
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
File: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier: U7NnTgw4+RWSqCZvvYrAIpdq9+m5qm4ziARKzADWCYw=
Subject key identifier: C1:5A:4C:B5:0A:EB:49:C2:B2:0D:BD:56:33:33:43:68:01:CC:28:EE
Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Certificate serial: 425B86C693E7B4B87722FF2C1C0B78B42A94BFEB
Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
Signing time: Fri 20 Feb 2026 19:00:02 +0000
ROA not before: Fri 20 Feb 2026 18:55:02 +0000
ROA not after: Fri 19 Feb 2027 19:00:02 +0000
asID: 6939
IP address blocks: 103.162.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl
rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5b:86:c6:93:e7:b4:b8:77:22:ff:2c:1c:0b:78:b4:2a:94:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Validity
Not Before: Feb 20 18:55:02 2026 GMT
Not After : Feb 19 19:00:02 2027 GMT
Subject: CN=C15A4CB50AEB49C2B20DBD563333436801CC28EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:ce:fe:40:21:9e:36:c7:46:7a:05:2c:57:
a0:86:a2:0f:f3:d5:4a:f2:6e:0f:cd:f3:b8:7e:d0:
01:57:8e:55:d2:42:0f:e9:01:d2:7c:ea:7d:ba:55:
db:38:9c:81:95:18:31:69:70:63:f3:e2:cc:07:09:
54:2f:40:60:01:26:03:bf:2a:0f:ea:0e:43:e2:09:
9b:90:47:fa:76:32:b5:16:ed:fa:d6:7d:95:f5:ac:
50:83:20:91:97:ad:46:d2:c2:c2:06:00:94:7d:ca:
29:b5:6c:4e:5b:4f:fd:d7:27:87:22:8e:f3:86:ee:
05:02:b7:14:d9:b2:b6:ba:32:cd:a7:3d:b4:af:01:
59:3b:9a:37:4b:37:7f:90:f1:07:66:30:16:ba:8d:
30:93:38:24:dc:76:9e:85:bf:25:bc:d1:27:0a:ab:
5b:d3:ea:18:a5:a9:53:92:9e:ea:1c:da:b9:77:d9:
db:a2:95:a9:86:f7:51:a6:e5:cc:2a:ae:1e:cf:a4:
74:88:e1:55:9d:94:bc:78:4f:98:cb:2b:9d:15:39:
5a:1c:c4:46:3c:1f:c1:3a:78:df:17:4d:6e:05:5d:
35:4a:6f:d5:53:5d:94:84:a3:9f:a3:65:6e:ba:d7:
ac:50:41:d8:2f:cb:41:37:cd:5b:d6:e9:04:79:02:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:4C:B5:0A:EB:49:C2:B2:0D:BD:56:33:33:43:68:01:CC:28:EE
X509v3 Authority Key Identifier:
keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.1.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0e:2e:a1:73:db:2c:5d:f4:9a:bc:37:85:f5:65:ac:1e:10:
5a:0d:40:67:e7:9d:69:76:42:50:b6:8e:5b:82:e4:d4:96:53:
b6:5f:04:2d:73:55:e4:f3:b8:59:b4:fc:d7:b7:53:63:88:68:
2f:2c:7a:3b:16:d1:0a:8c:07:b7:8d:6e:6e:06:7d:bc:bc:53:
54:d9:f3:98:e9:29:bf:44:b4:b3:e0:a3:33:99:61:6b:cb:23:
64:d7:b5:92:a8:bc:5c:8f:e7:b5:5c:3f:38:2c:6a:75:4e:b4:
69:04:f3:33:45:22:b1:99:c6:32:e4:0e:99:02:4e:76:7e:88:
4f:03:52:b4:87:61:73:31:f0:eb:38:b4:8f:ca:70:eb:56:78:
9f:fd:af:23:46:16:0b:d0:bd:60:1d:1a:03:41:26:fe:91:25:
ef:bf:b5:95:7e:a3:d6:24:8b:52:a0:60:4f:05:31:14:28:1e:
46:7e:2e:58:07:e4:13:2e:e9:08:81:8e:9e:13:f5:71:7a:00:
f8:72:93:e8:2a:b7:2c:34:a3:1d:28:00:72:2e:10:dc:51:80:
a6:0d:57:ec:28:e9:c2:64:73:28:28:2d:69:72:04:e3:84:54:
3a:34:40:34:78:35:d2:d4:42:e8:a9:7b:30:4d:c7:87:2c:8c:
c4:b3:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:24 2026 by rpki-client