
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
File: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (raw, json)
Hash identifier: t+4ejWWVpCyupE0/dAQ0FQh6YQM/Nth43B2HEabAe/I=
Subject key identifier: 2D:70:18:EB:8C:60:B3:7F:01:F1:9B:8A:E2:5A:DA:AF:68:37:79:D7
Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial: 1185E0DAEF55CA4872D0D558DA36939D0EA13D7B
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
Signing time: Thu 12 Feb 2026 11:02:39 +0000
ROA not before: Thu 12 Feb 2026 10:57:39 +0000
ROA not after: Thu 11 Feb 2027 11:02:39 +0000
asID: 149706
IP address blocks: 103.186.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:85:e0:da:ef:55:ca:48:72:d0:d5:58:da:36:93:9d:0e:a1:3d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Validity
Not Before: Feb 12 10:57:39 2026 GMT
Not After : Feb 11 11:02:39 2027 GMT
Subject: CN=2D7018EB8C60B37F01F19B8AE25ADAAF683779D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:c1:9a:dc:5a:78:ca:da:37:69:3c:5d:4f:
b4:a5:73:ba:79:f9:9e:51:70:ca:34:f9:7f:91:c2:
0b:c5:06:d7:14:36:3f:b6:c6:ac:35:19:cc:e7:85:
23:9b:e5:75:7b:91:e1:66:d9:b8:b7:f6:8f:43:9d:
de:17:7b:66:3f:74:40:75:62:60:c1:0d:e5:78:63:
05:f0:aa:6a:5d:a0:ac:39:b5:63:e7:b1:a1:51:ad:
c2:06:f4:43:ee:88:b8:e8:69:1a:c1:03:d8:b0:7a:
22:da:f7:6c:d4:d4:87:d0:9b:f6:e5:f0:f2:81:17:
d1:9e:1b:23:75:2b:7b:3b:38:62:61:ad:b1:cc:c6:
d8:57:27:d3:f9:66:0a:5d:27:8d:95:bc:10:04:88:
b3:ce:f4:35:3b:19:7b:c4:43:fe:85:fa:b3:ac:2a:
47:b2:61:53:3d:b9:fd:2a:e9:1c:26:af:83:e9:18:
c1:1d:13:4e:d8:01:21:bd:a8:f5:44:95:22:0d:6a:
be:00:60:21:4d:a8:39:db:a3:40:2a:93:e5:37:b8:
3b:5a:42:cd:89:de:41:eb:cf:c5:b9:8b:5f:7e:dd:
f6:12:6b:bf:23:4b:52:31:df:f2:80:bf:24:cf:e3:
70:b7:8c:b7:8c:d8:5f:6a:74:c0:59:c0:80:1c:5c:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:18:EB:8C:60:B3:7F:01:F1:9B:8A:E2:5A:DA:AF:68:37:79:D7
X509v3 Authority Key Identifier:
keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:49:3a:04:2a:bc:6b:e0:e4:1b:0b:37:e4:35:9c:58:5b:a5:
3f:7e:73:1a:f1:2f:47:6a:56:48:e6:43:cd:f4:b2:76:b1:17:
ff:ad:24:9f:6c:fd:1e:f7:24:45:ad:97:b2:74:54:4e:3e:3e:
35:8a:3c:6c:91:02:94:6a:3b:71:d2:f7:1f:82:ce:2e:e9:57:
bd:da:6a:58:05:59:06:64:ce:5e:1c:5e:2d:68:13:cc:ba:82:
65:38:d4:c5:90:b6:1e:a2:57:1f:8b:d0:fd:c6:4e:83:1a:4d:
80:da:05:51:92:26:e4:c1:8f:f1:4c:a7:38:f6:59:79:77:f5:
aa:55:8a:81:6a:e6:09:58:21:01:4a:7d:46:f8:5e:4b:82:c6:
30:a5:90:19:4f:eb:b8:e6:7c:fc:da:cb:bf:15:5b:bd:87:f7:
d3:ef:f7:fc:77:82:15:55:5c:c9:07:3d:7d:60:4d:7f:a0:fe:
84:61:2d:d5:af:e1:0a:1d:e3:d0:17:04:4e:a4:a2:c7:be:75:
00:b1:d2:92:85:7d:82:bb:2e:19:64:88:0b:06:a2:b9:aa:f9:
91:4e:2c:ea:cf:d7:18:f0:a1:e4:57:38:dc:b1:7b:0d:f4:04:
8b:1e:31:95:4d:d6:a9:b4:10:c2:f5:a6:9c:b3:85:42:c9:49:
a2:fc:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:12 2026 by rpki-client