
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
File: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier: SGbZgR5zdidNXqFT4GAo8fw40HlS/8e91X/VI1zIojY=
Subject key identifier: D2:D5:6A:92:17:01:1D:F4:14:C7:7A:5B:5B:94:0C:31:69:61:C2:89
Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial: 6E8B75E26330D9F8422321BC365496B827BD688B
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
Signing time: Thu 09 Apr 2026 05:02:47 +0000
ROA not before: Thu 09 Apr 2026 04:57:47 +0000
ROA not after: Thu 08 Apr 2027 05:02:47 +0000
asID: 141126
IP address blocks: 103.172.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8b:75:e2:63:30:d9:f8:42:23:21:bc:36:54:96:b8:27:bd:68:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Validity
Not Before: Apr 9 04:57:47 2026 GMT
Not After : Apr 8 05:02:47 2027 GMT
Subject: CN=D2D56A9217011DF414C77A5B5B940C316961C289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:42:cd:a4:9e:56:ba:18:ca:3f:cc:2c:ec:
a7:7d:c0:42:84:ee:7b:d6:07:4b:ba:ad:bb:74:14:
60:fa:96:a3:41:ec:5b:6f:cc:e4:51:19:d5:c7:5b:
bf:31:c0:a6:5b:61:f9:28:55:be:c8:c0:a4:15:92:
d5:79:8d:0f:d8:32:7f:52:eb:a7:c5:10:29:68:9b:
a9:03:33:e0:05:36:d7:5f:41:4c:6e:df:19:12:e7:
46:ed:c0:0e:f5:d6:62:b0:bc:ef:63:bd:7a:37:45:
9d:55:25:f4:47:ab:57:b3:09:62:fa:89:b1:e1:05:
bf:f9:a1:27:34:60:a2:54:ee:cb:dd:53:94:07:09:
f9:45:53:ad:fd:65:90:b8:a0:ef:0d:9c:e4:89:cf:
d9:1d:11:9a:b4:74:e6:1e:83:1f:10:ad:e5:e4:bf:
d5:54:d5:55:3a:8f:43:bf:d8:17:dd:03:f6:6f:3f:
6c:d5:c3:7c:7f:aa:73:b8:f3:c1:b5:d6:c1:f5:15:
dd:e8:c4:d8:97:00:f5:a1:ec:cf:e9:99:21:af:05:
ac:fb:88:2f:74:53:be:93:2f:93:cb:c8:5c:6b:18:
50:db:a0:35:f3:5f:cf:dc:83:62:16:e7:2a:28:7e:
91:a3:2b:8b:38:b7:21:8b:16:54:c1:ca:7c:e9:31:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D5:6A:92:17:01:1D:F4:14:C7:7A:5B:5B:94:0C:31:69:61:C2:89
X509v3 Authority Key Identifier:
keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:e5:d8:1f:bd:f4:50:11:c5:33:d7:2d:5a:cd:7f:23:12:9b:
85:94:69:0d:61:60:17:c8:83:57:a8:67:50:8a:b8:cb:f3:b6:
22:c1:28:09:43:83:ce:22:95:7d:96:ec:e7:cd:a2:8a:ba:1f:
58:ae:d1:12:ff:d9:95:d9:a2:93:83:cc:9c:c8:94:fd:b7:d6:
82:63:b7:00:95:89:17:fd:ed:0e:4a:38:f8:ae:db:92:4d:63:
8e:22:9c:b9:64:00:de:26:f0:17:62:94:17:86:65:a5:62:b6:
85:36:9d:5e:5a:cd:a5:dc:1f:b2:d9:11:e6:a5:70:7f:fc:0d:
0a:55:75:5e:56:50:f8:9b:0b:d5:ef:b9:e3:46:ba:5b:5f:4f:
3a:56:e4:de:bb:4f:42:3a:0f:ba:74:f9:cb:e7:df:2b:49:68:
d9:de:d6:d3:95:56:3a:f1:7a:82:c2:b1:9c:15:6e:20:eb:0f:
f2:2b:42:f2:ed:89:89:a0:1a:db:b2:10:e4:a2:5f:53:cd:3d:
d3:38:bb:5d:82:2e:43:b1:e4:ab:01:26:70:cb:77:1e:b4:85:
28:f8:9c:31:06:bb:20:d7:f7:ad:bd:0c:78:d0:b0:72:5f:bf:
e0:16:f0:61:5d:f5:31:f8:44:c1:68:6c:71:8d:2c:3b:01:85:
cf:40:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:11 2026 by rpki-client