
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
File: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: 8uslDq+EkJlCY+MtyQFy4AEhhci2PaD2xXMS8hJIQuw=
Subject key identifier: CE:E6:E1:BF:A7:3F:66:B8:97:8D:BC:E8:17:07:AF:F7:40:D8:B4:CB
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 296F936FFBF8A07864106CEC74D4D084336767DB
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
Signing time: Tue 03 Feb 2026 07:00:00 +0000
ROA not before: Tue 03 Feb 2026 06:55:00 +0000
ROA not after: Tue 02 Feb 2027 07:00:00 +0000
asID: 38496
IP address blocks: 103.90.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6f:93:6f:fb:f8:a0:78:64:10:6c:ec:74:d4:d0:84:33:67:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Feb 3 06:55:00 2026 GMT
Not After : Feb 2 07:00:00 2027 GMT
Subject: CN=CEE6E1BFA73F66B8978DBCE81707AFF740D8B4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:4f:ff:12:c0:f0:6e:e4:f0:0b:59:2c:c5:
d6:1f:ab:b2:9a:a3:6c:c9:36:2f:1e:39:aa:0c:c7:
aa:d9:18:fb:50:53:aa:6f:7e:e5:5f:26:06:5f:67:
1a:93:66:0b:aa:64:83:f1:d4:75:7b:76:d2:84:ef:
4f:4e:c0:4e:48:f2:69:89:c0:c9:be:a1:0c:94:72:
53:2e:45:4c:e4:48:ef:1e:c4:30:c5:1b:51:af:8c:
36:ac:80:b0:be:b1:3b:67:1a:25:dd:64:d7:f0:61:
a2:18:e1:ea:ee:1b:62:1e:76:f3:7a:28:65:0f:f6:
68:2c:13:5d:3a:87:ba:62:48:86:5f:0d:c8:b7:b5:
1e:7f:a0:aa:e0:cb:3b:94:40:89:07:55:85:33:ae:
13:44:69:99:d9:d7:b9:c1:b8:5e:be:b7:36:e2:62:
26:d9:90:27:64:3b:9b:ff:57:8d:0e:e6:4b:68:83:
cc:b5:c5:3a:3c:09:3c:f0:59:d8:48:71:1a:c1:18:
fc:05:cd:40:ab:a5:19:ce:a5:3a:6a:ef:22:ff:5e:
b1:1a:dc:d1:bb:3e:5b:f8:c5:6e:6a:61:b4:e7:40:
f9:ac:a6:63:69:eb:3b:e7:46:42:1b:93:e2:82:c5:
96:16:d6:41:c7:8d:66:2e:8a:c4:c2:da:88:cd:9d:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:E1:BF:A7:3F:66:B8:97:8D:BC:E8:17:07:AF:F7:40:D8:B4:CB
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.252.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a8:ec:98:41:51:26:c9:b8:61:a7:fa:ee:58:a0:33:15:6a:
a7:ea:b2:75:49:0d:8e:f3:b7:71:9a:25:5c:10:cb:2e:43:37:
e4:dd:d6:45:69:d1:dc:68:e6:b8:1c:a0:e3:e7:af:07:5d:03:
37:24:c3:31:dc:68:a4:c7:bd:6d:c9:8f:1c:86:23:93:93:73:
c4:36:11:f1:b5:4c:a3:3e:82:77:de:8f:9d:5b:31:7f:15:e7:
65:f7:b6:7c:ec:d0:86:2f:b6:35:5b:9a:a9:00:b0:8e:cd:23:
eb:33:16:1d:78:03:f4:5f:23:e5:31:19:c8:38:0f:29:bc:e3:
b2:a5:9c:4e:ed:1c:f9:ce:b0:48:0d:e2:3d:6b:e5:2f:ef:05:
a9:da:80:22:63:da:aa:fc:f9:fb:22:d6:2e:6b:33:72:60:e8:
5c:b7:8b:d6:7a:ad:b8:0e:03:3e:eb:62:8e:a8:57:9e:dd:e8:
39:9c:76:ac:fd:c9:e3:94:37:6e:42:f8:33:11:e2:47:6c:17:
28:84:29:be:0d:ae:f3:7b:66:02:79:1b:43:a7:06:9a:61:8e:
dc:ae:b8:3c:73:89:35:6f:ae:78:c7:7a:0f:d6:ca:78:d7:4d:
74:26:49:1f:41:36:cf:38:db:a3:56:2f:56:a5:84:4e:99:ac:
1c:af:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:46 2026 by rpki-client