
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa
File: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (raw, json)
Hash identifier: W+lLs4/k6241uH88gZbInuh3EL7X/7q/VzO2IOSYfhk=
Subject key identifier: 0E:42:3A:F9:6D:B1:A5:FD:F4:5E:51:39:56:6F:08:2F:42:AD:58:D8
Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial: 63F8029CFAEF0B5911D7851000939A37B1E81689
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa
Signing time: Fri 10 Apr 2026 11:00:03 +0000
ROA not before: Fri 10 Apr 2026 10:55:03 +0000
ROA not after: Fri 09 Apr 2027 11:00:03 +0000
asID: 149318
IP address blocks: 103.178.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f8:02:9c:fa:ef:0b:59:11:d7:85:10:00:93:9a:37:b1:e8:16:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Validity
Not Before: Apr 10 10:55:03 2026 GMT
Not After : Apr 9 11:00:03 2027 GMT
Subject: CN=0E423AF96DB1A5FDF45E5139566F082F42AD58D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:98:61:04:cf:75:b3:e0:01:fe:47:30:a6:
a1:03:60:b9:f7:7c:8c:76:d7:0f:d5:d8:61:37:98:
97:be:e0:00:a4:f3:04:24:35:70:62:0f:ff:17:0e:
e1:91:7e:59:ef:65:d8:29:e5:92:ab:4f:86:8f:72:
60:0b:50:65:29:b9:e4:50:42:c2:17:b7:bd:5e:37:
7d:98:4a:b2:91:4a:06:c4:58:23:cb:4c:52:bd:41:
ca:1a:50:ea:93:8d:5e:9a:90:0b:8b:0b:2f:af:f1:
16:9f:28:84:ac:f9:35:58:90:08:9a:56:33:40:ca:
2f:a7:47:cd:99:60:24:86:bd:85:14:13:6a:bd:ef:
e6:c0:24:c3:42:28:dd:d6:f9:07:f4:2d:08:55:30:
14:01:48:5c:23:83:67:bf:5f:3d:bb:c2:40:f7:f2:
c9:fd:5d:5b:58:30:91:7a:08:ea:80:b2:49:76:40:
5c:cd:33:61:6b:ba:23:7f:3e:1c:b0:6d:31:5f:bf:
e4:27:8a:d9:62:c2:b9:29:5e:24:dd:55:4a:f8:d9:
68:2f:78:7b:31:a6:e7:a1:28:45:25:cf:d0:07:d0:
54:9d:47:3f:5b:4f:ec:e3:99:51:aa:9e:d0:84:c0:
6b:99:cf:3a:31:44:7b:5d:5c:05:58:c1:96:2c:bf:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:42:3A:F9:6D:B1:A5:FD:F4:5E:51:39:56:6F:08:2F:42:AD:58:D8
X509v3 Authority Key Identifier:
keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.84.0/24
Signature Algorithm: sha256WithRSAEncryption
49:61:7c:ec:54:3b:97:ef:a4:8e:d1:91:50:ca:d5:2d:dc:4d:
cd:ea:36:63:af:65:cc:09:b1:e7:85:60:df:d3:ba:f7:f1:58:
3a:6e:fa:c2:84:84:2e:ae:36:09:da:0c:9e:05:12:dc:e1:f6:
d2:a8:54:ef:32:70:7a:5e:2c:19:08:ef:b0:7b:1c:91:73:ab:
34:eb:00:ab:e3:ea:5d:d8:1a:66:12:ee:a3:d9:41:7f:06:af:
d5:92:ce:7a:e7:ea:2a:89:1c:60:b7:3a:65:0c:4c:9d:60:a8:
2a:19:0b:51:87:43:d5:4f:3f:d1:ca:1d:4d:75:56:25:3b:ad:
fe:9e:cd:e2:1c:eb:4d:37:17:1b:23:97:a8:55:39:ca:16:e5:
78:7c:cf:da:a7:67:a7:7e:0d:25:a7:5e:07:1b:2f:e8:7b:56:
57:11:4b:c3:a5:f4:77:e8:d9:41:57:5a:2e:bb:6d:00:18:4a:
14:91:22:22:f5:97:1c:68:39:de:d5:49:f2:50:5c:4e:ed:b6:
33:ba:c3:cb:6d:13:70:ca:1c:1f:6d:91:28:4d:ed:38:d9:9d:
04:9b:96:cc:a7:0a:c9:8a:0e:90:10:0c:e6:f6:3a:cb:28:cf:
92:9c:e9:da:de:29:16:df:bd:1a:fe:a8:d8:17:8a:25:39:d7:
23:1d:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:26 2026 by rpki-client