
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
File: 3130332e36382e322e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier: b0fg43jsXqVjUUFIWOEaJrmdeWshr60kHV+8E+gkqUI=
Subject key identifier: 4D:CA:11:91:79:0F:C5:EC:3B:3F:E1:8D:86:9B:AC:58:CB:20:CE:FB
Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial: 627DA0968AE8E78B5B4F9886B5E8EA75DBE680FC
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
Signing time: Tue 24 Mar 2026 15:00:01 +0000
ROA not before: Tue 24 Mar 2026 14:55:01 +0000
ROA not after: Tue 23 Mar 2027 15:00:01 +0000
asID: 150265
IP address blocks: 103.68.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 19:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7d:a0:96:8a:e8:e7:8b:5b:4f:98:86:b5:e8:ea:75:db:e6:80:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Validity
Not Before: Mar 24 14:55:01 2026 GMT
Not After : Mar 23 15:00:01 2027 GMT
Subject: CN=4DCA1191790FC5EC3B3FE18D869BAC58CB20CEFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:64:23:80:3f:8e:ed:ab:dd:30:42:f9:29:
bd:1d:9d:44:a4:ee:12:b3:2a:cf:30:c9:22:39:1e:
d7:43:8a:d5:bf:b7:bd:c5:4b:0d:4a:2d:9e:a2:0d:
9d:a0:a7:03:12:8e:6e:19:4d:f7:6d:bb:cc:1d:c3:
75:1f:54:74:3a:5c:f6:9b:9f:50:d3:01:79:6c:2b:
1d:62:82:c8:53:e2:5b:00:d1:a1:d3:bb:ec:2d:87:
77:44:f3:2f:43:1a:dd:e8:8e:2e:b6:35:41:4d:e1:
b1:1c:24:7e:f3:be:99:54:c7:bb:51:63:56:d7:41:
2f:32:96:bc:a3:3d:ea:6d:59:f8:26:12:79:ab:cc:
ac:7f:99:b4:6d:55:c6:38:15:6e:24:94:27:7a:d3:
b8:3a:0b:7a:ea:b9:a6:40:db:d6:d4:c6:38:47:0e:
89:a3:fb:f3:9f:13:02:35:b8:4e:91:bc:47:86:56:
03:be:92:dd:36:ba:44:95:43:8b:51:16:28:52:67:
af:a9:48:c3:58:7b:cc:b7:36:a5:8e:97:f7:f5:9a:
c4:b5:ff:88:08:2d:38:f1:ea:7e:08:b5:fa:0c:1f:
43:41:39:de:07:b4:1c:90:56:72:0a:93:80:a9:e4:
5c:d3:20:c3:66:4c:ca:2c:f4:ae:dc:a4:ea:66:96:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:11:91:79:0F:C5:EC:3B:3F:E1:8D:86:9B:AC:58:CB:20:CE:FB
X509v3 Authority Key Identifier:
keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.2.0/24
Signature Algorithm: sha256WithRSAEncryption
af:7e:f6:16:ec:79:66:c2:4b:53:9f:08:e3:06:58:55:38:83:
84:2e:41:89:01:0c:1c:47:6a:86:ba:91:b1:56:ef:18:35:26:
60:e0:f9:e2:2b:c4:d0:e4:87:2e:94:0f:4b:b3:62:85:fa:a9:
e4:56:23:cf:3a:d9:36:9a:cb:50:e6:65:a2:b4:89:6b:af:d9:
cc:25:18:94:16:6a:91:69:e7:d4:b5:49:c3:e4:62:39:96:d7:
7f:46:06:6d:13:1b:be:01:2a:db:8d:98:4e:bc:44:e7:a8:86:
79:4b:9e:2a:b2:fe:19:57:a7:22:ab:e5:1b:3e:25:8c:39:27:
88:e1:64:6d:00:f0:94:c7:68:18:1a:b6:42:44:c4:dc:9b:fd:
ca:16:03:07:d2:ba:bc:86:4f:21:6b:26:37:a8:d0:a1:a9:f3:
9a:fa:81:9b:1f:e8:1b:41:31:d2:45:b6:6a:2f:2b:20:0a:f4:
90:5a:af:1b:90:4b:e4:bd:ca:e2:59:8d:15:e5:64:fa:51:6e:
dd:f4:f9:d9:cf:64:41:27:7b:29:9a:bd:48:e2:b1:04:63:84:
9e:78:5f:31:f2:40:08:2b:c7:42:05:6d:90:d4:44:92:e0:93:
c9:b0:f9:50:01:bc:01:8c:9a:5c:44:f1:76:22:ab:e0:4d:df:
e7:78:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:14 2026 by rpki-client