
$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
File: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (raw, json)
Hash identifier: eF36F2O8aJxtQTB4dhuIgesGEoNbnpucx3HVN8PdcpY=
Subject key identifier: 39:3D:D0:64:A8:08:D8:4C:07:36:29:8F:35:A0:F7:BD:B3:07:DF:DB
Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Certificate serial: 27E5E08212EC4A6F94196E5C196E989767F166C0
Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
Signing time: Tue 24 Feb 2026 09:48:53 +0000
ROA not before: Tue 24 Feb 2026 09:43:53 +0000
ROA not after: Tue 23 Feb 2027 09:48:53 +0000
asID: 138891
IP address blocks: 103.140.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl
rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e5:e0:82:12:ec:4a:6f:94:19:6e:5c:19:6e:98:97:67:f1:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Validity
Not Before: Feb 24 09:43:53 2026 GMT
Not After : Feb 23 09:48:53 2027 GMT
Subject: CN=393DD064A808D84C0736298F35A0F7BDB307DFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:57:e4:0b:a7:07:74:e2:15:5b:1f:57:4d:
ff:74:df:72:a0:04:5e:22:07:ae:f0:c0:df:ed:85:
0b:f1:e9:ff:9c:b7:25:5f:af:ff:45:43:fc:bf:cc:
7e:48:7e:d2:a8:4f:1e:51:f6:57:c9:ab:b4:86:c3:
7a:de:5b:d4:dc:55:1d:0d:0a:91:9a:d3:69:b4:61:
ad:7a:d3:c2:7a:b9:1a:5c:ef:f8:a4:29:5e:f7:d9:
f7:30:5b:b8:9c:3d:f7:43:ad:3c:d8:fd:57:b0:4d:
b1:1b:7e:3a:e3:58:ba:f5:ec:f9:4e:12:58:5e:c9:
c4:38:ff:5f:0f:f5:c5:a0:ce:34:2a:4e:30:4c:77:
c9:79:5a:62:35:e7:2a:71:83:37:bc:67:25:63:4c:
1d:95:e7:94:a4:f4:8a:fd:6a:09:27:41:47:25:1c:
39:ba:e1:6b:2e:1d:44:51:87:3e:60:2b:bc:b8:75:
40:7a:e4:3f:95:10:7c:32:4f:56:98:a0:48:82:88:
1d:70:41:67:19:28:59:ef:54:27:00:1b:f3:74:c3:
05:db:cb:fc:a4:f0:e3:cc:57:9d:66:df:c2:66:ea:
f6:f7:71:42:06:59:95:d7:7d:15:3d:b7:3a:b5:95:
0e:86:12:0e:eb:30:4a:79:01:2e:f2:98:c5:91:9b:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:D0:64:A8:08:D8:4C:07:36:29:8F:35:A0:F7:BD:B3:07:DF:DB
X509v3 Authority Key Identifier:
keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ab:be:1a:6a:01:21:82:b4:ad:17:37:cc:d0:1d:8e:52:dc:
98:63:d8:0a:bc:d6:a4:37:97:a7:b6:12:09:6f:6e:57:43:67:
02:17:d2:98:8e:db:30:7c:a3:a4:6d:ec:72:75:4b:dd:15:12:
e0:9a:29:2f:e7:38:81:46:e4:44:ff:45:fd:bb:3e:e1:7b:48:
1f:be:e4:2f:65:f0:6c:b5:d7:ba:3b:a2:57:15:06:7e:16:19:
df:20:69:b1:e9:2f:90:57:90:4e:42:be:df:48:4d:6d:d9:e6:
2e:b0:81:f6:bc:74:56:5f:74:07:3a:ca:47:23:bf:0d:52:4b:
ec:ca:0d:7f:0f:74:23:6f:d9:b5:7c:b6:f9:e8:5a:6a:23:2c:
59:ea:a6:6f:b2:d9:77:29:4a:ea:6a:6f:7b:ec:08:25:34:97:
b7:6a:54:e9:6c:7e:c5:da:7d:b9:ae:e3:f0:b7:15:32:cd:36:
1f:bb:ee:0a:b4:e0:cd:4a:3e:6d:2a:50:42:7c:10:e9:c8:59:
28:c9:87:c9:b7:e8:fc:a6:da:78:d5:ef:9c:8c:a2:aa:19:21:
e3:e6:a7:fd:4d:17:9c:ac:93:0a:76:b8:a8:0f:72:8d:a5:07:
70:3f:58:c4:89:9c:2d:02:e4:d9:eb:a5:6d:e8:2c:58:72:9a:
70:64:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:03:49 2026 by rpki-client