
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
File: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (raw, json)
Hash identifier: /Fhxy2YkZ3i/kGpUap0g80MdqacR/7CVzqXxyBvq/j8=
Subject key identifier: E8:7F:2E:B2:BF:57:20:6C:26:01:4A:97:A3:15:A8:95:2B:A6:9F:06
Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial: 70182AB77993F8C7F3BF666E0A6D4AAAD7AD861A
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
Signing time: Wed 18 Feb 2026 07:03:19 +0000
ROA not before: Wed 18 Feb 2026 06:58:19 +0000
ROA not after: Wed 17 Feb 2027 07:03:19 +0000
asID: 150537
IP address blocks: 103.81.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl
rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:18:2a:b7:79:93:f8:c7:f3:bf:66:6e:0a:6d:4a:aa:d7:ad:86:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Validity
Not Before: Feb 18 06:58:19 2026 GMT
Not After : Feb 17 07:03:19 2027 GMT
Subject: CN=E87F2EB2BF57206C26014A97A315A8952BA69F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:47:29:58:52:bd:63:13:af:04:5c:20:47:
80:ce:6b:7b:a9:59:f3:f4:78:5d:d0:4c:67:13:9f:
db:08:39:ff:e9:86:51:fe:83:f2:84:40:dd:69:72:
5a:ff:d7:57:c8:a8:38:19:93:70:bd:38:40:84:44:
2d:7d:8a:9d:25:a8:87:d5:66:65:d7:df:9c:39:47:
91:33:47:60:d1:43:f7:55:e8:e3:25:1a:2b:51:fd:
12:8f:72:35:c7:4d:57:b4:e0:4c:5a:ac:fb:b4:14:
06:25:b6:df:4a:8b:28:87:c2:2a:d2:6b:a1:64:23:
12:89:f6:46:28:76:b0:34:e3:19:f6:0c:b3:32:f0:
82:d9:1f:bc:7e:0f:34:45:7c:16:c9:52:00:22:4c:
d2:09:6d:d6:08:2f:9e:70:f9:dc:7a:25:25:9b:e5:
57:64:a9:40:a9:01:2b:93:66:fc:6f:5a:4b:37:41:
2a:3f:2b:03:76:4f:72:49:60:5b:09:74:fd:21:e7:
18:8b:81:39:48:7f:06:27:17:df:e7:5f:0f:36:92:
66:43:e3:51:9f:37:f7:ff:0c:c8:2f:ba:82:19:29:
37:07:c0:30:60:c8:bb:b6:a3:9d:f8:25:d9:2a:7d:
a9:3b:18:25:a6:4a:c1:73:96:54:92:cb:5c:e7:3b:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:2E:B2:BF:57:20:6C:26:01:4A:97:A3:15:A8:95:2B:A6:9F:06
X509v3 Authority Key Identifier:
keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.81.253.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b0:74:a0:79:05:3b:97:ae:4c:a9:ae:9e:1f:1e:09:cf:8d:
1f:2b:c3:d6:44:5a:9d:5f:8e:f5:07:be:4d:8c:92:c1:6e:35:
09:ff:37:d1:30:f1:e7:ce:52:4b:62:a2:e2:96:3c:93:5d:c1:
c5:19:d5:d1:73:31:74:45:69:ac:5f:04:83:1a:1a:a1:07:c0:
7e:52:14:61:9e:a8:17:21:2d:d4:cb:97:51:c9:d2:7a:8a:09:
54:75:cc:f7:5e:f7:43:20:7c:b0:e9:c0:90:1d:e4:5f:1d:2f:
88:17:ca:f4:b2:75:57:0b:38:48:e2:94:7c:df:37:ed:84:cc:
89:cc:85:84:a0:6b:f5:17:db:ab:c8:e4:bc:16:b6:93:ac:e1:
55:63:09:37:98:bd:24:25:58:ee:03:29:e4:a5:2e:50:2a:ed:
cd:7f:fb:bf:bd:e5:3f:a6:c1:c2:e6:02:16:73:81:e4:91:a4:
b5:e4:f0:4e:60:c4:cc:e8:75:a1:86:f0:3e:bd:a6:84:c0:85:
ed:9e:ea:a5:b4:83:cf:fd:d9:c4:21:3e:ae:17:bc:cf:1c:82:
a7:34:ed:0d:4c:48:41:66:f3:12:fd:ba:70:89:aa:10:ac:0b:
72:79:4d:06:14:ad:3e:ec:cc:98:ea:0b:b2:99:31:aa:76:0a:
3c:a7:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:08 2026 by rpki-client