
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e382e37382e302f32332d3233203d3e20313534343130.roa
File: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier: jZK9k98AlCB7IeKPrcNsRZGYReSOBY8W5eiR7hAaCNM=
Subject key identifier: AE:A6:2B:0A:C3:7B:A4:B2:78:90:A2:39:91:51:72:95:09:E6:BF:52
Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
Certificate serial: 52EA9E261620F3CCDBC6D19C6750248B0C729551
Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e382e37382e302f32332d3233203d3e20313534343130.roa
Signing time: Wed 11 Feb 2026 15:31:26 +0000
ROA not before: Wed 11 Feb 2026 15:26:26 +0000
ROA not after: Wed 10 Feb 2027 15:31:26 +0000
asID: 154410
IP address blocks: 103.8.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl
rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ea:9e:26:16:20:f3:cc:db:c6:d1:9c:67:50:24:8b:0c:72:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
Validity
Not Before: Feb 11 15:26:26 2026 GMT
Not After : Feb 10 15:31:26 2027 GMT
Subject: CN=AEA62B0AC37BA4B27890A2399151729509E6BF52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:47:67:d8:8c:4d:9e:34:6a:ee:a9:aa:98:
30:91:cd:25:0a:d1:24:18:b8:cc:3a:6e:a2:24:c8:
99:89:b4:38:5e:96:85:b1:c8:c5:59:a9:10:09:5a:
df:72:3d:c9:ec:36:8c:b2:4f:9f:97:62:aa:1a:99:
e1:06:69:70:49:eb:5f:ed:60:8e:69:4f:82:40:60:
6c:d0:d4:69:98:9e:89:9b:98:a1:06:18:93:8d:de:
9c:e0:dc:79:1c:ec:25:7c:d9:b1:cf:d2:31:87:80:
a2:0f:b1:4f:90:a0:85:57:9b:a0:9c:73:07:c5:e2:
16:a3:2f:21:1a:02:77:76:07:d4:86:17:10:1e:22:
c4:b2:60:e7:7a:dd:ed:8e:f3:29:ea:61:79:a6:d3:
29:e1:c9:c9:b7:1a:3d:ff:e3:a3:c1:86:4b:04:3d:
f3:1b:28:94:47:01:ef:14:64:09:b0:15:66:c7:d6:
ef:ac:5b:f3:6b:f4:91:48:35:1d:cf:d3:9f:9b:00:
c1:d8:d9:51:95:c1:94:ca:80:77:f6:5d:bc:f8:56:
10:94:4a:d3:9e:a4:fd:e6:3a:85:55:f6:02:2c:ba:
ae:4e:37:2a:2b:7b:9d:94:12:6a:b9:e8:e1:08:05:
a3:05:84:d3:da:49:eb:23:a3:51:73:7f:a4:39:1b:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:2B:0A:C3:7B:A4:B2:78:90:A2:39:91:51:72:95:09:E6:BF:52
X509v3 Authority Key Identifier:
keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e382e37382e302f32332d3233203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:a2:7f:7e:1c:8b:39:b9:4b:65:97:c1:1f:e5:4d:70:d3:ae:
37:6f:85:a6:8a:f0:65:8a:ca:04:29:c1:4e:43:27:16:11:c0:
1c:d3:9f:28:64:7d:ae:8a:78:ae:ea:5b:61:3a:39:c8:23:b2:
81:4c:a9:b6:e3:54:7f:00:2f:dc:da:0a:db:6f:f9:5b:3c:14:
42:02:64:75:99:78:43:98:58:3d:9c:c6:10:44:43:d9:3f:e6:
26:ef:25:90:47:25:c6:de:a2:cd:b4:2c:48:21:a9:08:e8:3c:
b9:3f:ee:dd:71:40:48:1f:07:69:81:d1:70:b9:77:22:db:36:
3e:45:0e:2b:9f:cf:9a:8b:30:7f:3b:ee:c7:f9:4e:7b:53:ab:
1f:a3:b4:d6:93:16:dc:0e:ee:2a:49:d6:c9:45:73:fa:86:75:
55:36:79:27:62:96:45:a3:ec:14:9b:77:3c:b6:10:6c:9a:e4:
c1:de:1b:48:19:42:48:d3:e7:b7:48:b5:6e:52:71:51:cc:44:
a2:26:cb:e0:df:fb:1c:d9:47:9b:84:cf:c0:e1:5d:6c:cc:0a:
20:21:b0:b7:0e:82:53:76:be:90:ca:c5:09:e3:d6:58:df:2a:
c7:97:57:a6:ae:17:93:36:9b:5b:1d:30:bd:a0:34:f7:fe:3e:
3a:88:e6:d9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUUuqeJhYg88zbxtGcZ1AkiwxylVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx
QUFEMjQ1MDAeFw0yNjAyMTExNTI2MjZaFw0yNzAyMTAxNTMxMjZaMDMxMTAvBgNV
BAMTKEFFQTYyQjBBQzM3QkE0QjI3ODkwQTIzOTkxNTE3Mjk1MDlFNkJGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3Edn2IxNnjRq7qmqmDCRzSUK
0SQYuMw6bqIkyJmJtDheloWxyMVZqRAJWt9yPcnsNoyyT5+XYqoameEGaXBJ61/t
YI5pT4JAYGzQ1GmYnombmKEGGJON3pzg3Hkc7CV82bHP0jGHgKIPsU+QoIVXm6Cc
cwfF4hajLyEaAnd2B9SGFxAeIsSyYOd63e2O8ynqYXmm0ynhycm3Gj3/46PBhksE
PfMbKJRHAe8UZAmwFWbH1u+sW/Nr9JFINR3P05+bAMHY2VGVwZTKgHf2Xbz4VhCU
StOepP3mOoVV9gIsuq5ONyore52UEmq56OEIBaMFhNPaSesjo1Fzf6Q5G8hJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUrqYrCsN7pLJ4kKI5kVFylQnmv1IwHwYDVR0j
BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0
RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE
MjQ1MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkMGUwZGVhLTVmOWItNDI1Yy04
MmNlLTMwYTg2NTAwN2MzNS8wLzMxMzAzMzJlMzgyZTM3MzgyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMTM1MzQzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnCE4wDQYJKoZIhvcN
AQELBQADggEBAFyif34cizm5S2WXwR/lTXDTrjdvhaaK8GWKygQpwU5DJxYRwBzT
nyhkfa6KeK7qW2E6OcgjsoFMqbbjVH8AL9zaCttv+Vs8FEICZHWZeEOYWD2cxhBE
Q9k/5ibvJZBHJcbeos20LEghqQjoPLk/7t1xQEgfB2mB0XC5dyLbNj5FDiufz5qL
MH877sf5TntTqx+jtNaTFtwO7ipJ1slFc/qGdVU2eSdilkWj7BSbdzy2EGya5MHe
G0gZQkjT57dItW5ScVHMRKImy+Df+xzZR5uEz8DhXWzMCiAhsLcOglN2vpDKxQnj
1ljfKseXV6auF5M2m1sdML2gNPf+PjqI5tk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:19 2026 by rpki-client