
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
File: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (raw, json)
Hash identifier: s5PXIuDuB/ISwN97+f4+HO7CLZ5A9vnC7yHPQ/KhwTw=
Subject key identifier: EE:8F:84:4C:B6:D4:B8:1B:89:75:42:A6:5C:1D:1B:42:23:EA:FF:99
Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62
Certificate serial: 7F1D3F6218B12C885B174AA142FE803551E57DEB
Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
Signing time: Mon 13 Apr 2026 06:00:00 +0000
ROA not before: Mon 13 Apr 2026 05:55:00 +0000
ROA not after: Mon 12 Apr 2027 06:00:00 +0000
asID: 150521
IP address blocks: 103.75.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl
rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1d:3f:62:18:b1:2c:88:5b:17:4a:a1:42:fe:80:35:51:e5:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62
Validity
Not Before: Apr 13 05:55:00 2026 GMT
Not After : Apr 12 06:00:00 2027 GMT
Subject: CN=EE8F844CB6D4B81B897542A65C1D1B4223EAFF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:3e:dd:65:6f:7a:3b:98:c2:6d:a8:03:27:
d9:97:eb:ad:41:15:09:0f:1c:81:21:a5:9b:40:3b:
58:42:f7:16:b3:28:2b:02:1c:bc:21:0e:97:54:05:
03:1d:d1:19:35:fa:70:5d:9e:76:be:a8:9e:72:e2:
bd:29:de:c0:e2:ac:f5:12:84:49:24:1d:48:25:c3:
7b:f9:b9:83:ad:58:7a:8d:5d:54:61:d4:cd:34:35:
94:57:37:50:6d:9e:c3:1c:f8:ac:59:28:c9:d6:4b:
f7:29:7a:dc:e9:1e:bd:6e:1a:52:e9:63:13:1c:cd:
74:dd:45:ff:a4:78:62:3c:f7:12:ac:00:65:87:43:
9c:7f:4b:18:c3:fc:63:3f:9c:9e:9f:2e:00:ac:0b:
3c:93:0c:cb:0e:32:05:88:80:70:2f:25:7a:c9:ca:
68:f0:07:3e:2f:33:05:8f:c3:d8:b0:f7:20:3e:d5:
db:3f:26:d4:b5:c5:05:bc:11:96:9f:37:b5:56:c3:
9e:ad:64:91:84:de:72:0c:39:30:7e:a0:9d:2b:a9:
5a:f7:4f:60:7c:0f:76:ec:09:19:39:f1:3e:97:cc:
95:0f:df:89:eb:75:a0:43:31:ee:73:66:c6:a7:1e:
b5:28:c4:fc:df:f0:75:05:3d:dc:8f:e8:76:06:3b:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:84:4C:B6:D4:B8:1B:89:75:42:A6:5C:1D:1B:42:23:EA:FF:99
X509v3 Authority Key Identifier:
keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.66.0/23
Signature Algorithm: sha256WithRSAEncryption
33:bf:a0:31:46:48:94:85:71:3f:74:e1:01:f8:ae:fe:c8:3e:
4d:63:8a:5f:05:7c:12:7d:70:64:30:5b:5b:ca:c1:bb:67:4a:
c5:d5:96:ee:df:df:a2:75:31:64:29:9d:cd:87:a2:f8:67:41:
7f:a9:f9:c1:19:7a:65:d0:ad:32:ac:3d:99:3a:ca:e4:8d:07:
72:9b:99:f6:d0:70:4f:53:60:e4:81:ab:41:53:da:69:86:cf:
8f:19:0b:cf:ba:d9:73:14:aa:02:30:4c:41:63:63:aa:66:2f:
a4:24:a1:2a:2b:43:81:fb:c0:3a:54:20:f4:85:fe:ef:8e:85:
8c:67:5c:c2:c7:f7:0a:ce:28:22:e9:f2:33:d1:24:e6:d3:23:
dd:06:5d:6e:fb:5c:f4:71:a3:e0:1c:df:37:cc:28:79:cc:64:
55:fb:cd:d8:5e:72:4b:fb:33:88:1e:82:1f:ff:69:98:33:96:
71:ef:90:80:b4:11:f3:62:37:da:fd:a3:8e:e9:1e:5f:49:87:
03:16:f2:12:83:35:e0:21:9b:96:fb:5f:65:64:f1:70:ad:3e:
c9:62:45:22:7e:06:24:f1:30:a8:c8:b0:53:19:a9:1f:03:61:
8f:62:d2:e7:5c:c8:e8:c5:3d:ad:42:50:c5:17:8d:20:d6:fa:
7a:b2:ed:8d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfx0/YhixLIhbF0qhQv6ANVHlfeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB
NkYyMEY2MjAeFw0yNjA0MTMwNTU1MDBaFw0yNzA0MTIwNjAwMDBaMDMxMTAvBgNV
BAMTKEVFOEY4NDRDQjZENEI4MUI4OTc1NDJBNjVDMUQxQjQyMjNFQUZGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQD7dZW96O5jCbagDJ9mX661B
FQkPHIEhpZtAO1hC9xazKCsCHLwhDpdUBQMd0Rk1+nBdnna+qJ5y4r0p3sDirPUS
hEkkHUglw3v5uYOtWHqNXVRh1M00NZRXN1BtnsMc+KxZKMnWS/cpetzpHr1uGlLp
YxMczXTdRf+keGI89xKsAGWHQ5x/SxjD/GM/nJ6fLgCsCzyTDMsOMgWIgHAvJXrJ
ymjwBz4vMwWPw9iw9yA+1ds/JtS1xQW8EZafN7VWw56tZJGE3nIMOTB+oJ0rqVr3
T2B8D3bsCRk58T6XzJUP34nrdaBDMe5zZsanHrUoxPzf8HUFPdyP6HYGO/J5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7o+ETLbUuBuJdUKmXB0bQiPq/5kwHwYDVR0j
BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0
NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy
MEY2Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZjc2YzZkLWY4NTAtNGM0OS04
NTRjLTU1ZjM4Mjg0NGM5Ny8wLzMxMzAzMzJlMzczNTJlMzYzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdLQjANBgkqhkiG
9w0BAQsFAAOCAQEAM7+gMUZIlIVxP3ThAfiu/sg+TWOKXwV8En1wZDBbW8rBu2dK
xdWW7t/fonUxZCmdzYei+GdBf6n5wRl6ZdCtMqw9mTrK5I0HcpuZ9tBwT1Ng5IGr
QVPaaYbPjxkLz7rZcxSqAjBMQWNjqmYvpCShKitDgfvAOlQg9IX+746FjGdcwsf3
Cs4oIunyM9Ek5tMj3QZdbvtc9HGj4BzfN8woecxkVfvN2F5yS/sziB6CH/9pmDOW
ce+QgLQR82I32v2jjukeX0mHAxbyEoM14CGblvtfZWTxcK0+yWJFIn4GJPEwqMiw
UxmpHwNhj2LS51zI6MU9rUJQxReNINb6erLtjQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:55 2026 by rpki-client