
$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa
File: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier: fPDlZwiSMZ0O17kuIHMpiN/ADTmhPz31XL3hRVThakw=
Subject key identifier: 5F:C9:89:78:54:10:39:10:F1:2D:3D:AB:7B:64:62:7A:9A:CE:03:08
Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Certificate serial: 7C543C8DFA1D69F55BD27F528A7E36870445B39B
Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa
Signing time: Sat 28 Feb 2026 10:00:02 +0000
ROA not before: Sat 28 Feb 2026 09:55:02 +0000
ROA not after: Sat 27 Feb 2027 10:00:02 +0000
asID: 138881
IP address blocks: 103.169.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:54:3c:8d:fa:1d:69:f5:5b:d2:7f:52:8a:7e:36:87:04:45:b3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Validity
Not Before: Feb 28 09:55:02 2026 GMT
Not After : Feb 27 10:00:02 2027 GMT
Subject: CN=5FC9897854103910F12D3DAB7B64627A9ACE0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:18:0c:1c:c3:ff:5a:20:55:04:0f:ac:ba:
43:bf:13:71:1c:6f:22:fb:df:dd:0b:e9:27:a3:d0:
28:e2:e3:6a:00:b9:07:e3:16:8f:fc:53:2b:4f:85:
e7:f1:f3:72:7d:11:e5:d1:71:71:5f:d2:00:c0:c8:
6c:c0:c0:19:0f:df:10:38:19:f8:f1:14:d0:87:17:
2f:a5:fb:0a:bf:3a:a8:40:1a:d3:f2:b0:e5:1a:84:
be:14:2a:ca:ee:df:30:52:3d:9c:ef:d8:3f:59:fd:
e5:34:ab:6d:77:5f:68:30:f2:3d:b4:a8:9d:6d:4f:
c9:ba:31:dc:ce:d8:3e:9c:ad:d6:7d:fc:0f:27:b6:
e9:fe:00:2a:d5:5e:38:a8:7b:2e:57:55:2f:d4:36:
83:30:73:e6:98:c5:93:87:85:34:ae:85:6e:25:1d:
dc:61:7e:57:95:69:34:11:6f:3d:c7:01:9d:27:d9:
00:8e:fc:fb:d9:bd:07:0a:53:29:42:46:e1:10:69:
5f:73:5c:3b:c6:28:ab:6c:ce:86:e2:a6:f0:fb:83:
04:80:08:ce:20:d8:4c:d9:f3:77:22:1e:32:f8:87:
3d:77:e7:18:ef:02:76:c0:3a:ed:11:6b:59:05:ea:
3a:94:0b:16:48:ec:23:5f:f5:cc:72:53:8e:df:c8:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C9:89:78:54:10:39:10:F1:2D:3D:AB:7B:64:62:7A:9A:CE:03:08
X509v3 Authority Key Identifier:
keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.238.0/24
Signature Algorithm: sha256WithRSAEncryption
42:81:b1:31:96:b8:48:38:da:95:a6:bb:2c:09:0e:cc:45:3b:
0c:21:ba:42:03:cc:59:1b:f5:b9:e8:7a:74:fe:de:64:e0:01:
a6:02:28:e5:95:b0:bd:b3:34:83:7e:58:dc:3d:12:31:14:0c:
ba:3e:13:54:c3:dc:6b:87:83:4f:7e:02:9c:d8:a6:84:64:e0:
70:97:eb:4a:23:d4:3d:e9:b7:44:db:9e:a1:56:42:41:e3:90:
9a:ae:a7:94:9f:d6:11:00:04:50:d6:6d:e5:13:a1:73:00:a7:
4c:d5:ff:4f:8e:66:26:a0:88:49:f6:bd:d9:b4:47:d8:ed:c5:
8f:b9:7c:95:e8:28:1a:85:53:f3:41:68:75:9d:00:60:f8:49:
dc:62:9e:4e:49:a0:14:89:8c:6c:33:e9:fd:05:bd:21:89:14:
9f:88:f6:c4:13:48:22:a8:7f:7a:66:1a:21:ac:0b:f4:45:31:
f2:c3:7f:58:ad:e2:df:6a:00:da:e7:2e:0c:e2:82:e1:d0:1c:
7d:b5:9d:35:4a:70:61:ae:65:00:e2:4d:7a:ec:2b:62:49:5f:
3a:33:7c:ff:50:49:46:ab:11:85:bf:52:c9:99:60:11:8a:7c:
17:0e:95:06:d0:43:c4:3c:93:00:8f:ec:85:14:dc:b4:e6:be:
41:da:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:50 2026 by rpki-client