
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
File: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: Nc/rGbjilKhDUINae4y6wIX+B0v7DnEiiCYl62dNR3U=
Subject key identifier: 17:FA:B1:A6:56:EF:50:E6:C1:FD:11:F8:E5:1B:54:99:EB:69:6F:D6
Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Certificate serial: E07AEA2EE3B579873CDF97B6B0BBA88F0271F3
Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
Signing time: Tue 03 Feb 2026 06:02:34 +0000
ROA not before: Tue 03 Feb 2026 05:57:34 +0000
ROA not after: Tue 02 Feb 2027 06:02:34 +0000
asID: 38496
IP address blocks: 103.91.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl
rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e0:7a:ea:2e:e3:b5:79:87:3c:df:97:b6:b0:bb:a8:8f:02:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Validity
Not Before: Feb 3 05:57:34 2026 GMT
Not After : Feb 2 06:02:34 2027 GMT
Subject: CN=17FAB1A656EF50E6C1FD11F8E51B5499EB696FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:34:c7:e5:e1:a9:40:50:4f:21:6f:ad:8f:
9e:82:8d:eb:50:66:cf:04:9d:cc:84:c3:c3:f3:e0:
fd:0c:6d:98:b2:86:41:8b:af:45:39:5e:8d:64:bc:
b4:f0:1f:aa:f6:6a:3b:11:ce:e2:82:47:a6:a7:11:
47:77:da:7d:59:67:04:2b:df:28:df:74:ad:ea:cb:
4d:17:dd:c9:da:f3:83:ad:56:fa:d4:b1:19:5b:40:
d6:52:39:dd:69:35:22:ba:41:b9:f2:24:c8:55:33:
52:8c:16:0d:10:8a:ca:1a:82:ae:dd:b9:3e:f5:f1:
86:16:1d:5d:cb:f1:75:2d:1f:f9:28:80:3c:76:1c:
73:95:b7:48:a3:47:e4:05:1b:39:d0:52:10:eb:66:
d1:e8:93:77:46:76:a6:aa:06:c1:e6:b5:69:ab:74:
b2:75:81:fc:7e:3e:b8:db:4f:43:e4:05:87:ff:0e:
dd:d5:b2:35:14:05:9b:f3:b8:82:35:88:f0:fc:c9:
19:12:60:a8:a9:10:d5:36:61:46:db:3c:2e:3f:b0:
6c:e8:b1:88:28:1e:8a:e4:96:37:f9:2a:80:d4:c0:
3c:91:af:5e:2b:8a:a4:a0:a9:cb:04:c4:96:3b:91:
34:e0:52:31:e9:14:46:17:84:3b:4b:eb:b4:f4:25:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:B1:A6:56:EF:50:E6:C1:FD:11:F8:E5:1B:54:99:EB:69:6F:D6
X509v3 Authority Key Identifier:
keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:e5:19:f7:48:69:ff:0f:f6:be:9b:16:d1:1c:cf:78:ff:d9:
ef:f3:1c:ce:da:be:c9:71:22:e0:7d:7a:38:38:5a:94:c5:fc:
22:a7:e5:16:be:aa:e6:40:ea:bb:df:31:c7:39:44:7a:ed:87:
41:b6:ed:5a:de:35:66:81:fd:59:86:17:51:09:c4:7b:33:f6:
af:af:65:d2:e5:fa:13:6f:26:84:e1:b7:82:ac:3d:2f:cc:35:
74:8f:bd:94:7d:24:16:52:d9:a3:78:12:5b:cc:29:c6:15:4d:
60:ab:07:83:5e:52:95:eb:3a:d2:cb:97:75:fe:69:64:af:80:
cc:94:21:a1:4a:04:a2:c6:5e:de:7c:fb:19:14:d3:4e:17:0a:
6b:11:13:8f:ba:65:4b:e5:02:31:b8:35:47:b4:86:d5:ef:40:
2e:bd:18:ba:20:d0:5e:18:03:f2:c9:6e:c4:34:36:a1:b7:39:
ff:68:63:8f:0f:90:f2:2e:59:d0:79:07:be:b0:1c:de:97:04:
9b:5c:af:3a:97:1d:78:e4:c1:91:49:8e:1c:1f:10:ba:14:bf:
35:79:a2:36:4f:5b:a1:7b:74:27:99:c5:23:e8:ab:75:2f:7f:
26:97:05:04:92:43:bf:50:2f:8d:27:cf:77:2a:18:d3:2b:a1:
41:3a:09:3c
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUAOB66i7jtXmHPN+XtrC7qI8CcfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD
M0NFNTdGOTAeFw0yNjAyMDMwNTU3MzRaFw0yNzAyMDIwNjAyMzRaMDMxMTAvBgNV
BAMTKDE3RkFCMUE2NTZFRjUwRTZDMUZEMTFGOEU1MUI1NDk5RUI2OTZGRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mTTH5eGpQFBPIW+tj56CjetQ
Zs8EncyEw8Pz4P0MbZiyhkGLr0U5Xo1kvLTwH6r2ajsRzuKCR6anEUd32n1ZZwQr
3yjfdK3qy00X3cna84OtVvrUsRlbQNZSOd1pNSK6QbnyJMhVM1KMFg0Qisoagq7d
uT718YYWHV3L8XUtH/kogDx2HHOVt0ijR+QFGznQUhDrZtHok3dGdqaqBsHmtWmr
dLJ1gfx+PrjbT0PkBYf/Dt3VsjUUBZvzuII1iPD8yRkSYKipENU2YUbbPC4/sGzo
sYgoHorkljf5KoDUwDyRr14riqSgqcsExJY7kTTgUjHpFEYXhDtL67T0JeixAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUF/qxplbvUObB/RH45RtUmetpb9YwHwYDVR0j
BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4
RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF
NTdGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm
YWYtMmI1YjkxNTNlNTJkLzAvMzEzMDMzMmUzOTMxMmUzMDJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDMzMzgzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnWwAwDQYJKoZIhvcNAQEL
BQADggEBAHzlGfdIaf8P9r6bFtEcz3j/2e/zHM7avslxIuB9ejg4WpTF/CKn5Ra+
quZA6rvfMcc5RHrth0G27VreNWaB/VmGF1EJxHsz9q+vZdLl+hNvJoTht4KsPS/M
NXSPvZR9JBZS2aN4ElvMKcYVTWCrB4NeUpXrOtLLl3X+aWSvgMyUIaFKBKLGXt58
+xkU004XCmsRE4+6ZUvlAjG4NUe0htXvQC69GLog0F4YA/LJbsQ0NqG3Of9oY48P
kPIuWdB5B76wHN6XBJtcrzqXHXjkwZFJjhwfELoUvzV5ojZPW6F7dCeZxSPoq3Uv
fyaXBQSSQ79QL40nz3cqGNMroUE6CTw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:26 2026 by rpki-client