
$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa
File: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (raw, json)
Hash identifier: aDCNwTx4+/wreTlDABxLCHNvMsYlGQvZ9qBNMNYjgZg=
Subject key identifier: 93:31:BC:8B:61:14:0F:40:D3:D3:D9:1C:94:AE:B1:2C:B5:55:13:FE
Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial: 034721E73D134D911FACB0DC47B637DDE35D50B6
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa
Signing time: Wed 08 Apr 2026 12:00:00 +0000
ROA not before: Wed 08 Apr 2026 11:55:00 +0000
ROA not after: Wed 07 Apr 2027 12:00:00 +0000
asID: 45287
IP address blocks: 103.31.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 05:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:47:21:e7:3d:13:4d:91:1f:ac:b0:dc:47:b6:37:dd:e3:5d:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Validity
Not Before: Apr 8 11:55:00 2026 GMT
Not After : Apr 7 12:00:00 2027 GMT
Subject: CN=9331BC8B61140F40D3D3D91C94AEB12CB55513FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:50:60:b2:c4:51:03:f2:4d:2d:cd:d0:9e:
e2:ef:1c:85:a0:e4:56:81:ef:3d:3c:63:56:60:bd:
7e:04:54:b4:59:e0:af:0d:5b:81:38:91:3c:81:e1:
08:72:b2:91:ab:4e:50:e6:ed:2e:be:cb:b1:52:12:
0c:94:37:12:ee:29:68:c0:fb:80:61:a7:87:c6:06:
fd:c9:e4:2f:e1:01:d0:6e:58:8b:d2:1b:78:8a:ec:
77:37:60:dc:c1:73:35:aa:74:7c:dc:02:18:54:44:
15:e6:d2:4b:7b:3d:2f:71:09:b6:e6:70:f2:e4:14:
b9:0e:0d:42:b0:9a:f3:41:97:5c:3c:7c:78:3b:ba:
36:7c:b7:51:f8:b2:a8:dd:95:f3:3d:1d:d9:e1:07:
c8:39:54:72:1c:5f:7c:d4:57:cc:46:38:e7:89:14:
d4:58:c6:88:13:9a:e3:78:96:fb:10:77:0f:10:67:
9d:c2:bd:28:bd:21:e9:7d:64:f6:90:4d:da:40:fd:
1a:e9:41:b7:11:68:c0:87:7b:0a:c5:36:e1:a7:51:
fe:5c:59:54:ff:5d:79:05:8e:d4:e7:b4:6c:24:f1:
85:58:87:8c:af:59:b2:f3:9b:1b:d8:58:94:29:49:
8c:f9:1b:6f:e1:17:67:96:8d:6d:8e:3d:c1:43:f7:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:BC:8B:61:14:0F:40:D3:D3:D9:1C:94:AE:B1:2C:B5:55:13:FE
X509v3 Authority Key Identifier:
keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:d8:1d:00:de:36:26:6f:d8:87:a9:04:3c:5f:fc:57:b8:c4:
39:41:68:1d:40:4f:5a:b9:01:e3:99:16:91:9a:97:1c:dc:07:
21:9a:a8:24:c7:b5:8b:07:29:ba:38:60:2c:d4:8d:f0:83:79:
ca:80:9b:2b:84:3f:f4:7d:5c:b8:a0:a5:72:a2:6e:05:48:b3:
1d:07:c6:66:a2:9c:c9:50:88:8e:e6:f5:33:ed:b8:55:37:65:
58:ab:5a:4c:f4:7f:1b:f1:ff:97:29:71:ea:61:13:1e:f7:3b:
b9:3c:7d:d1:fc:64:fa:de:ed:e6:8f:35:9d:4e:ed:cd:94:bf:
fc:b7:5f:a6:2e:9c:f7:56:d2:fa:01:cf:32:b8:a1:e6:0d:85:
88:bc:f2:3f:02:5f:a4:e7:14:ce:3d:af:92:03:a3:41:b4:e5:
e9:aa:4e:5b:c5:e5:64:1e:d9:e0:89:e0:8e:db:17:e5:33:07:
51:f0:c0:cb:e3:83:86:dd:ab:8d:7d:16:e5:63:0c:a5:de:f2:
b6:81:60:f0:83:a2:18:5d:6f:1c:c7:73:f4:76:39:eb:5f:d8:
d2:0c:cf:d6:12:34:d8:33:28:29:f0:08:b9:09:8d:0e:7b:cf:
85:2e:aa:24:ae:69:62:d5:49:bb:f0:e5:1b:ad:62:de:69:60:
47:a2:7b:d9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUA0ch5z0TTZEfrLDcR7Y33eNdULYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx
QkMwNkVCNzAeFw0yNjA0MDgxMTU1MDBaFw0yNzA0MDcxMjAwMDBaMDMxMTAvBgNV
BAMTKDkzMzFCQzhCNjExNDBGNDBEM0QzRDkxQzk0QUVCMTJDQjU1NTEzRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/VBgssRRA/JNLc3QnuLvHIWg
5FaB7z08Y1ZgvX4EVLRZ4K8NW4E4kTyB4QhyspGrTlDm7S6+y7FSEgyUNxLuKWjA
+4Bhp4fGBv3J5C/hAdBuWIvSG3iK7Hc3YNzBczWqdHzcAhhURBXm0kt7PS9xCbbm
cPLkFLkODUKwmvNBl1w8fHg7ujZ8t1H4sqjdlfM9HdnhB8g5VHIcX3zUV8xGOOeJ
FNRYxogTmuN4lvsQdw8QZ53CvSi9Iel9ZPaQTdpA/RrpQbcRaMCHewrFNuGnUf5c
WVT/XXkFjtTntGwk8YVYh4yvWbLzmxvYWJQpSYz5G2/hF2eWjW2OPcFD9zTpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkzG8i2EUD0DT09kclK6xLLVVE/4wHwYDVR0j
BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB
NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw
NkVCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i
MDY3LWEwYzZhODQwYTNhOS8wLzMxMzAzMzJlMzMzMTJlMzEzMTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcfbjANBgkqhkiG
9w0BAQsFAAOCAQEAL9gdAN42Jm/Yh6kEPF/8V7jEOUFoHUBPWrkB45kWkZqXHNwH
IZqoJMe1iwcpujhgLNSN8IN5yoCbK4Q/9H1cuKClcqJuBUizHQfGZqKcyVCIjub1
M+24VTdlWKtaTPR/G/H/lylx6mETHvc7uTx90fxk+t7t5o81nU7tzZS//Ldfpi6c
91bS+gHPMrih5g2FiLzyPwJfpOcUzj2vkgOjQbTl6apOW8XlZB7Z4IngjtsX5TMH
UfDAy+ODht2rjX0W5WMMpd7ytoFg8IOiGF1vHMdz9HY561/Y0gzP1hI02DMoKfAI
uQmNDnvPhS6qJK5pYtVJu/DlG61i3mlgR6J72Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:45 2026 by rpki-client