
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
File: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier: Uiwt0idwyNoHB6hbHTLTPXK+NKIuun2Gs6eiB4RgV7E=
Subject key identifier: EC:5B:1C:F9:5A:AC:52:09:B5:09:C4:5A:6A:AB:75:6B:A2:B4:C9:DF
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 1F3A397A7ADFC21716C6C6EE357085C98DCB288D
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
Signing time: Thu 12 Mar 2026 13:00:02 +0000
ROA not before: Thu 12 Mar 2026 12:55:02 +0000
ROA not after: Thu 11 Mar 2027 13:00:02 +0000
asID: 149880
IP address blocks: 103.189.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 12:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3a:39:7a:7a:df:c2:17:16:c6:c6:ee:35:70:85:c9:8d:cb:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Mar 12 12:55:02 2026 GMT
Not After : Mar 11 13:00:02 2027 GMT
Subject: CN=EC5B1CF95AAC5209B509C45A6AAB756BA2B4C9DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:c0:85:c1:b2:86:ed:dc:a3:5d:97:66:f8:
0e:bd:e1:03:aa:51:3e:fa:b7:06:14:9d:90:43:1b:
13:50:06:86:86:0e:d8:61:88:d4:6f:30:87:de:86:
32:c8:77:ec:a0:c0:35:00:36:ab:1a:de:d1:b5:16:
e2:96:9e:43:0c:df:62:8b:1c:5d:05:a1:47:3d:3c:
1f:1d:4c:fe:a1:a7:f6:ac:f5:0b:38:17:a4:a3:11:
cf:aa:9f:c9:35:3d:00:ed:67:9f:b8:1a:52:34:c8:
c3:3d:a1:fd:b7:82:61:af:6c:e8:e1:e2:59:b2:51:
08:dc:2c:21:84:00:1d:27:07:14:12:e1:44:73:19:
40:41:14:a3:55:94:e1:dd:55:a8:cf:2a:7a:56:46:
33:9f:fa:a7:c5:9a:6a:b1:70:9c:09:d2:af:93:bf:
e5:10:bd:48:2c:f6:59:3c:e1:57:2f:be:80:b4:4c:
4b:65:6e:b0:aa:51:c3:07:a4:e4:ea:f8:9b:b9:e5:
a5:1c:97:76:70:3f:69:42:66:75:82:86:59:fb:00:
ee:38:ed:d7:49:f7:24:64:53:97:f4:cd:82:92:47:
77:c4:52:67:96:4e:0e:b6:39:29:89:e1:16:1c:3b:
7d:17:b5:1c:97:14:8e:da:fb:16:dc:5f:b2:21:f9:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:1C:F9:5A:AC:52:09:B5:09:C4:5A:6A:AB:75:6B:A2:B4:C9:DF
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4c:2a:00:e6:63:59:82:46:85:16:c4:bf:12:cf:3a:88:88:
fa:f6:5f:7e:34:f9:6a:a5:67:f3:03:67:d9:8b:38:eb:a9:44:
13:e0:f5:92:81:e3:8d:bb:24:12:12:6e:7d:89:b8:ce:e5:84:
d7:e5:2a:05:1d:59:e7:82:62:bd:9a:dd:3c:8a:31:02:88:c7:
42:50:53:6a:93:c8:e4:e6:a8:c7:1c:6e:8a:d2:65:6b:db:73:
58:0f:bc:48:03:b8:b1:f9:74:b1:8e:41:ab:3c:07:cd:2e:0c:
a7:ec:a1:9e:0c:3d:2e:5a:3d:fe:c5:71:f2:32:52:d7:76:41:
dc:4f:e9:fd:10:58:f1:a7:ef:85:65:b0:53:53:7b:b9:ec:61:
b4:6f:52:36:ec:6c:67:17:91:45:54:34:ef:f0:e0:b9:c0:ae:
02:00:3f:61:43:65:87:ad:0e:3b:de:f7:f7:df:60:d6:f5:11:
f3:c8:00:88:5d:8e:fb:87:48:4e:b7:fa:cf:83:a7:5b:16:86:
d1:89:50:e0:e5:24:d9:16:6b:c5:4f:a4:67:91:c5:9f:6e:fa:
0b:f4:a5:80:3c:f3:9c:75:27:98:33:10:56:27:5e:15:d7:8b:
b3:e7:cc:30:54:8e:94:4f:b1:4e:21:c1:b8:8d:2e:a9:0a:98:
f0:3f:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:58 2026 by rpki-client