
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
File: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (raw, json)
Hash identifier: Z/zTcdKY/+1D+wTbr5C9zS1eONmhv6Y/LtFvtIw5rss=
Subject key identifier: AA:EA:BC:5D:99:D0:35:11:50:7C:93:85:41:AC:A5:1F:7A:23:50:94
Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial: 4B849547F2D0D638438796F83247E6C922157949
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
Signing time: Thu 12 Feb 2026 11:02:39 +0000
ROA not before: Thu 12 Feb 2026 10:57:39 +0000
ROA not after: Thu 11 Feb 2027 11:02:39 +0000
asID: 149706
IP address blocks: 103.186.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:84:95:47:f2:d0:d6:38:43:87:96:f8:32:47:e6:c9:22:15:79:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Validity
Not Before: Feb 12 10:57:39 2026 GMT
Not After : Feb 11 11:02:39 2027 GMT
Subject: CN=AAEABC5D99D03511507C938541ACA51F7A235094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:83:86:19:cc:bf:b0:94:f8:c7:4e:e0:9c:
c2:cd:08:86:5f:3c:18:46:fb:63:1b:eb:8f:54:87:
c4:8c:09:c3:ba:3a:6c:1a:60:2e:f2:bc:29:9c:0b:
35:b5:3b:90:95:6e:d4:39:70:39:e3:cf:bb:a7:2c:
74:cf:9b:3f:90:03:09:85:f7:e1:92:89:63:bc:c5:
bd:6b:71:92:82:ab:43:9f:89:29:4f:0f:74:d0:7b:
6e:47:14:ef:20:62:6d:cb:4b:42:b5:ee:2c:c9:42:
f1:5f:ef:6b:af:34:ec:7d:e4:6f:f8:3c:2f:52:74:
75:6b:52:76:5d:cb:13:91:a0:5a:1f:5a:ba:85:98:
86:90:e5:9d:b7:f8:f0:e7:8d:51:39:6a:83:ae:5d:
28:fb:3c:cf:a8:ef:76:1e:7f:2b:b5:0f:aa:34:b1:
3a:9b:89:03:51:33:8e:05:ad:ab:59:64:fc:3a:33:
39:d5:19:12:af:99:91:94:b5:c4:87:d5:6f:65:00:
8f:7b:96:59:2a:11:61:03:e8:93:fc:9c:8b:9e:3b:
0c:c3:e3:c0:ae:2e:6e:93:95:cb:87:00:e7:9d:53:
ba:aa:b5:b0:59:c1:62:cd:f1:71:51:62:82:2c:d4:
a8:2b:86:c4:13:b1:f0:62:8f:8d:e8:a4:bf:17:44:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:BC:5D:99:D0:35:11:50:7C:93:85:41:AC:A5:1F:7A:23:50:94
X509v3 Authority Key Identifier:
keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ef:23:4f:69:5d:c1:30:6b:38:6e:c7:6d:c3:ba:f1:83:7b:
39:1c:e9:1e:fc:bc:61:92:e7:70:ed:a9:2e:06:5b:35:49:df:
7c:12:fa:b2:0b:96:af:26:d4:6e:80:88:d1:b7:55:ad:ea:be:
09:22:97:fa:10:1f:e9:3b:7c:e0:86:35:d3:4f:8d:48:80:49:
95:f8:03:33:03:16:48:8d:ca:ac:49:a0:9e:a0:b6:f0:0d:01:
e2:b6:05:4b:73:99:97:21:a8:67:15:c2:45:2a:7b:36:cc:d8:
80:71:f1:a6:8c:39:ea:a1:37:b7:78:bb:00:eb:cc:e2:49:ba:
fd:65:df:66:fa:96:46:c5:50:47:91:3f:30:ba:74:aa:e3:89:
d6:83:db:b4:9b:6b:40:37:91:b6:32:65:d5:8b:81:2e:b9:ff:
f9:5e:ca:fe:0a:c5:cc:4a:29:0e:24:a8:9e:20:c0:1f:08:ba:
93:7c:ee:31:2c:1e:15:ad:ce:24:aa:1b:50:e7:a1:db:63:00:
11:81:59:f5:63:f8:ab:24:fa:6d:39:01:08:6b:86:aa:d1:31:
c6:b0:23:28:98:ca:a8:85:e3:2e:e7:e6:9a:32:9e:b4:5a:55:
9c:38:73:fd:59:80:2a:cb:6e:f2:75:82:3d:eb:dd:45:0a:5c:
fc:3d:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:40 2026 by rpki-client