
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
File: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (raw, json)
Hash identifier: GuEYcKomyfwrOeHZZh1kmfChePipQ8Um6pnOFE1mCGU=
Subject key identifier: 26:57:8C:7D:FF:5C:C3:A4:78:97:E8:AE:FA:F2:4F:56:ED:2B:2F:2F
Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial: 7CA56D37C39EE3439CC800AFA56B14A6B2FDADC9
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
Signing time: Fri 10 Apr 2026 11:00:03 +0000
ROA not before: Fri 10 Apr 2026 10:55:03 +0000
ROA not after: Fri 09 Apr 2027 11:00:03 +0000
asID: 149318
IP address blocks: 103.178.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a5:6d:37:c3:9e:e3:43:9c:c8:00:af:a5:6b:14:a6:b2:fd:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Validity
Not Before: Apr 10 10:55:03 2026 GMT
Not After : Apr 9 11:00:03 2027 GMT
Subject: CN=26578C7DFF5CC3A47897E8AEFAF24F56ED2B2F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:66:20:74:4e:20:1b:f4:9e:bd:30:b0:c1:
f2:f9:4d:63:58:10:c9:ee:48:2e:55:c3:81:62:a7:
2c:b6:6c:10:6e:fe:a1:69:9e:dc:03:2e:76:db:1f:
56:94:a3:42:38:32:b7:d4:6e:fc:22:c4:85:9c:28:
13:2d:66:e1:64:b2:e3:6a:99:7b:13:2b:4e:29:6b:
6e:94:02:33:e3:d0:91:d4:65:38:12:05:45:d7:5a:
f3:ce:40:eb:70:89:23:dc:b7:f1:0c:b5:3c:ba:f8:
8e:98:5e:ab:b1:10:77:c0:0c:30:53:4d:bf:98:af:
b3:c1:27:64:fb:7c:da:ef:87:57:d4:a9:36:12:07:
b6:a0:c8:35:e9:c9:05:d4:dd:e8:1f:1b:af:bb:77:
f7:aa:95:70:c0:be:b3:a4:89:88:05:35:33:10:d9:
89:0b:5d:06:cc:31:b1:83:21:d9:d9:09:39:d3:99:
04:91:e3:b2:ad:43:8d:98:b6:8a:66:ac:f7:59:e9:
8b:11:37:d3:40:62:3c:c2:91:be:39:fd:29:1d:d8:
25:f5:cf:f5:cc:16:25:d2:ce:ca:68:e2:59:7a:0a:
7e:eb:42:cd:f2:59:f4:f7:fd:4a:c6:e6:50:9b:ec:
c9:07:2b:49:81:45:17:c2:00:94:f8:9f:bd:91:9d:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:8C:7D:FF:5C:C3:A4:78:97:E8:AE:FA:F2:4F:56:ED:2B:2F:2F
X509v3 Authority Key Identifier:
keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:12:e2:1f:f8:81:81:ed:4e:02:af:03:86:83:b7:29:d8:f8:
39:2e:db:4f:60:96:39:bc:0b:1a:d3:60:fb:2c:62:4d:6b:d1:
e2:14:11:1f:58:de:96:0d:c8:82:1a:dd:27:5e:16:56:0e:4f:
fd:db:31:8a:01:c1:84:c3:16:00:e0:8b:ea:7f:82:6a:f9:4d:
b4:32:3d:60:8d:d2:dd:f2:d8:b8:d2:5e:85:c5:d4:ed:0d:e6:
17:12:79:5f:3b:96:bc:3e:c4:68:18:f0:6a:c0:a4:41:92:6f:
c2:d7:c4:fa:36:bf:ff:27:01:a8:a7:1c:c5:e2:42:cd:68:e9:
6a:7c:56:e0:bc:aa:22:5b:fa:f0:c4:ff:74:d6:e2:dc:e3:2b:
9b:8e:63:fa:45:b2:a5:af:b1:24:bf:69:6a:5a:1d:77:14:5e:
8e:fd:e2:9b:f0:c1:70:66:19:75:f5:7a:81:12:ef:d0:4a:1b:
fd:c3:6e:44:9b:49:a9:f5:d1:6d:7f:08:f2:f7:63:d6:b7:fa:
9e:89:62:59:62:56:b4:36:0a:26:a8:17:1e:9a:c4:83:53:d3:
43:f6:4b:8d:5e:87:62:1e:bd:61:c5:bd:bb:85:02:fb:dd:e1:
e7:ed:c9:3c:7b:dc:d8:b1:58:4e:11:9e:99:4b:1f:44:40:d1:
1b:ab:6b:63
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfKVtN8Oe40OcyACvpWsUprL9rckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5
MzUyMjg2QzAeFw0yNjA0MTAxMDU1MDNaFw0yNzA0MDkxMTAwMDNaMDMxMTAvBgNV
BAMTKDI2NTc4QzdERkY1Q0MzQTQ3ODk3RThBRUZBRjI0RjU2RUQyQjJGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jWYgdE4gG/SevTCwwfL5TWNY
EMnuSC5Vw4Fipyy2bBBu/qFpntwDLnbbH1aUo0I4MrfUbvwixIWcKBMtZuFksuNq
mXsTK04pa26UAjPj0JHUZTgSBUXXWvPOQOtwiSPct/EMtTy6+I6YXquxEHfADDBT
Tb+Yr7PBJ2T7fNrvh1fUqTYSB7agyDXpyQXU3egfG6+7d/eqlXDAvrOkiYgFNTMQ
2YkLXQbMMbGDIdnZCTnTmQSR47KtQ42YtopmrPdZ6YsRN9NAYjzCkb45/Skd2CX1
z/XMFiXSzspo4ll6Cn7rQs3yWfT3/UrG5lCb7MkHK0mBRRfCAJT4n72RnTt3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJleMff9cw6R4l+iu+vJPVu0rLy8wHwYDVR0j
BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2
NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy
Mjg2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDc1ZWY2LWEyNTEtNDdkZC04
ZGRhLWNhZGZmNDk3YTdlNS8wLzMxMzAzMzJlMzEzNzM4MmUzODM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7JVMA0GCSqG
SIb3DQEBCwUAA4IBAQCeEuIf+IGB7U4CrwOGg7cp2Pg5LttPYJY5vAsa02D7LGJN
a9HiFBEfWN6WDciCGt0nXhZWDk/92zGKAcGEwxYA4Ivqf4Jq+U20Mj1gjdLd8ti4
0l6FxdTtDeYXEnlfO5a8PsRoGPBqwKRBkm/C18T6Nr//JwGopxzF4kLNaOlqfFbg
vKoiW/rwxP901uLc4yubjmP6RbKlr7Ekv2lqWh13FF6O/eKb8MFwZhl19XqBEu/Q
Shv9w25Em0mp9dFtfwjy92PWt/qeiWJZYla0NgomqBcemsSDU9ND9kuNXodiHr1h
xb27hQL73eHn7ck8e9zYsVhOEZ6ZSx9EQNEbq2tj
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:19 2026 by rpki-client