
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
File: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (raw, json)
Hash identifier: 3bDrh/IvfptxL/qV6/N3HPmQvkUVCcqGv4fLMe3ZeVc=
Subject key identifier: 61:FB:07:96:41:19:4F:B9:53:C7:5B:86:96:93:54:06:7E:1D:71:DD
Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Certificate serial: 097F263148EEB5959F40F98655441279CE5EE618
Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
Signing time: Thu 02 Apr 2026 06:02:45 +0000
ROA not before: Thu 02 Apr 2026 05:57:45 +0000
ROA not after: Thu 01 Apr 2027 06:02:45 +0000
asID: 133835
IP address blocks: 103.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 08:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7f:26:31:48:ee:b5:95:9f:40:f9:86:55:44:12:79:ce:5e:e6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Validity
Not Before: Apr 2 05:57:45 2026 GMT
Not After : Apr 1 06:02:45 2027 GMT
Subject: CN=61FB079641194FB953C75B86969354067E1D71DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:3a:2c:25:9a:16:8a:6f:e9:9a:09:3a:1d:
b1:28:4d:2a:d4:2e:7d:21:d8:d0:6a:d5:70:9f:10:
0e:64:e2:ee:db:f6:aa:75:ba:df:ac:12:2b:21:2b:
47:37:eb:a5:15:98:44:88:f4:aa:42:c5:9a:db:3f:
b2:05:77:6b:a8:e7:30:17:ce:e2:31:4f:96:a8:17:
e7:c1:a5:ba:b8:ff:06:fd:cc:e3:6c:b5:87:37:79:
79:65:77:0b:0c:c0:15:9a:99:49:27:bf:2a:3e:16:
6a:12:74:0e:0a:2e:98:14:b8:2a:f0:ea:1f:d5:46:
f0:a2:47:f3:2e:8d:67:f1:ba:5c:ba:75:19:8f:ac:
b3:ca:2c:e2:a7:4e:e2:e4:2b:f7:c8:66:2f:8a:7d:
7a:73:36:eb:f9:db:e4:e0:a4:b4:a2:bb:99:3f:f6:
d5:ea:f0:46:dc:f0:a8:00:70:d7:2f:1b:a6:93:36:
74:5c:b0:41:c4:13:98:7d:4f:ef:ed:c1:65:e3:34:
14:4e:96:7e:ed:94:d3:8e:5c:dc:ef:b1:f8:24:68:
01:72:67:99:81:01:eb:e3:78:0c:86:54:ee:c9:df:
63:f0:a2:32:df:31:ac:cf:24:35:7c:47:0c:b4:ed:
25:de:f8:c9:ea:2e:de:21:2d:93:c3:a1:7d:36:79:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FB:07:96:41:19:4F:B9:53:C7:5B:86:96:93:54:06:7E:1D:71:DD
X509v3 Authority Key Identifier:
keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5e:b1:ce:17:e5:5f:ad:0e:40:60:ac:bd:51:8b:71:57:d8:
f1:d9:91:6f:7b:18:b8:f2:c8:ff:23:19:ee:7d:f7:41:b0:5e:
8e:e0:b2:1e:8a:cf:c7:5b:c0:ac:9a:13:f6:6a:d7:6c:be:dd:
86:72:44:20:7a:11:f2:42:60:c4:cf:6b:79:a8:66:25:14:a2:
dd:28:ec:ff:20:b4:7b:d1:29:b8:79:85:24:78:9c:3b:02:a7:
59:86:16:19:a2:8e:02:53:d9:60:41:e8:9b:8e:67:54:85:6f:
af:d7:6f:8a:b9:30:83:f4:72:9c:46:77:b9:d8:50:0d:75:77:
8e:8f:1c:b5:3d:ed:66:e6:22:86:5f:40:26:3e:a0:a5:0b:d6:
6e:7e:f8:87:22:01:33:35:30:79:ef:e8:13:8b:60:10:b7:80:
7a:84:af:8d:60:56:b5:c6:a4:00:b9:8d:24:45:16:3b:0b:98:
14:51:92:39:2a:2f:95:77:61:d1:b5:81:ab:46:c8:dc:6d:32:
8e:a7:3c:83:10:25:03:e7:ee:3e:03:5d:22:ce:a9:f4:f3:95:
61:83:00:1a:16:42:d9:47:40:17:52:c4:0b:1c:e0:5a:b7:3a:
f3:07:b7:9b:d2:56:8f:77:ed:93:e2:80:3b:be:68:39:3f:7a:
53:b2:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:24:07 2026 by rpki-client