
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
File: 3130332e36382e302e302f32332d3233203d3e20313335343539.roa (raw, json)
Hash identifier: mfkF/CfptjwTd3zVsksTApHx2vhZ+oTUs1ysqMG3o4E=
Subject key identifier: 52:F4:F1:E7:51:80:66:ED:CC:17:BD:01:52:1E:1E:54:D6:65:9E:D8
Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial: 26E7182026BE7CB4F9A9BD6FE2FB7B2A715B5545
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
Signing time: Wed 18 Mar 2026 09:02:49 +0000
ROA not before: Wed 18 Mar 2026 08:57:49 +0000
ROA not after: Wed 17 Mar 2027 09:02:49 +0000
asID: 135459
IP address blocks: 103.68.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 19:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e7:18:20:26:be:7c:b4:f9:a9:bd:6f:e2:fb:7b:2a:71:5b:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Validity
Not Before: Mar 18 08:57:49 2026 GMT
Not After : Mar 17 09:02:49 2027 GMT
Subject: CN=52F4F1E7518066EDCC17BD01521E1E54D6659ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:1f:4c:e4:f6:bf:58:fa:eb:e1:c5:ea:fc:
c8:96:da:71:1b:e3:09:cb:b7:7e:86:6b:c4:51:88:
5b:1b:55:66:72:66:b9:96:6d:c6:85:0e:75:43:5d:
98:da:46:cd:4c:d3:78:f3:14:b7:35:85:1c:13:ac:
d6:51:63:72:a8:2c:b2:40:ad:1d:35:a8:81:69:b2:
19:bc:c3:61:17:15:b9:e2:77:a7:9a:c1:b8:2e:80:
78:5f:2e:90:ba:5c:98:dd:30:57:1f:b8:06:c8:95:
5b:f6:37:d5:3c:3f:a3:b6:b2:3e:ee:2d:3e:e1:bb:
d5:ed:0b:d0:c6:92:04:fc:b9:08:e3:ef:11:ab:f2:
b1:98:e0:6e:09:cd:58:89:6f:17:ab:f0:09:d3:fc:
ff:40:de:22:bd:82:6e:da:a8:1c:6a:2c:cc:dc:2e:
2e:43:22:17:e0:6b:2d:af:a8:bc:64:64:a3:af:27:
39:6a:1f:cf:45:dd:e1:70:b0:c8:79:0e:7e:9e:da:
46:c2:53:83:98:3f:5f:b5:a2:e4:0b:32:51:54:46:
65:5e:9d:d5:e1:6a:6c:16:1e:3b:d4:7d:f2:3a:f3:
90:13:37:b8:2e:c6:d9:78:18:c4:fd:a5:ce:f4:7f:
9b:74:7b:ff:56:06:ac:64:82:c3:86:d3:98:95:6a:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F4:F1:E7:51:80:66:ED:CC:17:BD:01:52:1E:1E:54:D6:65:9E:D8
X509v3 Authority Key Identifier:
keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.0.0/23
Signature Algorithm: sha256WithRSAEncryption
55:4e:da:ab:d1:0f:6a:35:8a:df:fb:0c:ba:14:e3:47:19:62:
11:01:e3:44:d0:6d:ee:9c:fe:39:18:15:0f:40:6e:c3:09:4a:
a4:88:f4:12:86:19:12:e4:b4:5f:13:d6:5a:25:71:fd:b2:42:
a0:87:d9:45:d4:95:25:79:4f:61:d1:95:03:4f:b5:fd:ae:ef:
0a:e9:79:b5:14:e9:ed:95:d2:a9:8e:a5:59:a1:49:72:d7:92:
57:46:d8:4c:bd:d4:1c:91:2b:0d:44:82:75:d3:e2:fa:81:22:
9b:28:6f:c5:d0:21:e1:3b:b3:d2:55:9c:53:61:2f:52:88:56:
21:21:5c:07:5f:4b:32:86:a5:2e:8f:c4:54:52:75:a0:0d:e0:
b5:90:d9:7b:5e:bc:e7:2e:3f:48:7b:ee:a1:7a:eb:d4:b0:70:
39:2d:e3:3b:43:67:96:f0:05:60:4e:16:d7:3a:68:ae:55:1e:
1e:15:e2:92:f5:25:da:c2:43:f7:e9:08:8b:ae:9e:f7:02:e1:
d0:09:8f:07:82:d4:46:bf:5b:cf:4e:c6:87:a0:20:36:b1:3d:
20:07:9a:21:07:cc:32:77:c8:89:3d:a1:68:62:a6:13:3c:2b:
3f:6a:a2:c7:a1:6b:e3:f7:72:ad:35:f4:98:8f:03:e9:3f:b9:
30:20:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:05:00 2026 by rpki-client