
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
File: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (raw, json)
Hash identifier: oQF2g29fJ1rphB8ZnKarTHkHJW/AbS8xJ9Z8slQV/e4=
Subject key identifier: 83:8C:83:7F:91:11:CD:F5:2F:D7:AF:AC:F0:AA:93:E5:59:4A:5A:DA
Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial: 5B0568B65338D29A7CAA978C3158A80D9CEF4E55
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
Signing time: Mon 16 Feb 2026 10:00:01 +0000
ROA not before: Mon 16 Feb 2026 09:55:01 +0000
ROA not after: Mon 15 Feb 2027 10:00:01 +0000
asID: 149383
IP address blocks: 103.181.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:05:68:b6:53:38:d2:9a:7c:aa:97:8c:31:58:a8:0d:9c:ef:4e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Validity
Not Before: Feb 16 09:55:01 2026 GMT
Not After : Feb 15 10:00:01 2027 GMT
Subject: CN=838C837F9111CDF52FD7AFACF0AA93E5594A5ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:1c:cc:d8:a4:6e:57:2f:33:2d:1f:d8:76:
d1:ee:c5:b8:bc:17:8a:2c:03:1d:95:95:ab:58:74:
a5:51:c0:74:8b:9d:3a:46:1b:86:36:e9:65:6d:c6:
e4:f1:e2:1c:0a:c1:72:90:f7:fa:64:37:29:26:63:
8a:29:5e:f7:cb:9a:30:42:d2:cc:2a:a0:1f:ab:77:
3c:7b:99:cd:4e:3b:25:d5:8e:fa:dc:63:28:f1:ca:
95:41:46:a1:88:78:3f:7d:3f:93:3c:b4:72:6b:52:
7c:64:b8:ba:9e:22:b5:3c:fd:e9:71:08:25:a1:bb:
3b:f2:4d:2c:95:4c:26:71:63:e7:b0:84:e0:0a:9f:
12:e3:00:0a:84:20:4f:d8:1e:b0:29:f1:f5:36:60:
b1:6b:46:bc:aa:a1:f0:df:11:ca:df:76:d3:d2:50:
50:8c:2d:46:ae:2d:be:3b:98:5b:47:e2:2b:76:6e:
11:c1:45:55:0d:8c:8f:3e:5b:66:72:c7:43:d7:59:
9a:b1:b3:c3:9f:bf:0f:4c:bd:d6:eb:db:5d:fa:27:
07:6d:d4:c3:ad:cb:f0:34:05:02:b5:a9:55:21:44:
a5:1b:47:8b:95:d6:2d:f8:8d:bb:4f:11:5d:be:95:
5c:53:1f:5b:41:40:f2:7b:8b:bf:e0:aa:7a:cb:ea:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:83:7F:91:11:CD:F5:2F:D7:AF:AC:F0:AA:93:E5:59:4A:5A:DA
X509v3 Authority Key Identifier:
keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:be:10:1c:a0:af:8a:1c:41:83:f5:46:d3:4f:e1:43:ae:55:
f4:9d:59:cf:90:ae:cb:27:e7:f9:09:88:67:02:db:7e:95:71:
d3:3f:a7:ab:f5:98:c3:6f:17:9c:e6:be:d5:c1:c9:b1:df:c6:
dd:82:aa:2f:ed:7a:cb:e2:44:1b:c0:65:7a:c7:63:ce:3d:52:
03:31:a4:22:39:17:d4:f5:e9:76:5d:e3:42:ce:97:8a:0b:fc:
56:47:45:b3:42:1e:34:27:ce:25:5b:4b:14:7c:dc:f0:c2:4b:
16:31:9f:b1:c4:00:62:a0:3c:b6:fe:44:8b:86:84:29:be:84:
35:e3:f1:b0:43:72:d7:9a:ce:5c:41:0a:3d:f0:3f:a4:13:14:
ae:1f:e3:81:5e:32:8e:e4:b8:1c:9b:af:20:71:16:78:0a:2f:
e8:e0:20:04:42:6a:69:a5:3f:16:8f:29:e4:a4:15:44:2b:51:
35:a1:35:5c:66:f4:40:9c:cb:ad:a0:f0:ca:4e:17:17:73:16:
8d:43:7d:9b:09:fc:cb:e1:af:6b:83:da:b4:ec:c7:29:52:f2:
89:ee:fb:13:8d:f0:3f:a6:51:11:ed:c3:28:16:c6:f1:89:23:
5e:4e:a7:86:72:98:b2:53:e1:73:c8:0f:6f:3f:eb:20:e7:8f:
f2:5d:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:38 2026 by rpki-client