
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa
File: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier: aCnss5loM4VF9YE2hmuJEeS2rIj4fuqVES0ROYO+Lig=
Subject key identifier: 21:44:CD:61:D4:1E:66:C9:19:8B:2B:0A:2A:24:FC:57:B7:69:F5:E5
Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial: 0579B18767EDF628CAB35455D4353988C6969BBC
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa
Signing time: Thu 09 Apr 2026 05:02:47 +0000
ROA not before: Thu 09 Apr 2026 04:57:47 +0000
ROA not after: Thu 08 Apr 2027 05:02:47 +0000
asID: 141126
IP address blocks: 103.172.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:79:b1:87:67:ed:f6:28:ca:b3:54:55:d4:35:39:88:c6:96:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Validity
Not Before: Apr 9 04:57:47 2026 GMT
Not After : Apr 8 05:02:47 2027 GMT
Subject: CN=2144CD61D41E66C9198B2B0A2A24FC57B769F5E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:fb:21:a8:99:eb:12:d1:0d:5a:b5:eb:61:
95:e8:7d:88:ec:ec:24:7c:29:2d:7c:6f:5c:dd:c7:
c2:fa:86:fe:02:93:4b:d5:49:7c:a5:ca:40:a3:9d:
9a:bb:be:0c:30:0a:3e:17:8b:31:e2:92:f0:16:6a:
e6:28:61:f7:3f:0b:87:e8:5c:1a:58:78:6a:46:3f:
ee:4f:ca:27:44:94:31:e4:3e:0d:97:05:82:de:41:
a9:a9:47:ed:65:df:27:bb:2e:d3:6a:18:5c:d7:5c:
63:2b:0d:24:56:b7:c4:11:84:14:dd:a3:12:d3:f0:
02:60:1a:7b:b3:6b:ba:34:45:51:8b:0f:05:87:c8:
58:47:97:91:3f:b3:9c:1e:6d:64:61:b4:e4:f4:c7:
8f:a6:d4:7c:de:05:34:5b:be:e5:df:4e:c8:cd:8a:
cd:06:2a:f1:dc:36:86:59:14:66:ae:70:2f:dc:0f:
38:eb:e6:18:67:4f:72:29:35:93:bd:a7:a1:af:8e:
46:b3:cc:0e:11:83:20:3a:98:47:f0:7a:87:75:63:
78:7a:26:4e:bc:9c:e0:39:2a:5e:05:aa:0b:e8:07:
69:1b:23:8a:05:58:ef:89:62:7a:cc:fd:73:4e:7c:
b8:d2:5f:04:5c:91:32:67:96:e4:5e:10:10:68:80:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:CD:61:D4:1E:66:C9:19:8B:2B:0A:2A:24:FC:57:B7:69:F5:E5
X509v3 Authority Key Identifier:
keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:91:32:35:e0:ea:70:67:1c:7a:61:21:32:a9:22:c3:3e:8c:
9c:2d:00:3d:d8:36:20:8d:b6:56:a2:7d:40:96:d2:e0:6f:fd:
35:4d:59:e4:01:49:3d:b8:8a:f2:73:3d:85:5a:3c:40:eb:e8:
60:27:7e:d8:20:c4:6d:20:60:de:81:e4:29:16:a7:e8:03:de:
1d:e9:de:0b:3b:22:db:d0:d7:3c:0d:35:81:c0:13:9c:88:da:
d8:77:a9:62:40:d4:f7:36:ae:d0:98:f2:f6:16:4a:e9:0e:43:
19:ff:6e:7a:11:7f:83:b8:31:2c:51:66:20:77:8c:7b:f2:93:
bf:f7:ee:fe:ca:9c:8b:54:26:c2:05:3d:d8:72:20:a3:40:cb:
31:6f:81:74:43:66:9d:40:22:41:8a:4e:ac:88:5c:4d:83:e3:
03:da:5e:4d:c3:2f:b5:5d:82:76:eb:06:3f:f8:3e:42:ce:85:
1c:79:16:96:6e:df:62:31:a5:01:c0:7c:07:97:58:3c:9a:40:
11:0a:f1:9c:fe:64:01:3d:a8:a0:41:a3:3e:b9:1b:fe:23:be:
80:63:6b:e7:53:e3:bf:b6:02:15:0c:76:73:7b:18:a0:47:96:
d3:3f:fe:03:65:63:f5:e9:a5:b3:98:57:9c:14:32:20:3e:cb:
13:d5:ec:77
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBXmxh2ft9ijKs1RV1DU5iMaWm7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0
RkNGOUZDRTAeFw0yNjA0MDkwNDU3NDdaFw0yNzA0MDgwNTAyNDdaMDMxMTAvBgNV
BAMTKDIxNDRDRDYxRDQxRTY2QzkxOThCMkIwQTJBMjRGQzU3Qjc2OUY1RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LPshqJnrEtENWrXrYZXofYjs
7CR8KS18b1zdx8L6hv4Ck0vVSXylykCjnZq7vgwwCj4XizHikvAWauYoYfc/C4fo
XBpYeGpGP+5PyidElDHkPg2XBYLeQampR+1l3ye7LtNqGFzXXGMrDSRWt8QRhBTd
oxLT8AJgGnuza7o0RVGLDwWHyFhHl5E/s5webWRhtOT0x4+m1HzeBTRbvuXfTsjN
is0GKvHcNoZZFGaucC/cDzjr5hhnT3IpNZO9p6GvjkazzA4RgyA6mEfweod1Y3h6
Jk68nOA5Kl4FqgvoB2kbI4oFWO+JYnrM/XNOfLjSXwRckTJnluReEBBogDOFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUIUTNYdQeZskZiysKKiT8V7dp9eUwHwYDVR0j
BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD
NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG
OUZDRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNTIyNGM2LTMzNGQtNGYzZC05
ODM3LTFiYWNjYTVhMDIyYi8wLzMxMzAzMzJlMzEzNzMyMmUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGesADANBgkqhkiG
9w0BAQsFAAOCAQEAEpEyNeDqcGccemEhMqkiwz6MnC0APdg2II22VqJ9QJbS4G/9
NU1Z5AFJPbiK8nM9hVo8QOvoYCd+2CDEbSBg3oHkKRan6APeHeneCzsi29DXPA01
gcATnIja2HepYkDU9zau0Jjy9hZK6Q5DGf9uehF/g7gxLFFmIHeMe/KTv/fu/sqc
i1QmwgU92HIgo0DLMW+BdENmnUAiQYpOrIhcTYPjA9peTcMvtV2CdusGP/g+Qs6F
HHkWlm7fYjGlAcB8B5dYPJpAEQrxnP5kAT2ooEGjPrkb/iO+gGNr51Pjv7YCFQx2
c3sYoEeW0z/+A2Vj9emls5hXnBQyID7LE9Xsdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:37 2026 by rpki-client