
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
File: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (raw, json)
Hash identifier: rHpcS9BPxTUFSR7EfbnI6b9Zl3Fn2nrUXMnehSuTapw=
Subject key identifier: 7E:75:15:B6:09:CC:DB:2F:8B:E3:37:D0:A5:E6:0B:7F:AF:3F:E4:7E
Certificate issuer: /CN=F503463BC571123F80B94A358280E0D0F9750C09
Certificate serial: 56A5D98FB67A46CF317A3D6544B5ACEA381C22DF
Authority key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
Signing time: Sat 28 Feb 2026 11:00:45 +0000
ROA not before: Sat 28 Feb 2026 10:55:45 +0000
ROA not after: Sat 27 Feb 2027 11:00:45 +0000
asID: 142352
IP address blocks: 103.169.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl
rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a5:d9:8f:b6:7a:46:cf:31:7a:3d:65:44:b5:ac:ea:38:1c:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F503463BC571123F80B94A358280E0D0F9750C09
Validity
Not Before: Feb 28 10:55:45 2026 GMT
Not After : Feb 27 11:00:45 2027 GMT
Subject: CN=7E7515B609CCDB2F8BE337D0A5E60B7FAF3FE47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:8e:ba:e4:f2:11:a0:c7:f0:12:c6:60:e0:
6e:e7:e8:67:df:3a:8f:f3:2a:86:87:b4:fc:8e:93:
a5:fe:94:37:d9:55:23:f7:47:cc:cd:8c:4f:1c:e5:
5d:e0:21:95:1b:fe:d5:00:38:03:01:b1:04:55:6d:
d2:8f:a4:88:a0:56:10:72:ee:24:3b:38:69:95:05:
f4:e7:10:0f:d9:8f:65:c2:5e:a1:2f:23:78:d3:f7:
c3:f7:c4:2d:21:75:91:9d:be:7b:71:81:35:4a:1b:
ee:f1:43:41:9c:2e:1a:53:07:c8:f9:fc:08:0e:1c:
91:5c:0c:6c:ca:3e:64:38:60:65:1e:7b:ad:e9:67:
51:07:9f:ea:89:90:53:41:dd:ac:cb:b5:0d:b9:83:
77:ae:d9:89:e7:a3:59:6b:56:70:1f:6d:34:1e:b6:
d9:7c:e8:19:9c:0e:53:32:bb:06:9a:46:42:fa:ec:
a7:c6:f4:7c:9b:53:fd:ba:90:55:16:87:f1:3d:e8:
10:43:c4:f6:0a:dc:59:c9:2c:d7:14:4d:11:0c:5f:
2a:e9:41:e6:67:2c:7a:7d:61:65:c9:60:63:d3:62:
ed:c7:50:88:bc:12:3a:1f:cb:64:d5:2c:24:13:3c:
bf:e7:1a:c3:52:25:71:93:4b:3a:7c:9f:19:86:de:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:15:B6:09:CC:DB:2F:8B:E3:37:D0:A5:E6:0B:7F:AF:3F:E4:7E
X509v3 Authority Key Identifier:
keyid:F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.186.0/23
Signature Algorithm: sha256WithRSAEncryption
39:83:c3:90:63:e2:14:13:d4:f8:ee:33:58:9a:1c:53:91:5d:
68:ee:aa:b1:19:d4:59:5f:92:b6:e6:56:aa:0d:7c:0d:06:9c:
1d:39:7a:56:58:67:4f:6e:e6:d1:0d:e6:e4:be:b8:3e:5b:d9:
d7:64:1b:75:33:09:b1:3c:55:30:e8:f0:c6:60:1e:dc:ee:d5:
