
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32332d3233203d3e20313530393832.roa
File: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (raw, json)
Hash identifier: gwbJnPHpSeHg+TMGbvaYpRRpr3Bq8iLm10t802UwTG4=
Subject key identifier: BA:1F:4F:D0:76:F8:54:EC:7B:32:DB:80:FF:76:14:62:AE:91:5C:0C
Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Certificate serial: 45283A5EABEFC4B4027A4140A6100BE50593E89D
Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32332d3233203d3e20313530393832.roa
Signing time: Fri 20 Feb 2026 07:00:00 +0000
ROA not before: Fri 20 Feb 2026 06:55:00 +0000
ROA not after: Fri 19 Feb 2027 07:00:00 +0000
asID: 150982
IP address blocks: 103.21.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:28:3a:5e:ab:ef:c4:b4:02:7a:41:40:a6:10:0b:e5:05:93:e8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Validity
Not Before: Feb 20 06:55:00 2026 GMT
Not After : Feb 19 07:00:00 2027 GMT
Subject: CN=BA1F4FD076F854EC7B32DB80FF761462AE915C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:e4:a1:17:00:42:b4:fb:78:a8:0c:4c:c4:
3d:d7:b9:52:44:e7:64:47:8b:5c:1e:07:53:b4:ca:
84:4d:5f:39:9a:84:6e:a6:ee:bf:f3:d1:bd:31:bd:
54:ed:f3:17:dd:0a:aa:45:cd:63:95:bd:90:9e:10:
7b:9e:93:61:47:7c:e7:6b:5d:08:9a:f2:ad:b6:a0:
f9:f1:22:dc:27:03:8d:88:89:81:a6:03:d7:d7:50:
21:39:94:24:4f:57:60:98:3d:77:aa:84:12:58:ee:
2e:b3:4f:79:9a:28:ae:a3:86:4b:f2:86:ee:16:90:
b9:17:e3:c9:df:6c:83:0f:01:83:73:b5:9c:a3:df:
66:c2:89:41:7f:0e:70:45:a4:19:37:be:91:6e:8c:
60:0d:f3:cc:79:c4:1f:3d:79:fc:1a:72:a9:95:cf:
be:a5:68:64:f3:1e:d8:73:fa:37:79:46:72:a2:dd:
06:c2:80:b2:9a:27:d2:74:50:96:0c:6e:12:b7:24:
1e:7b:42:81:74:78:95:67:ab:ae:24:a8:ff:b5:95:
2d:00:a5:ae:4e:e0:fd:b6:7f:7e:e2:95:df:7e:6b:
e9:44:7d:88:49:7a:be:1f:22:b6:b4:ad:8b:df:22:
3c:52:a8:70:c9:f0:ac:40:91:1d:4e:00:4d:5f:e2:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:4F:D0:76:F8:54:EC:7B:32:DB:80:FF:76:14:62:AE:91:5C:0C
X509v3 Authority Key Identifier:
keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32332d3233203d3e20313530393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.64.0/23
Signature Algorithm: sha256WithRSAEncryption
98:84:98:ef:ee:be:91:79:62:3d:52:b0:fd:04:cc:ee:9d:27:
b4:a4:c9:5d:9a:ce:a2:3b:34:53:0d:40:65:d5:c9:24:2c:4d:
12:93:35:eb:94:00:57:46:71:99:8a:a3:08:42:29:5a:8d:d3:
51:ef:d2:cf:74:17:9b:77:28:e1:5c:7a:fc:42:20:8a:71:c5:
80:8a:c8:34:4f:7b:d5:5d:49:d9:8f:71:a5:6a:59:a3:5f:c5:
cd:02:2c:2b:46:40:31:cb:62:48:eb:80:0d:ca:20:97:9e:c2:
8f:31:75:d5:d0:b3:89:67:89:cf:ff:88:10:f5:c3:ad:a4:56:
57:3f:a8:9a:13:80:12:31:74:52:7e:62:cc:a2:c3:14:c9:dd:
78:09:d3:51:0a:4a:5c:3e:84:bd:2c:e9:77:17:75:3a:07:8d:
a0:b0:7b:a9:2d:b6:9e:52:e0:07:99:55:8d:46:cb:a0:5f:71:
26:ac:8b:4c:82:6f:93:36:2d:96:68:1e:be:c7:4f:cf:82:49:
1a:cb:90:88:c6:f1:8c:67:ee:bd:d9:e2:0d:4a:fe:7f:d4:59:
1b:8a:ae:2c:85:6a:89:32:57:3a:d0:89:5e:fa:1f:51:9d:09:
08:d9:e9:7c:2c:23:ef:91:9e:43:2b:7f:1a:47:b5:bd:af:49:
94:6a:7d:c8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURSg6XqvvxLQCekFAphAL5QWT6J0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG
RjRBMDc4RjAeFw0yNjAyMjAwNjU1MDBaFw0yNzAyMTkwNzAwMDBaMDMxMTAvBgNV
BAMTKEJBMUY0RkQwNzZGODU0RUM3QjMyREI4MEZGNzYxNDYyQUU5MTVDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnl+ShFwBCtPt4qAxMxD3XuVJE
52RHi1weB1O0yoRNXzmahG6m7r/z0b0xvVTt8xfdCqpFzWOVvZCeEHuek2FHfOdr
XQia8q22oPnxItwnA42IiYGmA9fXUCE5lCRPV2CYPXeqhBJY7i6zT3maKK6jhkvy
hu4WkLkX48nfbIMPAYNztZyj32bCiUF/DnBFpBk3vpFujGAN88x5xB89efwacqmV
z76laGTzHthz+jd5RnKi3QbCgLKaJ9J0UJYMbhK3JB57QoF0eJVnq64kqP+1lS0A
pa5O4P22f37ild9+a+lEfYhJer4fIra0rYvfIjxSqHDJ8KxAkR1OAE1f4vCRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuh9P0Hb4VOx7MtuA/3YUYq6RXAwwHwYDVR0j
BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4
RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB
MDc4Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2YmVjOGU5LTY1NjgtNDc4ZC1i
ZDI2LWY2ZTc3Nzg3NTUxMS8wLzMxMzAzMzJlMzIzMTJlMzYzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMDM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcVQDANBgkqhkiG
9w0BAQsFAAOCAQEAmISY7+6+kXliPVKw/QTM7p0ntKTJXZrOojs0Uw1AZdXJJCxN
EpM165QAV0ZxmYqjCEIpWo3TUe/Sz3QXm3co4Vx6/EIginHFgIrINE971V1J2Y9x
pWpZo1/FzQIsK0ZAMctiSOuADcogl57CjzF11dCziWeJz/+IEPXDraRWVz+omhOA
EjF0Un5izKLDFMndeAnTUQpKXD6EvSzpdxd1OgeNoLB7qS22nlLgB5lVjUbLoF9x
JqyLTIJvkzYtlmgevsdPz4JJGsuQiMbxjGfuvdniDUr+f9RZG4quLIVqiTJXOtCJ
XvofUZ0JCNnpfCwj75GeQyt/Gke1va9JlGp9yA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:47 2026 by rpki-client