
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
File: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier: b6oWETPAdWSTs2U94m5Fni4xEj1CKc77e+9vDwX4m1k=
Subject key identifier: D1:5E:51:11:94:52:C3:B7:B1:87:25:E1:09:3E:D2:23:87:45:41:37
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 5BDA3F431C42915ED99B217F950C27287BB7B3E2
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
Signing time: Thu 05 Mar 2026 02:00:00 +0000
ROA not before: Thu 05 Mar 2026 01:55:00 +0000
ROA not after: Thu 04 Mar 2027 02:00:00 +0000
asID: 138090
IP address blocks: 103.124.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 13:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:da:3f:43:1c:42:91:5e:d9:9b:21:7f:95:0c:27:28:7b:b7:b3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: Mar 5 01:55:00 2026 GMT
Not After : Mar 4 02:00:00 2027 GMT
Subject: CN=D15E51119452C3B7B18725E1093ED22387454137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3d:e9:56:c9:62:16:e8:81:c2:8b:fd:22:6e:
4b:cf:27:4d:86:de:eb:84:74:89:c1:79:b3:5a:15:
74:15:83:84:6c:fd:f5:9f:c0:86:e3:2d:4b:14:74:
31:ab:6a:49:d6:57:5a:b2:34:4a:ef:6e:93:4e:9b:
ca:a3:32:b6:8f:9b:92:51:83:07:fa:65:59:93:4d:
cd:5b:70:d2:ec:34:96:d0:51:c8:62:40:37:af:99:
5a:a5:23:88:c0:a9:70:80:76:58:ce:66:7d:da:09:
87:8b:30:47:99:c9:50:ec:74:b7:ec:37:50:da:f4:
23:5a:e1:e3:e3:24:d4:c4:62:f2:15:f9:e5:94:df:
e6:cb:db:72:9b:24:1d:fe:e2:8b:bd:65:66:ce:9d:
c8:be:0b:4c:8a:dc:2e:ee:58:dd:ae:46:fe:c2:23:
82:be:41:b8:3d:63:45:ce:46:07:e1:cb:7c:f7:41:
a3:79:ca:1b:7a:6e:b5:f6:8c:8e:19:e4:d9:32:49:
8f:fe:0f:21:9d:90:5d:3c:15:7d:8d:47:77:1c:08:
d5:5c:70:4a:f5:ef:e6:e1:0d:d6:83:e7:c8:2d:0b:
c9:9c:42:3c:de:19:36:38:4b:74:60:2c:6b:39:94:
2a:e4:ef:4e:43:4b:32:4c:fb:41:f4:32:40:b5:ff:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:51:11:94:52:C3:B7:B1:87:25:E1:09:3E:D2:23:87:45:41:37
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.246.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d7:7c:c4:d6:7e:dd:ed:27:70:25:70:ec:4d:61:36:20:8d:
8e:ca:fb:46:14:94:17:df:95:d4:f7:b9:f7:26:27:2f:53:95:
2a:30:1c:9c:1f:4d:fe:f3:46:b5:d2:4d:15:c7:e2:e5:bd:09:
9b:f7:34:fd:c6:5b:c9:98:7d:66:9d:38:c8:60:93:59:c7:22:
80:c1:12:22:cd:01:cb:62:cc:5d:9e:dc:c9:e4:11:97:72:39:
aa:53:47:f2:cb:90:68:4f:ac:d0:50:b5:55:1b:87:d4:8c:9d:
b6:fe:06:97:8c:6b:61:77:cb:99:4b:c3:f9:3c:83:8c:66:c9:
8d:22:ab:6c:66:e9:77:c3:27:c3:d2:4d:62:1d:fc:23:4d:58:
74:10:d3:8c:e2:b7:62:ca:4e:ce:8e:da:cd:cf:79:f0:5e:6f:
15:4a:79:86:a9:92:2b:2b:27:b1:10:44:60:31:ed:b3:43:ce:
b9:f8:fe:21:5d:3c:0b:a1:fe:4a:2d:f5:2d:3d:2f:59:3f:f0:
9f:a8:62:9a:b6:24:96:8f:b0:2e:dc:4a:4a:ee:37:61:a7:cb:
d1:cf:93:ca:75:1a:79:54:80:d4:e7:de:a2:49:71:e2:bb:b6:
e3:37:18:65:18:6a:b8:09:11:49:49:bd:1e:fb:9c:5d:11:cf:
74:19:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:11 2026 by rpki-client