
$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
File: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json)
Hash identifier: 6TKkLJ/vA8ZX1xyW1i7zZdkDISa15oqAT2rL7tkJxYE=
Subject key identifier: A3:6D:9F:90:65:01:58:47:25:93:26:90:49:9E:EB:7C:BD:2F:BA:F0
Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial: 6EEFF9E5C97571E09732A9657B39A953A036D91F
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
Signing time: Wed 18 Feb 2026 11:02:30 +0000
ROA not before: Wed 18 Feb 2026 10:57:30 +0000
ROA not after: Wed 17 Feb 2027 11:02:30 +0000
asID: 135455
IP address blocks: 103.68.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ef:f9:e5:c9:75:71:e0:97:32:a9:65:7b:39:a9:53:a0:36:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Validity
Not Before: Feb 18 10:57:30 2026 GMT
Not After : Feb 17 11:02:30 2027 GMT
Subject: CN=A36D9F906501584725932690499EEB7CBD2FBAF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:7a:a0:e3:6d:f8:51:b8:4e:1d:c9:fe:b4:
36:29:f8:e0:41:5c:f2:59:01:ea:a1:2f:59:46:cd:
2f:3f:c2:b3:ad:31:b2:59:dd:69:2f:e5:9c:35:39:
9c:8f:31:c0:67:d7:1e:00:15:79:d4:93:a5:21:9c:
4b:e7:99:92:53:af:3d:ce:03:64:31:cd:c6:3e:43:
d5:28:62:53:c8:5a:e6:20:e2:cb:7c:a9:43:a9:e1:
45:cb:d7:b2:01:c5:00:99:0c:c7:59:93:33:a9:39:
fd:c1:5a:e7:5f:00:35:05:58:23:38:42:6e:9e:ab:
06:d0:3f:8b:40:ef:0b:e7:14:90:7b:c9:90:f3:76:
72:e8:b4:70:66:8f:be:42:9d:83:f1:09:8b:a1:e4:
5a:20:4c:e3:6a:e3:97:e8:1c:c2:75:eb:af:9e:1c:
d2:9d:ee:fb:90:8c:63:16:7d:a5:ce:85:ab:f6:5a:
7c:16:94:08:9c:d8:26:8d:97:52:8c:69:41:b1:1d:
00:e4:3b:d0:e2:85:55:34:22:5e:17:81:7d:45:91:
34:5a:71:78:bc:09:1a:69:a1:03:5d:d3:a3:f3:99:
e9:0f:46:b2:71:03:ce:36:b8:39:66:12:29:6a:e8:
d4:60:89:90:da:1d:dc:65:bd:12:7c:45:49:90:b0:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:9F:90:65:01:58:47:25:93:26:90:49:9E:EB:7C:BD:2F:BA:F0
X509v3 Authority Key Identifier:
keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.136.0/24
Signature Algorithm: sha256WithRSAEncryption
30:01:dd:37:53:be:fc:e0:0a:95:d1:1c:8a:a5:78:08:71:03:
de:6e:2e:f3:fc:f0:59:75:b1:f2:81:be:52:c6:26:c6:a6:27:
93:75:c3:99:e0:2a:4b:29:e8:80:92:65:fc:39:70:eb:4b:29:
4e:fc:7b:88:41:ae:67:62:95:d4:28:f9:47:fb:5e:cb:e7:37:
61:46:00:8f:3d:0c:1a:e5:2b:19:2a:18:58:ef:e1:4f:05:f6:
2d:1a:28:47:16:f1:09:75:f1:8c:ce:bf:89:95:d4:98:9d:c5:
14:f0:83:2c:9b:e9:de:a4:f8:9c:cb:b2:ab:04:3a:85:f4:54:
54:b5:a4:80:a2:52:e0:cd:bb:c5:39:d0:86:4d:ee:c4:5b:b5:
3a:66:05:b8:cc:5d:21:d2:91:ef:41:07:9a:d3:a9:83:39:88:
12:2b:8e:95:12:00:24:da:bf:f0:ed:0f:ef:06:78:ff:e8:ec:
35:39:8b:44:8e:77:4d:39:e7:0e:b4:4e:5a:78:c0:d9:1d:eb:
b4:a7:c2:f4:59:a8:5e:ed:c6:d7:f9:1f:f2:d8:1f:66:e4:5b:
a5:8f:e2:dd:12:98:9b:e7:63:fa:ec:80:5b:eb:47:f8:85:13:
39:bd:43:64:bf:29:82:88:ae:22:e8:28:2f:2d:65:35:08:9e:
32:fc:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:30 2026 by rpki-client