
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
File: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier: IKAfsw1j387Yb0drrGpyPybMoQr76zYYKlaLJwJ/nPo=
Subject key identifier: B9:14:69:DC:9A:7B:40:A1:2C:93:9B:F3:66:50:68:38:B1:1A:23:9C
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 3573CAAFFDF8908FC170CD89947A21166B1D09CB
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
Signing time: Thu 05 Mar 2026 02:00:01 +0000
ROA not before: Thu 05 Mar 2026 01:55:01 +0000
ROA not after: Thu 04 Mar 2027 02:00:01 +0000
asID: 138090
IP address blocks: 103.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 13:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:73:ca:af:fd:f8:90:8f:c1:70:cd:89:94:7a:21:16:6b:1d:09:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: Mar 5 01:55:01 2026 GMT
Not After : Mar 4 02:00:01 2027 GMT
Subject: CN=B91469DC9A7B40A12C939BF366506838B11A239C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8e:1d:28:7b:8f:95:49:0f:ee:ef:b5:78:1a:
f3:99:a2:51:20:c7:b5:b0:f8:ad:64:6c:18:73:8f:
12:bc:93:6f:47:a3:e6:00:90:e7:99:b4:48:41:5b:
df:ad:d3:81:08:fc:f9:87:fa:99:11:37:62:81:03:
d4:02:ae:ea:e1:19:a4:d4:af:e4:9a:ba:90:7b:9f:
82:77:9e:79:46:c5:d7:68:c3:e2:9f:ec:c1:27:b5:
19:4d:19:83:f7:ff:cc:11:05:13:0c:cd:10:7c:b7:
23:ee:18:5f:8c:12:fd:05:4f:3c:79:52:fc:34:05:
f1:c3:a6:ac:8c:8f:e6:d7:b5:7f:94:88:94:ae:31:
04:77:15:8b:88:66:d1:f0:ab:d4:0b:ac:83:77:c9:
20:6e:8c:11:33:c0:47:df:ab:18:ea:17:bd:50:c1:
dc:3f:cd:07:4a:a5:46:e7:22:95:6b:76:12:48:f7:
33:b7:05:90:15:f4:fa:d7:2d:1d:b8:fd:0f:f6:aa:
26:bf:7c:2b:d4:6b:ca:b2:6f:53:5e:15:50:44:3f:
77:aa:44:da:88:22:86:a7:f0:f2:b7:7c:a5:87:bc:
28:8e:38:e9:46:74:0e:2b:68:12:10:67:b2:26:45:
2b:88:65:67:54:8a:8b:4f:9c:e9:d8:9f:a8:63:2e:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:69:DC:9A:7B:40:A1:2C:93:9B:F3:66:50:68:38:B1:1A:23:9C
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ec:b7:fd:58:0d:82:c7:e9:8d:89:8c:ff:7d:17:bf:d2:09:
f6:a1:5d:e3:e2:4d:7c:40:23:64:7b:08:88:1b:e0:cc:0d:11:
f2:c6:36:5e:91:f8:36:04:13:a7:a5:af:4c:3f:8f:81:f6:86:
5c:25:c8:cf:b1:f1:bb:7f:28:11:24:c7:42:a5:04:6c:30:cd:
c4:9f:7a:ea:15:d3:cf:7d:00:5d:68:0a:ba:2e:98:83:98:3d:
57:98:0d:41:34:b2:49:c3:bb:a9:90:3f:78:a0:0f:ca:38:19:
f8:04:67:f9:20:2d:35:7c:30:c0:ce:5f:3f:3a:b5:66:12:4c:
05:b4:6a:ee:06:43:6b:bd:90:04:5f:5d:af:7d:57:44:5d:bd:
ff:8f:31:48:0e:84:4d:62:2e:a1:07:8e:d6:4f:f4:20:fc:8f:
1d:64:f7:0a:08:6e:07:e6:80:18:8a:b6:67:c2:f4:ca:b2:a6:
ae:f7:62:85:39:df:a0:0e:4b:6a:50:a2:9c:5f:eb:dd:eb:1f:
5f:fb:8a:a7:63:e2:92:8f:a1:41:43:e7:1a:31:c0:b4:0e:28:
bd:2f:28:fd:fc:da:92:8a:9c:95:a6:7b:ee:a6:45:7a:df:9d:
09:b6:ce:38:97:32:5f:02:a1:cd:ac:24:d0:e7:03:b9:8c:51:
68:b2:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:13:42 2026 by rpki-client