
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa
File: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (raw, json)
Hash identifier: TPlCTJVN2QTeHOB4M6IswSb2r9ncPe2iiueXE2eapqQ=
Subject key identifier: D8:2C:97:6A:74:A5:2B:65:68:3D:48:B0:57:D5:2A:70:A0:C6:B2:BB
Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Certificate serial: 50BA135CE497A9B2A9E191DA63EC73180F368F4C
Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa
Signing time: Fri 13 Feb 2026 11:00:02 +0000
ROA not before: Fri 13 Feb 2026 10:55:02 +0000
ROA not after: Fri 12 Feb 2027 11:00:02 +0000
asID: 142363
IP address blocks: 103.169.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl
rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ba:13:5c:e4:97:a9:b2:a9:e1:91:da:63:ec:73:18:0f:36:8f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Validity
Not Before: Feb 13 10:55:02 2026 GMT
Not After : Feb 12 11:00:02 2027 GMT
Subject: CN=D82C976A74A52B65683D48B057D52A70A0C6B2BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:f2:7c:1a:ea:48:6e:9a:00:a6:f8:69:82:
4c:f5:91:1e:f1:94:ff:5c:e3:33:d4:9b:a5:8c:33:
58:11:44:c8:37:bb:be:d8:22:82:5c:fc:4d:72:6e:
e4:ce:6e:6f:0e:59:42:b0:69:ab:91:c3:f6:ca:7b:
12:cb:af:23:8f:78:12:eb:ee:f5:b2:9d:5a:f8:80:
bb:ce:a5:bd:0a:4c:a3:5b:a5:15:d1:38:ce:6a:ef:
b6:8e:d8:46:18:bc:4c:03:25:ed:80:68:3c:68:e7:
86:30:10:16:e0:b3:bd:3a:88:ca:59:58:3f:c1:a6:
86:7b:17:ee:5a:04:36:9f:a7:6c:68:50:bf:23:8a:
2b:93:a4:9c:d7:b5:5d:fb:85:40:fe:c9:64:8f:1a:
cf:43:69:29:ae:1b:cf:01:a3:bb:2a:7d:3c:fd:8f:
a6:b6:b2:bc:f0:62:67:e9:17:77:b4:ad:b1:8f:66:
d1:af:25:50:82:b0:b1:94:7a:5a:7d:8b:fd:ad:e1:
7a:81:05:c3:2e:d1:ef:c3:18:15:d9:5a:6d:f1:0d:
2a:1e:ca:4e:a1:95:e8:db:5c:eb:be:dc:99:13:02:
47:c7:fb:12:a4:2c:bd:d7:bb:66:38:82:3d:90:63:
f8:97:d8:98:98:16:d2:05:51:ea:95:a0:62:29:e6:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2C:97:6A:74:A5:2B:65:68:3D:48:B0:57:D5:2A:70:A0:C6:B2:BB
X509v3 Authority Key Identifier:
keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.227.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cc:be:cd:1d:fe:94:51:70:3c:d5:41:ac:27:b6:28:47:e6:
04:5d:bf:8e:9f:be:6a:64:67:6a:4c:19:6c:22:06:3f:49:37:
75:2b:b8:c0:37:6e:ed:0d:70:9a:53:49:e0:79:10:f3:ba:7b:
96:17:b4:52:9b:2a:a8:2e:bf:dc:3f:4d:9e:d8:f7:47:a1:00:
dd:7b:8e:1f:74:6f:d1:82:6d:4e:2e:d4:25:d7:8c:01:ba:c2:
5c:06:b8:77:49:2c:59:cf:be:12:4c:dd:e3:90:ec:a0:7e:28:
b6:96:e4:3b:ea:57:dd:1f:80:19:a6:b0:32:8d:f1:3d:d8:4c:
c2:c9:c8:e4:62:e0:0b:94:70:a6:20:07:61:6e:8b:35:83:6a:
d6:55:92:8d:59:b1:5b:70:09:c3:6e:6e:4f:ab:14:7a:e7:f8:
6a:73:b0:07:85:d6:b4:4d:f1:20:b4:2d:1b:12:2b:d5:9f:01:
69:31:cf:9e:cf:76:07:c5:a1:c2:c1:37:52:f0:7a:af:25:1a:
3b:d6:00:aa:16:ce:18:5d:74:90:28:43:12:1d:bd:af:e8:60:
4a:60:ab:19:01:c9:c1:e5:24:c6:be:84:8b:c7:43:06:b1:fd:
00:d9:a3:55:c7:00:75:1e:6b:e0:f8:aa:9b:5b:d8:dd:3a:33:
a1:97:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:01 2026 by rpki-client