
$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
File: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (raw, json)
Hash identifier: N3FttKyUh2kuG9d8wHtOQP0mDLIwP98y5Nvn/Hjds0w=
Subject key identifier: CF:21:9D:F0:F8:83:2F:55:EE:8B:56:C5:8D:A7:85:5E:C5:91:83:13
Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499
Certificate serial: 0E484F0CA3469FF9293A5CF9A5FEAE87F1F2902D
Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
Signing time: Fri 27 Feb 2026 10:00:00 +0000
ROA not before: Fri 27 Feb 2026 09:55:00 +0000
ROA not after: Fri 26 Feb 2027 10:00:00 +0000
asID: 141611
IP address blocks: 103.161.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl
rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 14:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:48:4f:0c:a3:46:9f:f9:29:3a:5c:f9:a5:fe:ae:87:f1:f2:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499
Validity
Not Before: Feb 27 09:55:00 2026 GMT
Not After : Feb 26 10:00:00 2027 GMT
Subject: CN=CF219DF0F8832F55EE8B56C58DA7855EC5918313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:fb:2d:14:09:f3:58:6e:8b:39:5c:50:af:
ca:81:93:86:9f:6e:cd:2c:40:a8:89:3f:5a:97:0a:
ee:f3:85:b8:98:38:18:10:fb:4f:cd:ed:5c:c5:d2:
e4:16:1e:a4:1e:8e:a7:9c:27:b0:80:27:f4:7f:b1:
a7:97:cb:41:e6:11:a9:6b:a5:78:1d:e2:82:6b:ef:
04:03:73:cf:91:2c:f7:52:b4:cd:1b:56:0f:4e:a3:
dc:93:94:21:6e:31:36:cd:05:d1:f5:4d:2e:e2:43:
d7:4b:c0:9d:ab:53:a9:53:42:5b:6c:2c:6a:30:4e:
f8:e0:5c:81:d7:1f:e1:f8:0f:52:73:59:01:d5:ea:
28:1b:14:3f:dd:6e:0c:b5:b2:d0:0c:b0:27:27:d8:
7f:76:d7:8b:3c:5c:b5:26:a4:5c:45:bf:92:17:d1:
25:11:58:be:a2:1f:01:ab:b3:ed:7e:4b:80:1a:04:
36:1b:52:1f:c2:bd:50:71:4a:12:83:e6:00:6d:a5:
a8:4f:6c:54:9a:7f:fb:77:76:cb:5d:e5:64:62:71:
8b:2f:80:f2:bd:19:a7:9c:11:8f:f7:e1:8e:5f:91:
18:d0:e3:0f:b0:b7:57:2f:13:9c:af:ab:a0:43:81:
18:78:63:d2:be:63:32:55:87:fd:1a:c6:10:d0:d8:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:9D:F0:F8:83:2F:55:EE:8B:56:C5:8D:A7:85:5E:C5:91:83:13
X509v3 Authority Key Identifier:
keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.76.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f8:7e:ee:09:f6:fa:1b:d7:b0:54:f3:6e:c9:ab:a5:b2:bf:
ed:f3:65:5c:63:1f:57:55:d6:a3:78:fa:9a:fa:b6:7f:fd:d1:
99:24:13:ec:58:80:d8:0e:78:64:e5:54:16:84:4e:d4:a1:e2:
14:e6:4b:a8:c9:d6:38:dc:56:63:15:8e:84:f2:36:ee:db:f9:
ac:f1:70:c2:2d:66:d5:02:f9:23:f8:67:77:5b:92:6a:3f:1f:
61:e2:4c:a9:00:44:39:95:ab:8e:01:04:57:02:3a:8b:bc:ad:
64:81:db:8a:64:2a:c7:28:36:b6:70:6e:10:1e:f2:9a:dd:e2:
ae:0d:de:fc:4f:2f:72:8f:b1:dc:d1:db:72:06:62:c8:95:31:
d7:6b:ae:85:93:1f:df:67:3b:77:f2:6c:c8:a5:1a:30:28:30:
e0:f4:06:c4:01:5e:e6:0a:15:b1:e2:fd:f0:30:d7:51:97:4f:
e5:d9:91:5b:36:d0:7d:0c:aa:92:2c:4d:7a:a2:d4:25:13:6b:
92:71:ed:38:e4:dd:87:c8:e8:ef:33:fd:f0:44:24:49:b0:56:
0b:b2:9f:57:87:c0:e6:95:31:78:15:92:71:49:e3:91:46:0c:
22:c0:77:50:0e:a1:da:5b:1d:8b:de:2a:ee:df:89:d3:03:8d:
7f:83:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:42 2026 by rpki-client