
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa
File: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (raw, json)
Hash identifier: Dn1TWs8KInIikwDEUwL4D4avm/veFQbAcGAcTpLQx70=
Subject key identifier: A0:EA:C7:91:F4:9D:7A:4A:E2:BE:FC:F0:7F:8A:45:15:B8:64:C7:21
Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Certificate serial: 40E7759FF1E288A527D9C5DA28143DA0E26B576D
Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa
Signing time: Thu 12 Feb 2026 11:00:00 +0000
ROA not before: Thu 12 Feb 2026 10:55:00 +0000
ROA not after: Thu 11 Feb 2027 11:00:00 +0000
asID: 149744
IP address blocks: 103.187.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e7:75:9f:f1:e2:88:a5:27:d9:c5:da:28:14:3d:a0:e2:6b:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Validity
Not Before: Feb 12 10:55:00 2026 GMT
Not After : Feb 11 11:00:00 2027 GMT
Subject: CN=A0EAC791F49D7A4AE2BEFCF07F8A4515B864C721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:06:bf:f0:19:a9:d1:fa:04:4b:23:bb:03:
7a:31:b7:5a:32:c1:d2:9c:d7:62:dc:a7:94:71:7e:
85:0f:8a:5d:50:87:d8:14:f6:42:3a:57:5e:47:55:
65:14:53:b6:26:a1:56:2f:e6:6d:67:63:36:ab:8d:
88:d0:05:ac:eb:f8:68:70:14:25:f1:f3:b2:9b:67:
3c:ef:5c:69:c1:f6:ae:21:36:e4:50:59:5f:b2:31:
2d:75:f9:a0:86:92:4e:0d:fe:69:cd:1b:5a:1b:6c:
0f:b2:94:d9:8d:ce:d6:55:fd:0d:d9:74:a8:c1:99:
b5:c2:d1:39:64:6c:c2:92:d1:f3:0d:a8:07:b0:57:
a2:3d:80:0b:54:35:cf:55:6a:10:19:85:fc:8a:0d:
ba:ca:4a:44:1c:66:15:61:d3:ee:f2:40:f7:20:32:
d8:6f:b8:72:d8:80:24:c3:da:d3:cd:97:8e:09:5b:
c4:71:85:21:70:2b:8b:9c:ea:42:4c:ec:aa:a1:1e:
1a:a8:9a:9c:1a:76:f9:21:19:e0:fc:d3:e8:7f:2e:
53:c2:a8:08:eb:bc:51:85:36:1d:de:c1:36:8e:43:
30:66:b8:36:12:b8:45:4e:bc:17:d0:98:1d:21:93:
b0:0f:c6:55:15:be:cf:8e:b1:da:80:6d:ac:3f:70:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:C7:91:F4:9D:7A:4A:E2:BE:FC:F0:7F:8A:45:15:B8:64:C7:21
X509v3 Authority Key Identifier:
keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b8:e7:ee:12:58:12:3a:31:83:ee:60:eb:c2:8e:c5:0c:d8:
9a:81:9c:a2:12:a6:48:7c:56:fd:a7:35:b0:9f:ca:5f:7c:d9:
e3:0f:8e:b7:66:83:ed:77:1b:bb:a7:b4:01:ba:a3:01:a5:75:
a6:f0:99:3b:0f:ab:c8:dc:c3:22:c5:1d:82:cb:8d:04:d4:73:
c4:c9:4d:d1:60:d9:8f:e3:b4:0c:e2:71:47:3b:29:9a:e7:60:
b6:6f:71:ed:a7:80:67:93:3a:0c:4c:aa:12:ca:7e:d4:b3:62:
60:51:7e:87:68:3f:c5:8e:94:50:96:b7:cb:a8:1d:e7:54:c8:
24:8e:c3:18:97:3b:05:3c:04:2a:38:e4:05:64:6c:f0:57:c9:
48:a3:7e:6b:c7:0c:cc:53:43:fb:67:16:3e:88:8a:fd:4c:16:
fd:65:f0:ef:7e:ec:a4:1f:f5:c6:0a:98:eb:3b:76:9a:5a:23:
03:48:a7:08:82:75:81:7e:9d:8a:eb:ac:b9:f3:a8:11:fc:a0:
a8:57:d5:1e:9c:ba:fd:10:ce:cb:6b:9a:98:f8:39:94:3f:e5:
6e:82:8d:b2:26:1b:c3:5c:57:99:b4:19:09:c9:37:2c:90:1d:
94:44:fa:d8:73:9f:21:e6:c6:be:48:ed:b7:12:89:9c:f8:a0:
08:c8:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:41 2026 by rpki-client