:
4c:be:d9:d2:df:da:bb:71:7e:96:f7:43:cc:5c:34:
c1:a0:4e:f9:c0:8b:c2:ac:06:55:cd:53:78:ab:48:
5e:6a:35:07:41:a5:14:70:7d:2a:e8:93:ef:89:c9:
dc:3a:fa:d9:17:0a:84:26:af:d2:dc:9a:fd:68:01:
1e:f1:97:80:a6:ef:a8:80:19:b2:ba:10:e8:79:ff:
46:57:2c:54:7d:4f:d1:82:e1:84:64:51:cf:0b:27:
bd:2f:05:00:11:47:6a:f3:a3:ec:b8:0a:c9:cb:8b:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:A2:79:F5:23:16:9B:99:DA:F7:14:06:A8:B4:40:FB:55:A4:19
X509v3 Authority Key Identifier:
keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32332d3233203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.14.0/23
Signature Algorithm: sha256WithRSAEncryption
53:52:d1:36:a5:76:14:8b:b7:f6:bb:9f:5d:e9:d0:35:3c:ba:
94:0e:af:69:4c:7a:1e:e3:db:74:a4:47:f7:48:51:5e:4a:a7:
bf:ee:2d:4c:98:12:fb:70:ac:2c:92:3a:f9:23:51:89:49:63:
29:f5:94:9b:98:eb:52:55:25:38:bf:e8:03:31:0a:fe:ee:d0:
26:67:c6:af:2c:d4:dc:85:23:f5:96:72:4d:4b:17:bd:b5:43:
94:46:49:ab:8d:fb:be:b5:fa:f5:e3:ee:6d:5c:5e:d1:43:63:
e9:6e:80:27:26:4e:77:56:13:3d:7e:dc:ca:76:e2:18:4a:f7:
2b:71:20:46:17:83:8a:71:8f:39:90:ff:d8:d1:fc:54:33:35:
da:91:de:98:22:cd:ad:21:9b:0d:f5:ae:8a:17:4e:21:56:7e:
37:9d:22:5d:e8:aa:a4:c1:60:1e:ca:06:38:88:49:6f:21:90:
90:d5:f7:c7:e9:b4:7f:43:58:9c:7c:ea:3c:24:ab:d0:f9:07:
5f:31:00:e8:f3:31:05:34:03:65:e8:c3:cc:80:1c:e9:33:96:
e9:46:e2:fa:7a:1e:a2:e5:cc:e3:29:8d:18:c0:01:53:2a:8d:
c0:5b:f8:86:22:4b:0f:d7:2b:31:c9:54:b8:f9:d2:c7:f0:9b:
07:54:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:35 2026 by rpki-client