
$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
File: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (raw, json)
Hash identifier: 4/T26CsUnMVIILHvHwHwYLNydEhEZf+Mult+x/QdxIM=
Subject key identifier: AE:72:31:A4:41:AA:CB:42:81:96:05:11:45:D9:0C:81:D2:30:82:5F
Certificate issuer: /CN=6592459773B9BF90E892EF4DE9361A991482809F
Certificate serial: 148658A89D61923A4A47B72802378386AEFC56C8
Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
Signing time: Fri 10 Apr 2026 05:03:20 +0000
ROA not before: Fri 10 Apr 2026 04:58:20 +0000
ROA not after: Fri 09 Apr 2027 05:03:20 +0000
asID: 150998
IP address blocks: 103.211.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl
rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 10:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:86:58:a8:9d:61:92:3a:4a:47:b7:28:02:37:83:86:ae:fc:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F
Validity
Not Before: Apr 10 04:58:20 2026 GMT
Not After : Apr 9 05:03:20 2027 GMT
Subject: CN=AE7231A441AACB428196051145D90C81D230825F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:39:b2:3a:17:ab:8f:4c:79:d8:6c:f5:f8:
26:70:13:56:2d:c8:60:2f:9f:c3:72:46:91:4f:12:
85:3d:b6:f2:2b:13:fe:18:35:e6:51:98:1e:4d:f4:
e4:78:95:fd:75:95:71:85:3c:d1:af:62:55:c3:66:
8e:c4:03:b8:58:49:4b:c7:84:8b:49:37:96:92:03:
ab:25:9e:6d:0a:9b:8a:b4:c6:d4:99:af:cc:50:05:
83:01:7c:75:6f:c8:7a:fc:93:d1:21:86:eb:6e:ce:
1b:39:c8:99:a5:30:b6:09:10:8b:a9:e0:58:20:d4:
3f:32:7c:24:0f:f9:17:26:8d:49:a4:7f:40:73:d7:
cb:bb:e6:6a:6f:54:bc:fd:4a:73:e1:84:cc:72:f8:
f2:26:6c:21:0e:6b:36:fa:8a:d9:f2:f1:a0:3f:d6:
33:3d:6a:a5:28:50:bf:2e:af:82:c5:20:54:31:8d:
18:71:ec:c4:f7:db:c5:d7:ef:72:63:38:7b:27:04:
0a:9f:55:7c:eb:39:41:66:04:d3:3b:4b:96:d3:74:
7a:21:59:a8:b6:94:b7:22:7f:7c:0a:e0:9b:43:3e:
a3:5a:fb:c7:69:fd:1e:20:ad:84:bb:2f:db:4b:d3:
63:de:5f:c6:d3:6e:32:6c:2c:c3:0b:d8:09:94:01:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:72:31:A4:41:AA:CB:42:81:96:05:11:45:D9:0C:81:D2:30:82:5F
X509v3 Authority Key Identifier:
keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:14:6a:4e:69:b3:35:53:1b:f4:29:df:8d:11:d8:c7:61:2c:
8f:fa:35:46:9b:a5:32:6d:63:63:d5:b5:a5:78:55:61:62:7e:
43:06:31:4b:09:70:a8:b9:a6:7a:90:ff:df:08:1f:61:11:63:
33:6e:fe:94:67:3a:40:91:8d:4f:38:ab:a0:3f:2f:d3:04:8e:
3e:32:b9:64:9b:77:c3:ee:dc:11:13:06:43:07:ec:9e:33:01:
47:9f:9e:ca:0f:28:e9:ec:03:19:f6:59:15:c9:0b:32:97:3d:
81:48:bd:b2:b3:3f:cd:ce:d4:80:5d:f6:a7:ca:05:44:3e:ac:
19:43:6b:2c:95:58:aa:8f:94:0c:5d:b4:44:51:ca:b9:b8:3f:
d2:85:1d:c7:54:af:35:02:3f:ec:f8:6b:94:c7:3d:44:4e:af:
cb:68:af:ff:03:31:db:01:ee:38:31:3a:6f:6e:39:7a:88:92:
bd:15:f1:bb:c5:3f:8a:76:0b:a2:7f:9d:1f:09:13:35:68:c2:
54:8a:d3:ae:5f:ba:4e:c3:aa:9d:1e:3d:76:f3:20:7d:9d:54:
a8:ca:70:ab:ad:29:92:f1:21:3e:85:21:9b:a8:9c:cf:ed:e0:
25:98:f9:86:05:21:18:8c:93:1d:0b:ee:95:ee:44:12:60:de:
d1:08:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:17:20 2026 by rpki-client