
$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
File: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (raw, json)
Hash identifier: l2B2aK7iKjtGlm+JZBsaRQ0Oiz1msVZD+MDO3SYRf38=
Subject key identifier: 0D:B9:D9:9F:31:D1:98:17:34:F9:74:9E:75:80:CD:FB:EA:2F:CF:0A
Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Certificate serial: 29542764E8D5C3C43421CE328A54382CC7CE2D67
Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
Signing time: Fri 13 Feb 2026 10:02:37 +0000
ROA not before: Fri 13 Feb 2026 09:57:37 +0000
ROA not after: Fri 12 Feb 2027 10:02:37 +0000
asID: 149692
IP address blocks: 103.186.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl
rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:54:27:64:e8:d5:c3:c4:34:21:ce:32:8a:54:38:2c:c7:ce:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Validity
Not Before: Feb 13 09:57:37 2026 GMT
Not After : Feb 12 10:02:37 2027 GMT
Subject: CN=0DB9D99F31D1981734F9749E7580CDFBEA2FCF0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:00:4e:38:2a:85:68:12:e2:2f:2e:5a:6e:
fd:d7:3d:e1:de:09:e8:30:9b:70:6a:16:b6:f3:ec:
f5:c2:f0:90:66:f4:d4:3e:90:c6:0a:44:2c:31:ff:
68:27:6d:57:c8:2a:e6:df:b9:46:35:54:c2:ce:78:
a0:7f:38:c5:be:93:b5:d8:7c:97:e6:38:4b:f2:9c:
ec:19:a9:dd:59:8f:89:3c:cd:d4:9e:1f:38:3b:d0:
da:8a:a4:44:44:4f:e8:39:79:34:17:4c:bb:60:da:
6d:af:42:58:03:6b:35:3d:b4:81:14:ce:8d:18:61:
e8:40:0f:25:e7:23:e6:63:6b:4d:40:2b:2e:47:48:
14:fa:f5:15:dc:a9:16:eb:f8:70:96:25:05:61:fc:
24:ce:f2:a7:d4:5a:04:6e:cc:ef:40:d5:ce:52:d5:
80:d0:17:b6:74:8a:3e:95:0c:a6:74:9f:3c:1c:c1:
e2:e7:be:48:52:03:98:40:0c:2e:77:7e:ba:67:1e:
92:e7:76:08:b7:ff:aa:49:08:1a:91:fe:63:a0:a4:
70:e7:43:79:aa:8f:7e:df:91:51:88:a5:09:a7:b5:
8c:80:d8:fe:3f:9b:f8:12:fb:97:c4:f1:61:36:c8:
b0:f6:8e:3b:33:31:82:c9:12:20:c0:37:85:90:3f:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:D9:9F:31:D1:98:17:34:F9:74:9E:75:80:CD:FB:EA:2F:CF:0A
X509v3 Authority Key Identifier:
keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:fc:62:c8:73:fb:e8:70:6c:a8:4c:90:1d:b3:b6:bf:92:fa:
8f:39:b8:49:23:49:60:13:50:3c:f9:e2:69:ec:bf:61:e5:6d:
2c:be:fc:1d:5d:6c:70:0d:c0:98:9a:47:df:92:a3:07:1b:69:
a3:7b:bc:31:4e:af:e0:28:54:e6:b2:90:c6:f5:60:e3:f3:96:
93:6c:a9:28:e5:1e:db:63:ef:1b:3c:81:cc:96:5c:8a:95:f9:
78:08:36:46:e3:2f:c8:6a:ba:e4:dc:c8:cd:a6:98:ea:16:cd:
e6:04:b4:70:6b:b6:ea:00:34:35:d0:fe:08:03:22:d5:c7:49:
d0:25:0e:c6:63:d5:d6:f4:f3:55:ae:1d:9d:b1:fd:c6:5e:d0:
e4:b9:b9:3d:b2:d1:d4:71:35:9e:87:d6:06:b3:e3:d7:06:89:
f0:d5:6f:43:d2:67:0a:62:c6:b2:85:64:87:bd:45:34:18:ec:
d0:53:d9:24:28:26:d6:d0:ad:f6:ff:e1:c9:9e:00:20:7a:f4:
e5:05:54:7f:37:d7:8d:cb:fc:b5:b4:18:59:21:eb:48:47:25:
8f:85:4e:94:5f:37:8c:e6:f2:db:71:6e:27:c6:c6:be:a5:82:
12:6c:cf:a7:9c:dc:ab:77:de:14:7b:45:7f:97:e0:1d:c2:e6:
d5:0f:75:16
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKVQnZOjVw8Q0Ic4yilQ4LMfOLWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1
RUI2QzY1QzAeFw0yNjAyMTMwOTU3MzdaFw0yNzAyMTIxMDAyMzdaMDMxMTAvBgNV
BAMTKDBEQjlEOTlGMzFEMTk4MTczNEY5NzQ5RTc1ODBDREZCRUEyRkNGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeWABOOCqFaBLiLy5abv3XPeHe
Cegwm3BqFrbz7PXC8JBm9NQ+kMYKRCwx/2gnbVfIKubfuUY1VMLOeKB/OMW+k7XY
fJfmOEvynOwZqd1Zj4k8zdSeHzg70NqKpERET+g5eTQXTLtg2m2vQlgDazU9tIEU
zo0YYehADyXnI+Zja01AKy5HSBT69RXcqRbr+HCWJQVh/CTO8qfUWgRuzO9A1c5S
1YDQF7Z0ij6VDKZ0nzwcweLnvkhSA5hADC53frpnHpLndgi3/6pJCBqR/mOgpHDn
Q3mqj37fkVGIpQmntYyA2P4/m/gS+5fE8WE2yLD2jjszMYLJEiDAN4WQPxV/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUDbnZnzHRmBc0+XSedYDN++ovzwowHwYDVR0j
BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0
QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2
QzY1Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2Nzk4MjRmLTRlMDgtNDk3MC1i
YmE2LTI3YjQ3MjZjYTU4MC8wLzMxMzAzMzJlMzEzODM2MmUzNjMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7o8MA0GCSqG
SIb3DQEBCwUAA4IBAQC5/GLIc/vocGyoTJAds7a/kvqPObhJI0lgE1A8+eJp7L9h
5W0svvwdXWxwDcCYmkffkqMHG2mje7wxTq/gKFTmspDG9WDj85aTbKko5R7bY+8b
PIHMllyKlfl4CDZG4y/Iarrk3MjNppjqFs3mBLRwa7bqADQ10P4IAyLVx0nQJQ7G
Y9XW9PNVrh2dsf3GXtDkubk9stHUcTWeh9YGs+PXBonw1W9D0mcKYsayhWSHvUU0
GOzQU9kkKCbW0K32/+HJngAgevTlBVR/N9eNy/y1tBhZIetIRyWPhU6UXzeM5vLb
cW4nxsa+pYISbM+nnNyrd94Ue0V/l+AdwubVD3UW
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:05 2026 by rpki-client