
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e39302e36342e302f32342d3234203d3e20313336313031.roa
File: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (raw, json)
Hash identifier: Ere/Mue6LDRnmJcZd1LlYsbJSFP1UwKGC0YZPV4qMDs=
Subject key identifier: A5:F6:75:50:11:07:71:31:4D:72:D2:46:62:66:C4:B9:21:3B:31:FD
Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Certificate serial: 5322327B696D40919A5A1C222497B3722987334B
Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e39302e36342e302f32342d3234203d3e20313336313031.roa
Signing time: Thu 19 Mar 2026 03:02:45 +0000
ROA not before: Thu 19 Mar 2026 02:57:45 +0000
ROA not after: Thu 18 Mar 2027 03:02:45 +0000
asID: 136101
IP address blocks: 103.90.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl
rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:22:32:7b:69:6d:40:91:9a:5a:1c:22:24:97:b3:72:29:87:33:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Validity
Not Before: Mar 19 02:57:45 2026 GMT
Not After : Mar 18 03:02:45 2027 GMT
Subject: CN=A5F67550110771314D72D2466266C4B9213B31FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:8e:a0:49:03:ef:54:3d:bb:91:45:ab:8e:
d4:a1:6b:9a:4b:82:8d:10:c7:1d:2d:a2:29:8b:c3:
3d:99:81:04:86:c5:97:0f:df:bd:4b:a2:4b:86:34:
cd:25:00:e0:bd:3e:94:14:e8:ef:7a:8e:f3:47:67:
db:ee:20:95:a9:8f:a7:fe:68:48:f2:58:f1:a1:2b:
5e:b7:85:5e:2c:af:7e:f7:1f:9e:e2:89:e8:0b:e4:
6b:eb:7d:23:29:5e:ec:89:9d:b0:53:3c:53:db:10:
1d:fb:08:fb:6c:e4:4a:4e:7e:28:4a:fe:bb:9f:ea:
b3:7a:c9:2a:86:42:6d:e9:1e:8e:31:7a:aa:25:58:
0a:7e:35:aa:ec:51:b3:43:f4:b2:b5:62:e6:c6:b6:
a2:de:40:5a:0e:69:2a:c9:1b:52:9c:7b:f7:7b:66:
6d:c0:70:04:da:81:e1:f8:a4:e8:02:ef:1e:81:b7:
78:e6:45:f7:a7:14:f3:ba:95:e6:99:06:40:db:6c:
e7:2d:71:97:3c:8b:fe:a8:1b:b7:99:e2:51:45:15:
9a:4f:ce:e0:bb:6f:aa:47:d2:9b:7e:33:be:65:f2:
69:7b:13:41:11:bf:b1:f5:0b:3c:3e:73:1a:87:ef:
d8:43:5e:fe:c3:f2:c5:a9:54:0c:68:a3:15:cc:76:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:75:50:11:07:71:31:4D:72:D2:46:62:66:C4:B9:21:3B:31:FD
X509v3 Authority Key Identifier:
keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e39302e36342e302f32342d3234203d3e20313336313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.64.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3f:cf:9c:90:bd:93:7c:51:69:db:17:ac:30:34:e8:e7:b9:
fc:c6:14:b8:d1:8b:d4:3b:13:7c:1b:c9:38:a9:22:74:28:0c:
12:e6:60:ba:46:40:84:47:a7:57:a7:73:a1:fb:20:e2:fb:57:
db:ee:29:6c:f8:00:dc:a5:fa:1c:5d:7d:1c:52:98:15:97:d3:
4a:cc:2e:f9:3c:d8:59:8b:62:0c:f7:ad:56:0a:36:c3:b5:2c:
69:50:2e:33:7b:80:2a:52:32:45:3b:85:11:3a:6f:18:95:5f:
08:3e:ed:99:e8:56:74:01:6d:e8:f4:ba:d5:f2:ca:c9:b8:10:
3b:8a:c8:ad:0a:74:58:25:68:d8:78:12:79:6a:f2:00:b9:a9:
2b:57:f9:7c:c7:1c:b8:d1:03:15:78:d4:68:04:a2:f7:1a:2e:
44:dc:1d:80:65:8a:3f:a1:c5:44:9b:01:bd:af:ba:0c:90:8f:
77:b5:74:58:bd:92:24:cf:6e:4b:e3:25:d8:2e:7b:f9:40:5a:
4d:de:de:14:7f:44:96:d3:30:aa:c9:cf:49:18:3e:88:43:e2:
3e:24:2f:f4:cc:4b:18:6a:84:21:c7:54:83:35:43:c1:7f:7a:
1d:bd:77:8a:59:74:67:34:84:9b:5b:47:ed:2a:ee:b4:36:76:
81:e3:f1:3a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUyIye2ltQJGaWhwiJJezcimHM0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF
QUJCRDE3MTAeFw0yNjAzMTkwMjU3NDVaFw0yNzAzMTgwMzAyNDVaMDMxMTAvBgNV
BAMTKEE1RjY3NTUwMTEwNzcxMzE0RDcyRDI0NjYyNjZDNEI5MjEzQjMxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJY6gSQPvVD27kUWrjtSha5pL
go0Qxx0toimLwz2ZgQSGxZcP371LokuGNM0lAOC9PpQU6O96jvNHZ9vuIJWpj6f+
aEjyWPGhK163hV4sr373H57iiegL5GvrfSMpXuyJnbBTPFPbEB37CPts5EpOfihK
/ruf6rN6ySqGQm3pHo4xeqolWAp+NarsUbND9LK1YubGtqLeQFoOaSrJG1Kce/d7
Zm3AcATageH4pOgC7x6Bt3jmRfenFPO6leaZBkDbbOctcZc8i/6oG7eZ4lFFFZpP
zuC7b6pH0pt+M75l8ml7E0ERv7H1Czw+cxqH79hDXv7D8sWpVAxooxXMdviRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpfZ1UBEHcTFNctJGYmbEuSE7Mf0wHwYDVR0j
BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3
RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC
RDE3MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmMzQwNGU2LWJiMmEtNDRiMC1i
ZWRlLWE4YjM1MDE0NjEyZC8wLzMxMzAzMzJlMzkzMDJlMzYzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdaQDANBgkqhkiG
9w0BAQsFAAOCAQEAFD/PnJC9k3xRadsXrDA06Oe5/MYUuNGL1DsTfBvJOKkidCgM
EuZgukZAhEenV6dzofsg4vtX2+4pbPgA3KX6HF19HFKYFZfTSswu+TzYWYtiDPet
Vgo2w7UsaVAuM3uAKlIyRTuFETpvGJVfCD7tmehWdAFt6PS61fLKybgQO4rIrQp0
WCVo2HgSeWryALmpK1f5fMccuNEDFXjUaASi9xouRNwdgGWKP6HFRJsBva+6DJCP
d7V0WL2SJM9uS+Ml2C57+UBaTd7eFH9EltMwqsnPSRg+iEPiPiQv9MxLGGqEIcdU
gzVDwX96Hb13ill0ZzSEm1tH7SrutDZ2gePxOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:53 2026 by rpki-client