
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
File: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (raw, json)
Hash identifier: R+4ofBcwSyTe84XGWAH/VXGrbEs8rkXJ1xMlhzrX02U=
Subject key identifier: DF:ED:1B:05:4C:70:E6:18:6E:A4:03:65:D0:04:10:F5:75:F5:EE:2C
Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial: 11292E2F1E9A5631B238A85477EDBBB56EE75AFF
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
Signing time: Thu 16 Apr 2026 03:00:01 +0000
ROA not before: Thu 16 Apr 2026 02:55:01 +0000
ROA not after: Thu 15 Apr 2027 03:00:01 +0000
asID: 141675
IP address blocks: 103.158.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 12:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:29:2e:2f:1e:9a:56:31:b2:38:a8:54:77:ed:bb:b5:6e:e7:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Validity
Not Before: Apr 16 02:55:01 2026 GMT
Not After : Apr 15 03:00:01 2027 GMT
Subject: CN=DFED1B054C70E6186EA40365D00410F575F5EE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:91:af:85:76:c3:bf:f9:19:05:d1:f1:99:
98:b5:ec:d9:63:20:1e:99:20:08:28:7f:40:37:4d:
ba:93:38:cc:8b:d5:3d:7f:36:b0:c7:42:a6:b2:8e:
09:13:60:6d:ff:21:bf:81:08:b3:08:8e:e7:e4:ef:
c4:e3:94:8e:c0:0c:cb:96:69:c9:6b:ef:62:6b:6f:
16:71:c6:1b:05:91:aa:9e:63:5a:e7:76:05:78:0c:
47:0b:2a:35:11:bb:62:9e:2d:49:a4:ff:7a:6c:ee:
aa:27:49:1c:15:a0:19:e8:30:ee:1a:fb:75:e7:53:
5d:2f:21:a5:a1:1c:25:05:ab:3d:ce:61:55:9b:a5:
d0:3b:55:03:27:de:67:e7:25:8f:13:3b:c0:7d:2e:
5e:ef:fe:24:68:9a:1f:a8:6d:fb:a3:a5:e0:5b:49:
29:d5:3c:a7:72:d0:e1:ea:5f:d1:82:d6:f3:76:4a:
9c:dd:9e:f0:b5:d5:b5:cc:77:10:69:85:52:e5:32:
5c:81:46:78:21:89:73:db:b2:d6:43:ba:8d:d2:61:
24:b0:a7:40:7f:97:47:3d:28:09:5f:d2:18:ce:77:
c8:ef:c0:dd:04:3e:c6:d4:50:f7:fa:c2:3d:25:1a:
03:d5:d4:e1:61:0e:2b:74:b9:43:aa:47:33:9c:b6:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:1B:05:4C:70:E6:18:6E:A4:03:65:D0:04:10:F5:75:F5:EE:2C
X509v3 Authority Key Identifier:
keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e1:7e:2b:66:bc:8d:36:81:fd:5e:e9:41:41:d8:f0:cb:55:
59:4a:9b:b0:10:24:93:b0:ee:9e:85:a5:ac:a2:dd:8f:18:f4:
02:a5:6b:2d:c0:b3:1c:ce:8c:34:58:87:a5:a3:e8:61:d0:1c:
ed:00:9e:a7:a6:39:31:5f:06:cc:be:92:fa:ff:35:69:49:2c:
be:9a:ce:2b:c5:8e:f9:6b:4d:ed:87:5a:03:cf:68:c4:d6:a3:
35:7e:07:8a:84:2b:61:bc:6a:db:80:08:4e:ec:d8:0b:22:46:
2a:14:09:7f:01:b6:2a:76:6f:dc:f9:9d:f1:b2:59:99:b3:39:
d6:4f:25:32:83:69:54:4c:b5:5d:c1:9a:12:2b:6d:9b:ba:95:
68:73:67:41:a6:99:4c:da:2d:5a:b0:71:a9:93:ab:fb:71:3d:
88:19:30:8e:87:34:ec:0a:84:01:5a:8e:7e:2e:d4:49:52:f3:
65:7c:94:35:1f:91:88:74:ff:e1:e3:b3:bc:ad:e9:fe:f9:ad:
34:f3:d0:82:ae:f2:6e:09:f7:1d:b7:a2:e9:49:97:55:75:b9:
f1:95:32:5b:4e:30:da:d3:bf:25:80:16:73:1d:6f:87:34:52:
2a:4a:0a:40:22:4e:05:4b:6c:d2:be:87:2f:a5:b2:5d:4a:74:
8f:1a:ea:6c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUESkuLx6aVjGyOKhUd+27tW7nWv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB
MDk3MzUzQjAeFw0yNjA0MTYwMjU1MDFaFw0yNzA0MTUwMzAwMDFaMDMxMTAvBgNV
BAMTKERGRUQxQjA1NEM3MEU2MTg2RUE0MDM2NUQwMDQxMEY1NzVGNUVFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJpGvhXbDv/kZBdHxmZi17Nlj
IB6ZIAgof0A3TbqTOMyL1T1/NrDHQqayjgkTYG3/Ib+BCLMIjufk78TjlI7ADMuW
aclr72JrbxZxxhsFkaqeY1rndgV4DEcLKjURu2KeLUmk/3ps7qonSRwVoBnoMO4a
+3XnU10vIaWhHCUFqz3OYVWbpdA7VQMn3mfnJY8TO8B9Ll7v/iRomh+obfujpeBb
SSnVPKdy0OHqX9GC1vN2SpzdnvC11bXMdxBphVLlMlyBRnghiXPbstZDuo3SYSSw
p0B/l0c9KAlf0hjOd8jvwN0EPsbUUPf6wj0lGgPV1OFhDit0uUOqRzOctlMbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3+0bBUxw5hhupANl0AQQ9XX17iwwHwYDVR0j
BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx
OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3
MzUzQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04
MTYwLWE5ZThhZmUzNTc5Zi8wLzMxMzAzMzJlMzEzNTM4MmUzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ54aMA0GCSqG
SIb3DQEBCwUAA4IBAQAM4X4rZryNNoH9XulBQdjwy1VZSpuwECSTsO6ehaWsot2P
GPQCpWstwLMczow0WIelo+hh0BztAJ6npjkxXwbMvpL6/zVpSSy+ms4rxY75a03t
h1oDz2jE1qM1fgeKhCthvGrbgAhO7NgLIkYqFAl/AbYqdm/c+Z3xslmZsznWTyUy
g2lUTLVdwZoSK22bupVoc2dBpplM2i1asHGpk6v7cT2IGTCOhzTsCoQBWo5+LtRJ
UvNlfJQ1H5GIdP/h47O8ren++a0089CCrvJuCfcdt6LpSZdVdbnxlTJbTjDa078l
gBZzHW+HNFIqSgpAIk4FS2zSvocvpbJdSnSPGups
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:55:21 2026 by rpki-client