
$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa
File: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (raw, json)
Hash identifier: kgZKXciouqYxyaCb3pkVMZtcXFuR5UYLlu1bj1dZn8U=
Subject key identifier: 1F:2E:20:9A:8F:D9:8F:2B:E7:B0:7E:A7:52:E6:19:31:0F:0F:2A:A3
Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Certificate serial: 1901CD21D6E7C0B282DE86A854E380F1F3835FA7
Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa
Signing time: Wed 08 Apr 2026 04:02:48 +0000
ROA not before: Wed 08 Apr 2026 03:57:48 +0000
ROA not after: Wed 07 Apr 2027 04:02:48 +0000
asID: 24532
IP address blocks: 103.116.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 02:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:01:cd:21:d6:e7:c0:b2:82:de:86:a8:54:e3:80:f1:f3:83:5f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Validity
Not Before: Apr 8 03:57:48 2026 GMT
Not After : Apr 7 04:02:48 2027 GMT
Subject: CN=1F2E209A8FD98F2BE7B07EA752E619310F0F2AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:1f:09:dc:26:bf:07:40:58:13:6a:45:b7:
06:88:8f:a1:66:8f:33:dd:f6:6f:19:35:cf:cf:60:
64:ea:43:72:94:45:4e:06:32:e8:3c:92:c1:ae:e6:
aa:1a:b7:99:e2:18:84:72:18:c8:45:b2:95:67:5a:
20:b3:47:74:e9:4d:16:cf:43:e2:fb:8f:9f:3f:81:
e7:bd:0a:e2:93:10:9d:75:45:bf:45:6a:a1:7f:86:
96:eb:2f:ac:6b:85:d3:02:11:a5:0c:2e:e7:8c:11:
0f:bf:c3:87:14:92:38:be:fc:5e:b5:d1:f4:7f:31:
9f:49:b0:04:26:5f:7b:57:bf:8c:c5:e7:ee:c3:a3:
eb:a3:52:c9:3c:f7:81:ed:ac:9d:6f:74:f6:ea:31:
b4:df:ec:03:6c:17:1d:86:df:6b:4f:56:c1:89:4f:
0e:10:0f:c5:ac:51:21:6c:db:c5:75:d2:15:6a:64:
31:2d:83:36:63:20:9d:89:29:d0:3f:2a:49:c6:5e:
90:1a:3d:40:12:f3:02:f0:db:9e:18:2d:1b:e0:c2:
2e:5d:e2:51:55:ed:f6:01:86:2c:3d:28:06:89:ea:
60:a5:8a:34:47:f5:3d:f7:26:94:be:45:0e:27:be:
27:f2:ef:3a:06:01:d5:f1:bb:78:b6:a1:ba:8a:ad:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:20:9A:8F:D9:8F:2B:E7:B0:7E:A7:52:E6:19:31:0F:0F:2A:A3
X509v3 Authority Key Identifier:
keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.112.0/22
Signature Algorithm: sha256WithRSAEncryption
90:25:07:1c:49:75:11:86:ec:0f:7e:25:c1:48:05:34:58:4f:
ea:27:3a:0f:ce:a3:d9:dc:fa:7c:4e:c1:a3:3f:1c:51:e3:3a:
02:a3:80:42:7a:dd:84:87:3b:01:79:73:c1:9a:d6:e6:4e:38:
97:1b:8a:dd:8b:34:13:bd:fb:6c:82:4f:fe:cc:92:66:25:67:
1d:79:e2:68:10:a0:c3:31:f9:3c:7c:67:49:20:2a:f1:87:43:
6f:74:1c:95:76:86:8e:8d:08:3c:4a:a2:34:44:f6:b4:6a:1f:
12:cd:2a:38:43:4c:76:73:68:a3:e4:d3:08:1e:c5:1a:0d:70:
f9:68:94:c8:0a:19:b6:24:7e:70:8b:34:58:2e:22:0f:24:87:
26:9f:cb:56:cf:ff:f7:6f:ae:85:46:27:07:4e:f6:ea:40:7d:
82:21:a1:24:8f:8a:99:28:5d:07:c5:63:fe:a3:16:77:46:6e:
5e:79:7f:61:29:be:14:97:51:bc:c1:5d:76:5b:2d:b3:a1:c1:
18:28:3d:5b:95:a2:f6:e7:d4:3d:d8:b4:07:68:7e:0f:28:f6:
34:fc:fa:3e:a5:8a:95:3e:08:f6:0e:e8:7b:d4:68:88:2c:82:
17:77:84:7b:ad:e2:c2:e8:e4:92:41:f7:a5:9b:29:dc:93:76:
9e:4f:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:05 2026 by rpki-client