
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
File: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (raw, json)
Hash identifier: JcF+LH7izrmDG4J8G7cdueF4qw2F0T8H0MsCQcJCPtk=
Subject key identifier: C7:24:CE:D3:FE:C1:E5:49:3C:45:73:49:BC:AC:62:DC:D6:75:9A:E6
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 3ED26F61B2EB59847B0F1454BC9F63A006E4C960
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
Signing time: Wed 08 Apr 2026 12:02:50 +0000
ROA not before: Wed 08 Apr 2026 11:57:50 +0000
ROA not after: Wed 07 Apr 2027 12:02:50 +0000
asID: 58820
IP address blocks: 103.241.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 22:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d2:6f:61:b2:eb:59:84:7b:0f:14:54:bc:9f:63:a0:06:e4:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Apr 8 11:57:50 2026 GMT
Not After : Apr 7 12:02:50 2027 GMT
Subject: CN=C724CED3FEC1E5493C457349BCAC62DCD6759AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:2b:a0:d0:7b:e9:cb:01:dc:5c:f2:e5:cb:
0c:dd:cb:29:dc:bf:7b:e3:21:b4:01:72:cb:0a:89:
f0:87:0e:c0:3d:f3:d6:43:de:3e:3d:17:28:d0:c8:
f5:62:e8:6e:be:4f:90:13:9f:66:15:f6:35:bf:34:
ca:78:10:95:9c:58:ff:41:73:cc:bf:18:d2:e0:7f:
04:58:73:fd:7e:36:cc:8e:92:f1:4c:5d:b5:e6:08:
0f:95:fe:28:54:b0:de:ea:90:14:6e:93:ac:f9:04:
ff:27:ab:e2:34:f5:42:02:42:99:e9:a1:44:da:b2:
1a:26:b3:28:cb:43:f6:d2:9e:8b:94:0e:a8:a9:41:
a7:d5:39:a6:13:df:cf:ac:d7:ed:f5:2a:10:0e:9c:
60:e6:54:66:ff:f2:e9:cf:a6:86:d9:a9:bf:3a:24:
3c:3d:75:5a:19:a0:90:96:71:f6:d4:f2:68:9c:b0:
48:11:6d:eb:07:82:e4:a3:cc:93:38:50:1a:6c:f8:
c7:06:16:1e:5b:99:61:fe:0e:bd:c3:42:ea:f6:d8:
42:52:f9:8d:07:e8:e6:42:46:35:76:41:1e:16:67:
1e:43:3b:1a:98:ca:d0:fe:d0:13:ac:1f:33:f3:f7:
84:38:db:35:8f:41:8a:ca:7e:9e:67:cd:06:50:75:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:CE:D3:FE:C1:E5:49:3C:45:73:49:BC:AC:62:DC:D6:75:9A:E6
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.241.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bd:8f:89:63:84:a1:c4:b3:20:93:b0:2d:68:19:f9:e0:75:
ff:2a:af:e8:b4:6e:0b:b7:16:e1:90:94:c2:05:0a:02:42:67:
fb:90:cd:aa:4c:19:9f:a6:cf:7c:8d:54:95:a6:57:b2:74:42:
e3:36:f2:6a:39:0b:7f:53:23:0f:c7:56:bd:8d:e5:51:6f:a9:
2e:31:cf:85:e9:a5:84:8a:cb:ff:cb:2b:f5:44:ad:2f:9c:14:
85:5c:92:f1:1f:11:33:59:d7:b4:4f:7a:bc:a0:6c:30:f8:f8:
96:a6:18:1c:a0:27:15:4a:99:9b:fc:15:37:27:0e:e0:14:f5:
20:14:e1:c9:b7:72:b9:14:41:67:4a:1a:88:cc:c1:83:e0:fd:
5a:55:3e:d8:36:ed:37:43:2f:9a:fe:ff:f2:c3:3b:2a:bf:36:
bd:b3:58:6f:3e:c2:06:7e:b6:47:26:90:3e:2f:f7:97:66:a3:
49:c7:b2:a6:48:28:2d:51:c6:de:2d:70:f1:f9:ba:f0:1a:53:
11:4c:dc:53:47:0c:97:b5:c2:76:ab:d9:a6:7f:2c:c9:aa:34:
e5:e2:64:3a:1a:6b:e8:90:36:50:39:01:30:95:dd:0d:b9:6d:
4b:c4:6f:cb:7e:fc:e6:fd:4d:34:54:5c:fb:b4:14:98:3b:a3:
6a:c3:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:12 2026 by rpki-client