
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa
File: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (raw, json)
Hash identifier: pVaHbqfkYlKE16pP1J0jFdeFxprYFeVPJ3tLOmdu69I=
Subject key identifier: 36:1C:12:8D:5A:57:46:78:1C:46:21:08:8E:0B:AD:1A:56:52:A9:0F
Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial: 081958A8232EFB309A03D1F79E72C3C1B74D31B3
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa
Signing time: Mon 16 Mar 2026 01:38:34 +0000
ROA not before: Mon 16 Mar 2026 01:33:34 +0000
ROA not after: Mon 15 Mar 2027 01:38:34 +0000
asID: 139205
IP address blocks: 103.118.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 13:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:19:58:a8:23:2e:fb:30:9a:03:d1:f7:9e:72:c3:c1:b7:4d:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Validity
Not Before: Mar 16 01:33:34 2026 GMT
Not After : Mar 15 01:38:34 2027 GMT
Subject: CN=361C128D5A5746781C4621088E0BAD1A5652A90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:a0:50:ea:cd:03:6b:63:47:44:d3:ea:53:
f2:f9:bb:eb:71:37:92:2e:30:cb:54:1f:21:62:1a:
59:1b:46:d5:b5:fa:4e:9a:98:18:aa:71:67:1b:93:
d9:db:b2:ef:bb:71:98:ef:8c:8a:6b:0c:90:14:59:
cb:b0:d1:0f:89:db:4d:65:cf:6f:88:e8:65:3f:a1:
19:3b:35:49:ba:28:ba:e2:08:3c:c9:22:e4:60:93:
58:65:de:ba:66:00:fc:51:83:74:94:3b:26:11:be:
82:85:7b:d9:eb:c0:09:34:c6:49:94:bc:94:f7:7f:
c5:f8:0f:45:9e:aa:80:53:6d:cf:b2:89:41:c0:b7:
5c:1b:ca:8f:d5:77:88:ad:89:99:3b:c0:8f:e8:b8:
e7:9f:93:37:64:a1:4b:da:ad:6b:1d:3d:35:b7:6c:
63:ce:10:a9:d7:1e:23:06:bb:1a:0b:39:00:b1:c3:
b9:02:93:e1:97:38:8f:e9:51:5b:3d:f9:bc:e5:a0:
d4:bb:bb:d2:f6:5d:5b:30:2b:0a:62:6b:c4:be:00:
f0:f0:cb:12:cb:1c:9b:6a:40:ad:bf:13:db:e3:54:
1c:73:db:aa:13:49:0d:02:10:15:93:b5:5b:0b:75:
32:4c:7b:e3:38:17:2f:63:79:33:78:27:c8:c5:bf:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:12:8D:5A:57:46:78:1C:46:21:08:8E:0B:AD:1A:56:52:A9:0F
X509v3 Authority Key Identifier:
keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.174.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ee:64:88:a7:73:71:0f:81:b0:8d:f2:89:f3:50:0e:57:69:
a3:9f:51:97:10:ae:0c:90:73:d2:11:da:02:41:33:96:2e:c4:
89:c3:4f:5a:67:bb:dc:44:e6:66:98:7a:94:88:a6:f8:34:ce:
b2:2a:b0:b2:4d:c7:ac:1a:48:30:8a:9a:5f:a7:f2:62:6f:4c:
21:bd:64:6c:3f:74:86:09:06:92:50:10:ab:6e:ca:05:2e:3e:
70:2f:e8:84:7e:df:d1:95:b6:a3:57:8f:2e:9e:58:45:38:40:
46:00:94:5b:8c:b1:46:fd:be:c1:bc:34:b8:7b:df:e8:13:5e:
e8:fb:18:26:c9:8b:d7:e5:a5:8e:e1:03:ca:20:77:49:00:89:
b7:37:de:2f:c0:02:c3:54:0d:99:1f:72:a6:7d:78:79:b1:e8:
e7:fa:b5:8d:d0:75:b2:ea:66:61:25:5d:4a:96:3f:0e:ef:07:
71:ed:6a:78:d6:8f:dd:7a:a4:32:28:36:7f:6b:1f:80:d9:08:
fb:cf:5a:22:de:6a:24:48:fc:7b:a4:55:18:1e:b3:81:e9:2a:
5a:17:e7:8e:1d:7f:a3:23:b6:6e:5a:8a:79:ca:e1:f1:f9:18:
0a:e4:c2:55:7f:e5:38:f8:bd:bc:7a:fc:86:2c:fa:31:46:bd:
17:e8:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:25:36 2026 by rpki-client