
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa
File: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (raw, json)
Hash identifier: BRm0NDg5Ybly7ATWBG9rULlosyYIWi0TQ0o34qTg0tE=
Subject key identifier: 13:4E:C1:FE:53:D6:D3:9E:8C:E0:F8:11:CC:7C:2A:79:D0:4B:CD:94
Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
Certificate serial: 2F514DDC0D764E89ED6EA1C9BF198290757BEDBF
Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa
Signing time: Sat 14 Feb 2026 06:00:00 +0000
ROA not before: Sat 14 Feb 2026 05:55:00 +0000
ROA not after: Sat 13 Feb 2027 06:00:00 +0000
asID: 149717
IP address blocks: 103.186.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl
rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:51:4d:dc:0d:76:4e:89:ed:6e:a1:c9:bf:19:82:90:75:7b:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
Validity
Not Before: Feb 14 05:55:00 2026 GMT
Not After : Feb 13 06:00:00 2027 GMT
Subject: CN=134EC1FE53D6D39E8CE0F811CC7C2A79D04BCD94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:aa:35:40:5b:0e:d2:38:31:2e:2d:1e:88:
5f:7e:5a:35:0b:17:1d:67:48:ef:0e:bd:c5:26:25:
06:2b:f0:f3:77:cb:c5:cc:b9:aa:64:ff:e9:a4:ed:
3d:4c:56:98:45:26:e5:54:b2:e6:3a:38:93:05:4b:
8b:92:b0:3d:73:2a:6d:49:41:aa:bb:5e:b8:fc:b2:
91:0f:94:33:a6:27:9a:aa:07:ba:6c:e5:78:b6:78:
99:ad:9b:91:60:d5:ef:ef:32:b4:a4:0b:c0:d9:fc:
aa:62:ba:86:31:bf:ed:7b:e8:f2:11:bb:1f:49:84:
ac:cc:21:11:9d:50:1d:9f:5b:e3:82:6c:bc:15:9b:
1f:c1:66:39:00:ff:69:be:7f:76:3a:6d:40:4a:15:
73:e8:79:67:d2:5a:19:2a:38:47:1a:27:e4:21:a5:
ea:c9:3b:0b:64:d0:51:38:c2:91:df:d9:3a:06:66:
6e:62:91:da:4e:32:7a:b9:9a:3f:c7:66:81:b6:e2:
67:ed:9d:fb:f4:79:c9:b5:66:00:46:05:48:cf:64:
0e:78:6c:ef:50:d6:6e:a7:49:f1:0e:ec:20:a4:d9:
63:c1:31:71:15:34:bc:55:dc:52:24:e5:26:12:c2:
04:86:6d:18:0b:82:4c:59:b3:bb:8d:31:bb:21:58:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:C1:FE:53:D6:D3:9E:8C:E0:F8:11:CC:7C:2A:79:D0:4B:CD:94
X509v3 Authority Key Identifier:
keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:76:e2:ab:be:8d:df:3d:ba:c0:4d:33:6e:1c:0e:05:05:df:
13:8e:8c:c6:ae:a5:f2:fe:f7:90:79:7f:57:d6:09:f5:cf:1f:
9d:8c:b6:7d:03:5d:c4:fc:6a:91:5f:bc:ef:e5:14:6b:05:4d:
65:59:18:17:26:24:0a:55:7a:a0:b2:d7:a7:04:70:66:5c:f9:
6d:73:f8:41:c3:46:da:ea:7a:14:16:6a:fc:ee:f4:97:63:24:
72:c5:0e:ab:42:b6:a7:62:8e:1d:57:de:41:f2:3d:77:26:55:
87:1d:34:ff:e4:8f:56:8d:e3:0d:fd:c9:d9:d3:36:9d:cc:ab:
56:6e:02:5f:e3:ca:02:6d:89:0c:9c:51:d3:d4:d9:0a:92:70:
56:b2:ea:83:4e:bc:8b:4d:9e:ba:a2:2b:77:c3:a9:31:3c:a0:
cc:52:38:d4:e8:02:f9:82:89:be:b2:dd:89:ea:46:9c:9d:43:
b7:e0:c0:9d:cc:ef:25:8a:19:74:97:ce:74:59:18:2c:84:68:
4e:71:d2:f1:6e:7a:e6:d8:c2:90:01:84:5e:96:95:73:fa:81:
ab:f6:1e:6c:f8:fb:d4:a7:36:3a:6c:92:6e:36:47:12:27:f1:
fd:ef:de:a1:7c:c5:e9:0a:d0:96:5d:d2:b3:25:67:2f:78:43:
dd:10:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:46 2026 by rpki-client