
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32342d3234203d3e20313530393832.roa
File: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (raw, json)
Hash identifier: wCS0nyyn34cApWcZ5FUBxPZYDFIlv5DQUxLaCfWoRF4=
Subject key identifier: 06:9B:9F:CC:00:4C:38:5F:DC:E8:17:10:83:C9:CE:35:2B:48:E5:62
Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Certificate serial: 475CFE1D2B2CFA01C9F4140658C917CC1CE2238D
Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32342d3234203d3e20313530393832.roa
Signing time: Sat 21 Feb 2026 16:00:00 +0000
ROA not before: Sat 21 Feb 2026 15:55:00 +0000
ROA not after: Sat 20 Feb 2027 16:00:00 +0000
asID: 150982
IP address blocks: 103.21.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5c:fe:1d:2b:2c:fa:01:c9:f4:14:06:58:c9:17:cc:1c:e2:23:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Validity
Not Before: Feb 21 15:55:00 2026 GMT
Not After : Feb 20 16:00:00 2027 GMT
Subject: CN=069B9FCC004C385FDCE8171083C9CE352B48E562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:6b:7e:83:6c:84:94:62:71:f2:be:a5:ff:
e9:e5:81:0b:ad:6b:a5:b4:0b:39:f2:17:8d:55:4a:
ae:d7:88:d0:87:88:44:b2:4a:01:78:12:1d:62:1f:
23:20:a8:5d:d5:88:61:4f:ea:1b:b9:b7:47:59:e5:
76:b6:69:61:63:2c:4c:15:d6:ce:28:2e:3d:96:04:
ab:45:e8:31:ca:85:cb:dc:56:3e:3f:23:7d:2c:f7:
4f:3e:79:1c:28:d9:c6:b9:98:d6:23:7e:92:6d:59:
7f:9f:40:94:9b:35:e1:80:a3:04:13:94:a1:f6:3f:
55:d3:96:db:30:49:42:7f:1a:05:bd:c1:42:02:bd:
30:c4:c0:23:70:fc:d1:e9:77:96:86:ad:13:96:07:
15:b7:4a:a8:6f:66:4e:c7:1d:a5:ae:ea:ed:cd:a6:
b7:ec:58:b2:fd:0b:2d:f4:89:8a:b2:60:d1:e7:e9:
c5:d4:79:b8:6e:61:2c:ab:88:80:ae:52:7a:78:67:
e5:a9:67:e0:d7:91:73:17:6b:c3:00:ca:89:6e:8d:
70:54:0e:7e:a1:6e:20:f2:75:9e:61:b1:18:d0:d4:
36:56:1f:e1:68:09:52:e0:d6:9e:40:c3:9d:24:45:
cc:be:85:40:2a:97:49:8e:09:79:3d:1c:67:58:a5:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9B:9F:CC:00:4C:38:5F:DC:E8:17:10:83:C9:CE:35:2B:48:E5:62
X509v3 Authority Key Identifier:
keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32342d3234203d3e20313530393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:65:d1:72:5a:9f:73:3a:0c:b3:b1:12:da:d1:bd:04:b4:ab:
b4:f4:66:b2:e2:f3:82:a7:51:08:0e:c4:d4:3c:2b:9a:c5:a4:
44:a8:33:7d:aa:56:c4:ef:20:26:a2:e2:d4:c0:0e:36:58:9e:
13:20:00:31:ce:c9:f1:e2:e8:49:8b:67:7b:ec:95:04:7f:da:
f3:5d:f2:da:f0:2b:42:a6:08:01:d6:e2:63:6a:b8:41:c3:42:
3e:bb:44:8e:e0:4f:9d:07:38:a0:5e:ed:b4:33:3e:4e:eb:c2:
8c:03:08:65:90:ef:63:5c:14:a9:fe:b5:df:ba:80:9f:91:41:
f6:62:3f:f5:c8:c7:db:26:04:a2:91:bd:6d:c8:2f:15:4a:ac:
9b:25:a9:f7:c4:22:d4:f2:ee:fe:76:23:d4:73:e0:24:ba:69:
f2:b2:b1:8a:de:e6:3a:8d:dd:35:bc:b1:47:79:86:4a:1f:11:
9c:f4:e2:55:1b:b8:13:e0:da:4d:a4:e5:e8:e0:3b:5d:df:40:
0f:49:a9:81:ce:04:1b:4f:36:7d:3a:a5:71:18:33:91:d2:ef:
07:4a:2a:ce:6d:06:80:7d:68:5a:71:1a:47:ad:f0:d6:4a:34:
e3:2c:48:00:ff:86:e3:9b:9a:1d:a8:a3:cc:a9:d0:21:f4:68:
cc:45:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:42:52 2026 by rpki-client