
$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
File: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier: AevEhKshEQeFKNgoJ4MfmjtnuZlVYICKC2fhDAgNA8s=
Subject key identifier: 88:91:44:AB:08:6F:96:29:75:43:5C:12:5D:9A:6A:EE:BE:D5:72:7E
Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial: 46BEB85B1A6BC3F0D9ED4D141AE8881118596CC0
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
Signing time: Mon 02 Feb 2026 10:00:44 +0000
ROA not before: Mon 02 Feb 2026 09:55:44 +0000
ROA not after: Mon 01 Feb 2027 10:00:44 +0000
asID: 138129
IP address blocks: 103.132.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 17:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:be:b8:5b:1a:6b:c3:f0:d9:ed:4d:14:1a:e8:88:11:18:59:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Validity
Not Before: Feb 2 09:55:44 2026 GMT
Not After : Feb 1 10:00:44 2027 GMT
Subject: CN=889144AB086F962975435C125D9A6AEEBED5727E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:ef:0d:fe:49:e5:6c:8b:ea:e0:da:29:a4:
a2:13:31:66:33:cd:ca:5e:d6:3f:98:bc:26:3f:67:
c4:df:7d:9c:cd:74:26:7d:b9:1f:35:11:d4:c3:1b:
4c:01:91:0d:68:32:3a:5a:ce:24:06:64:9e:07:aa:
86:07:07:76:07:f9:e3:c5:89:29:e8:8b:94:e4:3a:
68:38:27:12:88:fb:b8:73:f1:bb:13:ff:26:1b:c4:
43:79:8b:8f:64:82:e7:2b:a2:3b:43:b0:67:3b:b2:
b7:71:fb:f3:55:a9:4d:df:80:43:29:52:8c:ec:50:
a8:5c:9e:ca:48:11:cd:a8:bd:74:39:28:5a:d0:fc:
36:5e:15:5d:6e:a2:a9:29:91:09:bb:e9:fb:12:51:
ae:3f:e1:1a:cb:5e:72:bf:02:ae:cb:d9:5d:38:10:
b0:6e:25:68:f0:9b:db:ba:23:68:fe:04:13:9b:e9:
a8:fa:83:93:db:cb:68:4f:ec:eb:52:54:ad:d1:31:
73:fe:75:d2:5c:6f:f4:6b:e8:19:07:e2:a7:e0:40:
6c:67:a4:81:83:30:e9:fd:18:16:98:08:7d:d6:96:
42:70:6a:23:43:1f:d9:a6:89:9f:b0:7a:4a:dc:58:
35:aa:ec:c4:20:d2:4b:5a:ea:3d:48:cc:c3:99:4a:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:44:AB:08:6F:96:29:75:43:5C:12:5D:9A:6A:EE:BE:D5:72:7E
X509v3 Authority Key Identifier:
keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6a:0c:0e:21:11:05:f0:a8:80:97:d4:85:c8:7e:b2:69:57:
7c:75:d4:a9:d1:06:9a:8b:f9:b1:29:cf:f1:80:12:f1:87:d8:
53:9e:a1:ba:8b:42:04:ad:fc:54:c8:63:47:0b:14:9d:85:74:
72:33:7c:0f:3b:de:43:8c:23:ce:67:20:41:3b:e9:96:c5:45:
04:f8:75:ec:dd:78:08:43:11:ae:15:d1:6b:3b:b9:59:07:68:
0d:2d:15:50:26:19:e8:93:a4:86:ab:d2:11:f5:f7:a8:90:9b:
37:2b:ad:3f:a4:a5:5c:cb:fb:7d:0a:2d:33:57:eb:1c:27:e9:
72:4b:f7:63:c8:80:d3:f6:05:15:b8:3d:81:cb:51:24:33:39:
17:f6:70:17:1a:c1:8a:48:ce:d1:61:dc:0e:94:07:cd:d4:b2:
15:71:68:bd:e3:0b:4d:36:5e:31:1b:9c:06:dc:15:90:06:fd:
21:1c:6c:3a:7b:e4:2a:31:38:e6:56:2b:de:ec:8e:25:e8:42:
8e:98:4b:af:c9:a5:10:46:91:1c:24:64:76:ac:f8:dc:33:18:
72:72:e2:4a:a7:27:fb:0a:10:90:c4:ce:5e:48:38:f2:aa:68:
c9:9a:5b:89:94:30:c5:e3:d2:44:25:99:86:66:01:ad:32:b0:
dc:c6:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:58:03 2026 by rpki-client