
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
File: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (raw, json)
Hash identifier: UruVCT7EzglBLQOHOJwF47V7q6XPl9DE6uRKzVhhb/I=
Subject key identifier: 8A:AE:F4:6B:42:44:1D:C2:D2:D2:5E:5C:39:E2:3D:68:3E:23:1D:EB
Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial: 2380EF0F215CEEDE48EB358847D83955B28882DD
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
Signing time: Fri 03 Apr 2026 01:00:02 +0000
ROA not before: Fri 03 Apr 2026 00:55:02 +0000
ROA not after: Fri 02 Apr 2027 01:00:02 +0000
asID: 45305
IP address blocks: 103.190.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:80:ef:0f:21:5c:ee:de:48:eb:35:88:47:d8:39:55:b2:88:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Validity
Not Before: Apr 3 00:55:02 2026 GMT
Not After : Apr 2 01:00:02 2027 GMT
Subject: CN=8AAEF46B42441DC2D2D25E5C39E23D683E231DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:0b:fa:32:cc:82:c8:3a:92:57:a9:55:1b:
ae:79:ff:fb:8a:80:c9:ee:8f:74:b9:d9:3f:6e:d9:
8f:36:f4:d1:40:5e:43:1d:9a:8d:62:a5:b2:87:c6:
49:89:0e:2a:e1:90:f3:36:90:90:f5:7d:cc:d6:63:
ca:81:00:12:a9:4a:e2:34:72:6a:0e:e2:00:ce:e6:
e3:cd:df:df:75:ca:82:81:a1:01:8b:04:8d:ec:4d:
18:50:8a:b3:37:18:39:18:8a:40:8d:54:08:18:1d:
33:eb:78:5d:8f:87:13:96:77:72:df:df:7b:8e:b4:
1e:38:2b:5c:85:55:37:ad:74:fc:36:89:d1:88:d5:
81:c7:90:f6:0c:41:07:c8:a1:80:d8:ef:47:89:41:
5f:60:e3:53:e7:2a:ed:a3:61:47:b2:53:bb:e3:81:
3c:00:b1:85:f2:08:61:38:40:c7:27:c1:9f:14:91:
49:cf:71:fe:12:30:42:df:0a:f3:fa:ed:da:21:17:
cc:21:83:3f:4b:e9:0a:45:35:4d:90:d4:fd:af:28:
96:38:17:c7:5a:4e:34:b0:0c:2a:85:49:91:ec:9e:
cb:25:59:84:a8:c9:83:b4:c8:a2:5e:ae:83:33:bf:
4c:0a:d9:bb:52:68:75:ee:b5:3a:1d:91:92:e4:0e:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:F4:6B:42:44:1D:C2:D2:D2:5E:5C:39:E2:3D:68:3E:23:1D:EB
X509v3 Authority Key Identifier:
keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.114.0/23
Signature Algorithm: sha256WithRSAEncryption
28:9f:b5:b2:87:17:71:22:72:f0:af:51:31:b0:ce:c6:04:7b:
b7:c7:39:03:83:3f:26:79:85:06:27:7d:91:b9:40:40:4c:69:
30:a1:c1:1b:b6:8f:9f:5e:9f:ea:d3:bf:b7:11:ce:7c:42:3e:
74:e0:0c:1a:5a:38:f3:b2:d9:d9:b9:35:4a:72:be:be:39:fa:
c4:87:7e:9d:88:4f:a0:c0:55:68:94:fa:b0:1c:0a:c4:b7:97:
27:39:3d:53:35:b0:93:a5:88:eb:96:18:32:73:c2:48:9f:d8:
e7:d7:0a:06:55:9a:f8:ac:c9:4b:8d:bd:05:52:df:75:5d:0f:
83:63:df:0e:80:a1:04:12:a0:c5:22:b5:4c:6b:d3:e9:ce:95:
02:30:96:e3:62:4d:b5:1b:47:53:a4:94:20:89:84:27:09:61:
11:21:76:b4:4d:74:95:50:35:ce:f2:4f:ef:fc:2c:16:b7:4c:
05:86:e6:13:af:ef:51:1b:73:0c:2b:b5:db:8c:02:a6:92:a7:
cb:0e:cd:d1:3f:c4:2c:7f:76:f5:6f:b1:33:26:28:a9:87:f3:
92:5e:9b:8c:27:8d:95:8f:c0:19:0b:8b:0f:33:8a:ba:e3:ed:
8f:49:f0:07:ad:89:38:69:68:84:05:88:e2:c3:f4:68:fe:db:
c8:eb:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:35 2026 by rpki-client