
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa
File: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (raw, json)
Hash identifier: mMM3Ga6dl1jyFm9jC7xD9gwHLVLx1MdpyGbSVanE0js=
Subject key identifier: C1:11:CE:2D:A1:A9:0C:61:EF:0B:DA:07:80:06:27:14:CA:89:F4:5D
Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5
Certificate serial: 700C697CCEF167FAEA577F27124C1B998752AAED
Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa
Signing time: Thu 05 Feb 2026 16:02:08 +0000
ROA not before: Thu 05 Feb 2026 15:57:08 +0000
ROA not after: Thu 04 Feb 2027 16:02:08 +0000
asID: 151584
IP address blocks: 103.216.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl
rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 11:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0c:69:7c:ce:f1:67:fa:ea:57:7f:27:12:4c:1b:99:87:52:aa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5
Validity
Not Before: Feb 5 15:57:08 2026 GMT
Not After : Feb 4 16:02:08 2027 GMT
Subject: CN=C111CE2DA1A90C61EF0BDA0780062714CA89F45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:f0:a7:9f:41:5f:44:33:cc:5d:0a:e4:38:
20:aa:c2:21:94:30:fe:51:bb:3a:84:9f:e4:d1:ec:
e4:22:26:c1:18:1e:0d:25:ff:57:ee:5a:27:bf:70:
5a:c6:09:ae:0b:9e:ba:5d:a8:b3:41:76:84:7a:44:
39:0d:95:8f:98:c8:f2:b3:1d:ac:f2:f3:7c:92:be:
fc:b9:ea:9b:92:3c:3a:c4:1e:5f:e4:28:ac:2c:74:
8c:1e:cd:bb:ad:d0:02:76:55:b7:24:7a:12:6c:d2:
48:02:dd:14:b3:73:68:04:a4:72:76:5f:ab:b2:b0:
43:4e:6a:c6:4e:b4:e4:02:1c:8d:9e:99:70:8b:25:
7b:13:77:80:ec:f1:76:db:60:7c:2f:33:27:48:c6:
82:fb:b3:d3:7c:e4:b6:ee:e1:a3:78:b9:59:83:e0:
b1:26:d4:02:1d:b8:03:a7:98:4b:a1:2d:42:2c:51:
3a:a0:32:73:99:39:60:34:28:2b:83:2c:f9:eb:26:
32:33:77:b9:5b:79:2e:42:fe:eb:40:e8:6c:8b:43:
cd:29:ae:ee:6d:2b:02:ab:34:78:f7:7c:b1:5e:82:
50:ce:0b:07:40:35:25:8f:16:18:f1:65:67:ae:88:
88:c9:3b:f8:93:69:20:66:b3:77:5d:e7:b2:96:37:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:CE:2D:A1:A9:0C:61:EF:0B:DA:07:80:06:27:14:CA:89:F4:5D
X509v3 Authority Key Identifier:
keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.106.0/23
Signature Algorithm: sha256WithRSAEncryption
39:9d:79:d3:81:61:cc:b3:be:08:72:16:ab:81:f4:18:1a:88:
f0:00:32:fd:5d:2d:0b:a6:1b:b5:8a:2b:15:cd:4d:79:c1:ca:
a5:2c:09:77:f4:9c:36:aa:88:ba:ea:ef:f9:9e:82:71:7c:c6:
0d:0d:2e:44:8d:f1:e8:db:fa:94:b0:e7:4d:92:d5:a3:6a:be:
1c:68:74:76:7a:17:5d:8e:99:b7:b4:57:fa:80:72:2d:8f:8d:
5d:ca:47:26:df:67:4d:3e:70:7c:fa:c0:d6:48:36:21:b1:49:
76:65:16:18:d9:19:cf:a3:63:6c:33:16:7e:da:be:05:e2:dc:
ab:8c:2c:1e:fc:16:90:25:e4:ba:af:d4:1a:17:91:cb:1a:58:
af:a9:41:af:e9:eb:0a:e0:5d:15:9c:a3:25:87:d2:6c:58:1e:
83:b2:cb:3f:ce:99:5d:40:a6:93:e8:a2:32:e2:f8:09:15:94:
15:df:9e:75:77:34:9e:f0:38:bf:d7:7e:84:54:47:88:a0:b4:
e3:ce:c9:9a:5f:20:4e:b8:6f:ce:bd:40:20:ce:34:18:71:7c:
f1:67:67:62:9c:3f:78:20:82:70:a3:0a:d9:b5:5c:3e:42:7b:
2b:db:24:7a:8f:9b:0a:0d:a5:e1:17:38:06:12:ff:b3:62:93:
44:a0:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:53 2026 by rpki-client