
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
File: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: I5lMCHW/0VM2snh5gMHMreCjKGcwb2psDVtNsfQ2Q0o=
Subject key identifier: 52:7F:42:83:20:48:D4:41:0A:03:98:49:EC:9C:89:E0:1F:96:A6:B3
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 074AAA6670B4A80362F338E4CFDCC9D8726CD4BB
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
Signing time: Tue 03 Feb 2026 06:00:00 +0000
ROA not before: Tue 03 Feb 2026 05:55:00 +0000
ROA not after: Tue 02 Feb 2027 06:00:00 +0000
asID: 38496
IP address blocks: 103.90.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4a:aa:66:70:b4:a8:03:62:f3:38:e4:cf:dc:c9:d8:72:6c:d4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Feb 3 05:55:00 2026 GMT
Not After : Feb 2 06:00:00 2027 GMT
Subject: CN=527F42832048D4410A039849EC9C89E01F96A6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:39:b2:64:30:b3:31:1c:52:65:ed:60:26:
f1:81:02:46:43:c6:f4:76:82:4b:fe:18:42:a4:49:
17:36:20:a4:6d:29:92:9d:cb:46:9d:8c:0f:b0:ab:
80:b4:1b:08:2c:1d:94:61:20:88:be:5d:f0:ac:04:
1d:40:b3:12:d5:f3:e8:d6:a9:26:4c:56:82:4c:8b:
49:9b:2a:d8:2e:43:24:8b:0b:28:b4:a7:3f:66:c1:
1e:ce:fd:ec:94:b6:f2:58:17:d4:9d:f0:f2:63:22:
64:00:21:66:7e:a4:c7:15:02:a3:83:ff:bb:6d:03:
50:7f:e4:16:d7:57:e1:0c:b9:30:e6:3c:0a:f9:c1:
ae:75:15:7a:6c:45:b5:1f:a8:2a:ea:11:f7:44:7e:
ba:02:80:07:1e:40:29:24:91:64:69:95:ea:85:8f:
11:2e:70:5b:dc:d3:11:be:b3:02:df:62:e6:e0:04:
98:9a:60:2a:a8:7f:46:e3:81:5f:fa:72:72:77:42:
74:51:13:13:52:98:ae:12:75:f3:49:51:03:df:0e:
9c:ce:e7:c7:e1:42:38:bf:b5:e6:84:47:aa:dc:f5:
26:14:ca:9d:8c:c1:5e:63:56:ac:75:96:aa:93:b1:
dd:15:ec:32:41:73:49:d9:e1:05:00:34:71:e4:d0:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:42:83:20:48:D4:41:0A:03:98:49:EC:9C:89:E0:1F:96:A6:B3
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.253.0/24
Signature Algorithm: sha256WithRSAEncryption
57:84:31:b4:f2:a8:04:17:24:6a:e7:8d:88:af:18:db:e2:4c:
91:97:6e:3f:8e:7e:e4:d2:74:5f:4e:77:da:10:67:37:28:b3:
3e:ca:21:83:d1:cf:8b:51:b0:79:5a:9f:58:e4:1d:3a:72:b2:
e3:94:62:9e:5c:1a:cd:93:ff:8c:f6:75:14:ae:2d:d3:54:d9:
09:95:04:1c:65:a3:b3:91:75:e6:78:15:42:df:00:f7:dc:00:
eb:c3:43:46:e4:5c:a2:ff:d1:1d:64:44:c6:6f:16:50:00:bb:
6c:ec:d4:00:13:4d:19:f1:5f:3f:9f:ae:de:9c:54:2a:00:1e:
9a:c8:07:9f:15:60:f2:23:62:a9:71:ad:98:47:b3:f9:1e:9f:
3a:32:42:21:79:30:9e:d0:02:06:b9:73:6c:3e:c9:2d:5f:da:
11:97:de:24:23:70:93:9d:59:30:9b:b3:45:3f:b5:ea:6c:35:
51:f8:ca:af:bf:b5:f2:28:8c:84:8e:c2:56:69:e4:ae:05:2c:
44:94:6e:4a:35:ac:5e:9f:1c:7b:83:ee:9d:0d:c6:5f:ce:1a:
7d:8a:f5:21:b2:8b:c3:e8:48:94:e9:da:c3:ce:d8:13:70:11:
b2:27:ca:fd:a1:55:9d:70:2a:e3:9c:67:89:58:71:eb:df:c6:
fa:96:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:33 2026 by rpki-client