c8:81:9f:50:92:68:c9:aa:e3:98:6d:2f:9b:a7:93:10:be:10:
88:f9:a0:22:8a:28:8c:dc:10:30:50:3b:a1:96:d1:2b:06:85:
48:4e:72:b1:77:1d:37:ed:c6:5e:fc:f9:f6:fd:12:4a:41:7d:
b3:4a:59:a1:f4:60:8f:9b:d7:43:a6:54:31:99:87:1d:2c:d9:
02:86:45:17:20:f4:87:a6:ef:ce:39:5c:f9:f8:5f:78:eb:00:
88:3a:ff:bd:03:87:88:7c:3e:5f:55:d9:3a:83:85:45:02:26:
d0:9a:2c:da:0d:74:af:25:39:38:d0:7b:0f:0d:f2:f3:00:3f:
ce:2f:61:83:bb:97:b1:ef:ee:95:95:0a:59:d1:8c:8f:f6:4c:
86:ec:8a:2e:12:a9:b3:9c:9a:f9:98:e9:00:0e:dd:90:ea:54:
e2:45:69:b6:0b:b8:f3:e2:e4:94:b7:4d:bc:8e:65:f4:e3:0b:
40:71:8b:7e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVqXZj7Z6Rs8xej1lRLWs6jgcIt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUwMzQ2M0JDNTcxMTIzRjgwQjk0QTM1ODI4MEUwRDBG
OTc1MEMwOTAeFw0yNjAyMjgxMDU1NDVaFw0yNzAyMjcxMTAwNDVaMDMxMTAvBgNV
BAMTKDdFNzUxNUI2MDlDQ0RCMkY4QkUzMzdEMEE1RTYwQjdGQUYzRkU0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLY665PIRoMfwEsZg4G7n6Gff
Oo/zKoaHtPyOk6X+lDfZVSP3R8zNjE8c5V3gIZUb/tUAOAMBsQRVbdKPpIigVhBy
7iQ7OGmVBfTnEA/Zj2XCXqEvI3jT98P3xC0hdZGdvntxgTVKG+7xQ0GcLhpTB8j5
/AgOHJFcDGzKPmQ4YGUee63pZ1EHn+qJkFNB3azLtQ25g3eu2Ynno1lrVnAfbTQe
ttl86BmcDlMyuwaaRkL67KfG9HybU/26kFUWh/E96BBDxPYK3FnJLNcUTREMXyrp
QeZnLHp9YWXJYGPTYu3HUIi8Ejofy2TVLCQTPL/nGsNSJXGTSzp8nxmG3h1NAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfnUVtgnM2y+L4zfQpeYLf68/5H4wHwYDVR0j
BBgwFoAU9QNGO8VxEj+AuUo1goDg0Pl1DAkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YmNkOWE3ZC1kZTM1LTQ3ZTgtOTIyOC0xMmRmYjBiOGVhYzgvMC9GNTAzNDYzQkM1
NzExMjNGODBCOTRBMzU4MjgwRTBEMEY5NzUwQzA5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjUwMzQ2M0JDNTcxMTIzRjgwQjk0QTM1ODI4MEUwRDBGOTc1
MEMwOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiY2Q5YTdkLWRlMzUtNDdlOC05
MjI4LTEyZGZiMGI4ZWFjOC8wLzMxMzAzMzJlMzEzNjM5MmUzMTM4MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqbowDQYJ
KoZIhvcNAQELBQADggEBADmDw5Bj4hQT1PjuM1iaHFORXWjuqrEZ1FlfkrbmVqoN
fA0GnB05elZYZ09u5tEN5uS+uD5b2ddkG3UzCbE8VTDo8MZgHtzu1ciBn1CSaMmq
45htL5unkxC+EIj5oCKKKIzcEDBQO6GW0SsGhUhOcrF3HTftxl78+fb9EkpBfbNK
WaH0YI+b10OmVDGZhx0s2QKGRRcg9Iem7845XPn4X3jrAIg6/70Dh4h8Pl9V2TqD
hUUCJtCaLNoNdK8lOTjQew8N8vMAP84vYYO7l7Hv7pWVClnRjI/2TIbsii4SqbOc
mvmY6QAO3ZDqVOJFabYLuPPi5JS3TbyOZfTjC0Bxi34=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:59 2026 by rpki-client