
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa
File: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (raw, json)
Hash identifier: cGjzafbbb72w1POax7yQ6JIcTIYB2qV5UJbi5oDbNwM=
Subject key identifier: 8E:49:4C:D7:36:D1:30:A2:D1:0B:8F:0A:B0:C6:B1:60:47:44:F2:F2
Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F
Certificate serial: 4E73AD6BB07BCFC5F945FC6706EB8DC2206C1F4C
Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa
Signing time: Fri 17 Apr 2026 04:03:27 +0000
ROA not before: Fri 17 Apr 2026 03:58:27 +0000
ROA not after: Fri 16 Apr 2027 04:03:27 +0000
asID: 150263
IP address blocks: 103.31.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl
rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:73:ad:6b:b0:7b:cf:c5:f9:45:fc:67:06:eb:8d:c2:20:6c:1f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F
Validity
Not Before: Apr 17 03:58:27 2026 GMT
Not After : Apr 16 04:03:27 2027 GMT
Subject: CN=8E494CD736D130A2D10B8F0AB0C6B1604744F2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:09:4e:3e:33:27:d0:bc:cb:86:c1:63:61:
a8:56:18:7f:e2:4b:1a:c7:18:1c:98:06:bf:2b:04:
38:3d:0a:8a:01:23:bc:ea:55:35:eb:d6:f4:10:59:
3d:f0:16:e1:f5:ba:9a:13:99:41:0b:f1:dd:1c:7d:
3b:5f:3f:09:8a:a2:8d:e9:8b:41:1c:b2:e4:9f:a0:
13:d6:b9:30:3b:8f:eb:d1:10:e9:68:bc:80:5e:fc:
86:33:2a:ef:62:55:0f:3a:22:1b:5a:56:ac:ee:83:
41:cc:a5:fc:9a:8b:86:30:76:63:7f:d2:d7:f3:09:
ec:e1:35:4a:63:24:a0:6e:64:74:39:ef:75:ad:bd:
bc:89:5d:d1:21:ce:34:df:be:29:62:84:22:6e:1a:
e4:d7:60:d7:39:71:95:ad:bd:3f:6b:2d:ec:09:d7:
59:42:51:01:32:62:3b:18:09:ce:31:0f:ef:de:3e:
42:80:04:8c:7a:04:82:61:68:a1:9b:0b:04:ac:d8:
7b:89:96:0f:c2:b3:2d:29:52:80:5b:b0:47:10:1a:
78:58:55:84:85:a9:96:93:b3:5b:b6:05:64:45:db:
f9:3c:ab:97:27:6b:04:61:59:35:d4:82:d3:ca:27:
41:5a:34:70:47:0f:3f:8e:ba:1d:49:80:a5:48:e9:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:4C:D7:36:D1:30:A2:D1:0B:8F:0A:B0:C6:B1:60:47:44:F2:F2
X509v3 Authority Key Identifier:
keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.119.0/24
Signature Algorithm: sha256WithRSAEncryption
69:36:b5:23:59:18:02:8b:95:d0:fd:f8:49:e5:24:36:f1:4b:
0c:39:d0:65:cc:c8:f0:c0:62:64:ac:e7:5b:a8:9e:72:73:1a:
6c:3d:73:64:af:f3:f1:1c:a2:e7:9c:7e:b7:72:52:55:51:a9:
98:63:47:02:52:20:86:12:2a:64:c3:cd:04:13:f4:d8:85:cb:
16:1c:8c:f0:9c:34:c4:fb:ce:1a:53:82:30:7f:fa:35:00:8c:
4c:d0:ef:36:7d:34:b9:78:8a:41:27:88:08:69:17:20:fe:0c:
dd:91:ac:fe:bc:6d:35:ee:26:4d:6f:8e:60:fa:ad:42:be:b5:
22:6a:c9:7e:55:4a:f3:10:e9:e0:e6:81:64:74:1d:71:3c:50:
93:01:47:bc:5a:91:d3:eb:a4:de:35:2d:25:ac:52:66:a4:2e:
03:4d:5e:c7:48:59:76:cb:f4:f9:94:d4:31:e8:33:39:be:af:
33:d8:88:6c:c2:2f:6f:ab:95:8d:4a:f8:8e:d7:41:50:be:f0:
2d:92:5f:97:ae:e4:b3:f2:55:dc:ec:87:d1:23:bb:e3:5f:82:
c8:79:e4:f8:e9:47:85:c2:35:2a:bc:62:b5:99:40:10:30:b8:
11:c8:69:ad:31:6b:40:39:d2:aa:6a:8c:46:5f:b9:0c:bc:76:
de:a9:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:50 2026 by rpki-client