
$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
File: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier: fk5h/S4jSQI4thBEqEx+ocxOCOpDquhTLg33I3n6VV0=
Subject key identifier: 7B:13:94:A9:3A:9F:6A:03:CE:E6:4F:C3:99:69:00:80:FD:2C:21:F5
Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial: 409F7E8CBE36004AC1E5556F86FF110F57E9806A
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
Signing time: Wed 04 Feb 2026 02:03:10 +0000
ROA not before: Wed 04 Feb 2026 01:58:10 +0000
ROA not after: Wed 03 Feb 2027 02:03:10 +0000
asID: 149693
IP address blocks: 103.186.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9f:7e:8c:be:36:00:4a:c1:e5:55:6f:86:ff:11:0f:57:e9:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Validity
Not Before: Feb 4 01:58:10 2026 GMT
Not After : Feb 3 02:03:10 2027 GMT
Subject: CN=7B1394A93A9F6A03CEE64FC399690080FD2C21F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:b6:80:6a:fc:b7:a4:d6:3b:33:b9:fa:bd:
ce:98:ed:b7:8f:e0:4c:de:09:fd:ec:6e:40:e6:47:
51:d9:93:b0:8c:ae:b2:bd:c5:33:c0:1d:d9:b8:ca:
01:c5:e7:b4:a9:88:f9:be:a5:a7:a3:46:13:66:b2:
68:87:ef:a7:ad:fb:f6:a9:3f:09:59:79:3e:38:37:
9e:80:37:75:d3:45:9d:4d:ff:51:5c:69:b0:65:e1:
f9:d5:aa:61:3b:72:e9:a3:f6:c1:8e:35:56:83:69:
d0:8d:22:7b:79:7c:a4:61:33:76:22:71:9a:b0:52:
10:64:aa:ac:3b:8b:a8:bb:df:25:e4:a3:8a:b7:b9:
f6:e4:43:ad:46:60:f0:15:c5:bf:55:00:7c:17:8f:
7a:fb:bf:dc:e5:78:db:58:76:36:f5:1d:6a:aa:d6:
e0:02:3e:6c:d6:cc:35:00:e1:2c:51:96:39:78:f8:
42:e8:71:bf:4f:93:8f:ad:c8:52:de:3e:1a:c2:77:
a5:13:5d:b5:7d:71:0e:8a:94:d9:cc:e1:d9:19:ba:
1c:be:ba:98:2f:17:6c:1e:e4:91:d4:e3:8a:fa:84:
85:10:af:f0:c2:b7:f3:07:55:0a:a6:f2:1e:8c:d0:
95:37:a6:a4:0c:6f:6e:32:d7:b2:09:18:44:ac:c5:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:94:A9:3A:9F:6A:03:CE:E6:4F:C3:99:69:00:80:FD:2C:21:F5
X509v3 Authority Key Identifier:
keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e2:7d:8a:05:30:78:b6:ac:2d:e6:f3:29:3a:d5:39:22:e3:
c6:cc:e3:66:dd:24:c2:f8:4e:4a:f8:e1:ba:56:11:e1:42:4a:
ea:82:3d:62:ce:61:cd:bf:15:16:91:fd:e0:9b:ec:d4:4c:6d:
77:f7:cc:46:a3:e9:65:50:3c:68:b8:9d:58:d0:86:c5:4f:3e:
5f:69:ec:38:53:4f:7b:da:05:d1:af:01:67:71:db:b1:c8:c6:
03:3a:8d:fd:0c:46:12:33:2b:ab:1e:38:25:72:6e:25:c9:7e:
f4:af:e1:bb:e1:80:09:33:65:72:65:b1:52:a7:d1:ab:3b:2e:
85:e7:17:06:97:71:67:ba:a5:b1:13:8b:5f:40:16:cf:ab:dc:
df:22:47:ee:8e:36:68:41:57:4e:52:0a:30:a1:e4:7f:68:de:
6f:ff:09:69:2b:31:cc:27:9e:87:91:c9:4e:64:19:bd:df:8f:
ae:a7:b9:13:d9:91:75:ee:73:0c:bd:64:65:ab:b7:b3:02:1f:
4d:06:e9:89:c7:1c:68:7d:7b:de:ad:0c:45:81:51:ee:0c:76:
78:13:ea:fd:92:7b:59:c0:9b:da:0a:4d:48:59:e6:7e:ae:f4:
5f:b4:cc:8a:54:fa:8b:fa:94:a4:a9:f0:ba:6c:b6:ed:32:98:
83:db:62:a9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQJ9+jL42AErB5VVvhv8RD1fpgGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1
OTY4MDMyNDAeFw0yNjAyMDQwMTU4MTBaFw0yNzAyMDMwMjAzMTBaMDMxMTAvBgNV
BAMTKDdCMTM5NEE5M0E5RjZBMDNDRUU2NEZDMzk5NjkwMDgwRkQyQzIxRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfA7aAavy3pNY7M7n6vc6Y7beP
4EzeCf3sbkDmR1HZk7CMrrK9xTPAHdm4ygHF57SpiPm+paejRhNmsmiH76et+/ap
PwlZeT44N56AN3XTRZ1N/1FcabBl4fnVqmE7cumj9sGONVaDadCNInt5fKRhM3Yi
cZqwUhBkqqw7i6i73yXko4q3ufbkQ61GYPAVxb9VAHwXj3r7v9zleNtYdjb1HWqq
1uACPmzWzDUA4SxRljl4+ELocb9Pk4+tyFLePhrCd6UTXbV9cQ6KlNnM4dkZuhy+
upgvF2we5JHU44r6hIUQr/DCt/MHVQqm8h6M0JU3pqQMb24y17IJGESsxW+FAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUexOUqTqfagPO5k/DmWkAgP0sIfUwHwYDVR0j
BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1
NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4
MDMyNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MWU5ZGUyLWE0ZWMtNDdhMi05
YmI4LTEwODIxZGRhNjdmMy8wLzMxMzAzMzJlMzEzODM2MmUzOTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pgMA0GCSqG
SIb3DQEBCwUAA4IBAQAb4n2KBTB4tqwt5vMpOtU5IuPGzONm3STC+E5K+OG6VhHh
Qkrqgj1izmHNvxUWkf3gm+zUTG1398xGo+llUDxouJ1Y0IbFTz5faew4U0972gXR
rwFncduxyMYDOo39DEYSMyurHjglcm4lyX70r+G74YAJM2VyZbFSp9GrOy6F5xcG
l3FnuqWxE4tfQBbPq9zfIkfujjZoQVdOUgowoeR/aN5v/wlpKzHMJ56HkclOZBm9
34+up7kT2ZF17nMMvWRlq7ezAh9NBumJxxxofXverQxFgVHuDHZ4E+r9kntZwJva
Ck1IWeZ+rvRftMyKVPqL+pSkqfC6bLbtMpiD22Kp
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:09 2026 by rpki-client