
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa
File: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (raw, json)
Hash identifier: CRwU0L1ssLkMhvFPkriFbIaLrVr0CAOnZXuoJx/zYFU=
Subject key identifier: 97:09:2C:DB:65:B1:91:6C:E6:56:BC:4F:1F:F2:D7:B9:FB:6B:F0:84
Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Certificate serial: 22EEE0FA000691C0C549519116EE20E709EBE4D6
Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa
Signing time: Fri 06 Feb 2026 05:02:57 +0000
ROA not before: Fri 06 Feb 2026 04:57:57 +0000
ROA not after: Fri 05 Feb 2027 05:02:57 +0000
asID: 150970
IP address blocks: 103.132.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl
rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 10:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ee:e0:fa:00:06:91:c0:c5:49:51:91:16:ee:20:e7:09:eb:e4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Validity
Not Before: Feb 6 04:57:57 2026 GMT
Not After : Feb 5 05:02:57 2027 GMT
Subject: CN=97092CDB65B1916CE656BC4F1FF2D7B9FB6BF084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:32:43:ef:50:68:3a:bc:2a:57:85:65:54:
b5:6e:76:9d:9b:a8:80:1a:37:e1:e1:d8:4f:56:c8:
97:af:ee:04:9f:4c:c8:28:5f:a0:ef:72:69:ab:ca:
3b:f6:22:64:4a:a1:c5:0d:7d:70:82:e8:83:67:53:
6f:fe:e1:b8:ad:85:c2:cd:50:81:3a:56:2a:fe:f2:
28:7f:fc:c1:73:79:13:71:15:fc:a3:e0:0c:23:36:
e0:47:a2:52:5e:1f:ad:e2:70:df:a0:1c:ec:6b:5a:
43:a9:6d:90:cc:04:34:e9:b0:0a:ef:30:82:a5:c3:
58:2c:47:b5:65:7c:6a:83:7c:fc:84:b2:a6:a3:65:
06:af:19:b2:17:58:6a:9d:6d:60:50:43:46:7e:dc:
9e:52:e4:19:ad:dc:16:f7:b3:ce:04:7a:52:55:48:
c8:9e:ae:4b:6a:b1:50:37:6d:26:d1:fd:da:eb:2c:
13:65:d9:3e:1b:fc:7d:31:54:cf:39:66:9d:ef:44:
8a:35:74:52:6a:da:1a:f8:f9:4c:47:58:3f:22:cf:
e0:d4:8c:8d:4a:2a:7e:e3:29:d4:16:74:9a:38:6e:
f0:ac:5a:4d:8d:6b:2d:27:8e:71:2e:33:ab:55:3c:
3e:45:56:74:5d:a0:9f:d3:26:20:ae:8a:c2:27:79:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:2C:DB:65:B1:91:6C:E6:56:BC:4F:1F:F2:D7:B9:FB:6B:F0:84
X509v3 Authority Key Identifier:
keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.41.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b9:ab:53:88:1b:a0:d8:0b:2b:8a:8e:80:33:ca:73:15:98:
f2:82:29:c4:af:c4:8c:8a:54:16:eb:40:6d:d9:2a:e4:cc:f2:
17:38:dc:f2:78:ae:d8:4c:42:bf:bc:4d:59:e5:1d:6e:9b:34:
80:66:d2:76:a2:0f:90:92:67:9d:f0:f3:2c:44:11:a3:8a:de:
9a:5e:e3:4f:dd:52:8c:e7:d4:f1:00:f3:c0:31:a6:66:89:a4:
6a:67:b4:c3:9a:aa:c1:7d:13:49:5d:64:6e:ef:d9:0b:13:8b:
a5:da:6c:fa:b8:56:df:44:4b:8a:21:12:e1:c4:d5:e3:a0:39:
41:da:fd:7d:29:a8:f6:c3:76:44:ef:d9:1d:b9:b3:61:7f:7d:
19:b0:97:81:62:75:52:10:2f:48:b7:3a:23:6e:f9:fd:a2:3f:
d1:ce:b2:aa:81:be:2d:d7:1b:e9:c7:5a:83:26:ab:84:f4:20:
e1:6b:42:57:45:14:1a:57:8c:5a:76:bb:90:65:e4:e9:a8:d2:
d0:f8:ff:93:ed:49:3e:f2:e6:c4:08:ce:e7:6b:14:8f:6f:10:
e1:91:3b:69:16:e9:99:89:71:f5:d1:0f:00:88:b5:f7:b7:65:
54:6d:0b:da:1e:72:52:07:06:e4:da:44:19:48:a4:79:4b:12:
dd:85:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:15 2026 by rpki-client