
$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa
File: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (raw, json)
Hash identifier: zlk09GRQGlOz6ikUOZ0UX9sa8LEm6wh0kPli78xy+lM=
Subject key identifier: DE:41:E4:8B:2D:9A:A9:A7:BE:25:BB:C8:7D:41:87:B5:A1:39:71:A6
Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Certificate serial: 1AEEA828C5E99D6B2C6ABCA3FD88FE1D45E42875
Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa
Signing time: Fri 06 Feb 2026 05:03:43 +0000
ROA not before: Fri 06 Feb 2026 04:58:43 +0000
ROA not after: Fri 05 Feb 2027 05:03:43 +0000
asID: 150952
IP address blocks: 103.211.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl
rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ee:a8:28:c5:e9:9d:6b:2c:6a:bc:a3:fd:88:fe:1d:45:e4:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Validity
Not Before: Feb 6 04:58:43 2026 GMT
Not After : Feb 5 05:03:43 2027 GMT
Subject: CN=DE41E48B2D9AA9A7BE25BBC87D4187B5A13971A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:3c:65:6b:53:2b:26:49:89:11:6b:c1:21:
6d:38:da:fe:ab:ae:15:91:04:7d:28:b1:7e:24:7c:
e7:69:97:55:73:60:13:53:a6:43:d0:81:0a:50:05:
5f:92:fa:ac:41:93:5e:ac:17:f6:1c:44:3a:81:ed:
85:1a:0b:f9:03:8d:a7:f3:a3:80:25:9d:63:49:7a:
c7:c0:38:e1:cc:72:43:f1:3c:36:5c:aa:e3:08:77:
85:72:5a:31:89:24:18:55:67:2e:c8:07:6d:dc:06:
d7:1d:69:38:c5:02:82:0c:b8:37:d5:e1:d9:e5:64:
1b:ef:8a:61:d5:16:5f:dc:03:f4:70:05:db:61:75:
c1:53:03:1e:b8:dc:bd:27:12:d5:23:05:33:fa:d6:
ac:51:9c:6a:fd:4d:a6:f3:57:19:57:33:ff:2c:fe:
e0:8f:69:ed:b2:cb:ed:cc:98:ee:6c:08:d5:af:fa:
da:f5:4c:4e:e7:03:b0:6b:8e:47:d8:bc:f4:9f:24:
14:b1:56:c2:12:f4:11:e5:f9:63:c3:de:98:3c:8e:
27:4d:e6:8a:f2:b6:8d:8e:5f:ac:4d:a7:a6:2e:25:
1e:3b:16:13:88:53:99:01:51:30:8e:4b:f3:51:4a:
b1:bd:5e:8b:ae:d0:10:75:28:a8:c9:f9:18:b1:3d:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:E4:8B:2D:9A:A9:A7:BE:25:BB:C8:7D:41:87:B5:A1:39:71:A6
X509v3 Authority Key Identifier:
keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e1:6f:45:83:0e:68:7a:a0:75:a3:bc:d9:0e:e2:70:47:ca:
90:9a:61:4f:62:df:5c:e8:2f:98:4d:7f:c5:fb:fc:8b:40:ed:
45:ba:32:75:ed:06:05:4b:8d:8b:65:4e:47:bf:9f:af:d7:76:
1c:f3:4b:aa:a4:45:0d:2a:4d:2a:ff:65:cb:bc:f5:7f:a4:98:
d1:17:eb:0f:f3:5c:11:a3:32:05:c7:d9:cc:4b:ca:38:8d:25:
1d:f7:46:41:a5:9f:83:c3:98:fc:b1:ef:2c:37:f3:d6:1c:63:
3f:ec:78:f0:a8:c3:ee:61:85:c6:ea:1b:23:0e:8a:76:21:82:
8c:a5:fb:91:6d:8e:7a:b3:78:14:57:49:4b:a4:67:85:70:cb:
64:81:80:f1:60:ed:3b:00:2a:0c:79:7c:a4:23:4f:a5:e8:58:
86:70:0d:75:66:27:87:a9:c4:5d:91:95:5d:c8:fe:48:2b:09:
a4:5e:4a:58:e1:17:95:cb:f1:14:ad:51:1a:77:4d:85:4e:72:
fe:97:24:99:3d:87:de:05:44:1f:17:3f:8c:89:42:bf:f7:50:
40:c5:3e:64:4b:60:e5:d9:b4:4c:b0:38:96:d7:f5:de:51:13:
8f:b6:16:c2:a0:07:b9:34:3c:13:da:1a:86:57:fb:81:a5:69:
fa:50:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:53 2026 by rpki-client