
$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
File: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier: 3lKziCGfog5xq/tcpvDi0XNRN3r/T9hwdAmibroahAI=
Subject key identifier: 46:EB:1B:73:50:9B:5C:F0:4B:DC:54:6A:EF:66:A0:CB:13:22:8A:C5
Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial: 2A0C1F6FAA9DDA06AEB2548B545F7DD36267D6A1
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
Signing time: Wed 11 Mar 2026 10:02:34 +0000
ROA not before: Wed 11 Mar 2026 09:57:34 +0000
ROA not after: Wed 10 Mar 2027 10:02:34 +0000
asID: 151000
IP address blocks: 103.153.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0c:1f:6f:aa:9d:da:06:ae:b2:54:8b:54:5f:7d:d3:62:67:d6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Validity
Not Before: Mar 11 09:57:34 2026 GMT
Not After : Mar 10 10:02:34 2027 GMT
Subject: CN=46EB1B73509B5CF04BDC546AEF66A0CB13228AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:85:c9:c7:48:54:cb:e9:a1:b2:73:40:07:
e5:7e:d1:36:5f:44:1e:90:c6:07:1a:fe:c8:ca:c7:
ff:1b:ba:84:d9:33:2c:a7:f1:ca:0a:39:92:52:42:
3c:28:29:71:00:62:4a:cc:43:9a:71:6d:8c:c2:85:
69:18:28:5c:49:59:d4:0d:31:2a:e8:58:c2:16:7b:
ec:4b:de:ae:a3:1d:57:f8:3f:a3:30:78:48:ed:4c:
60:e3:8c:f9:2a:21:ef:b3:19:8a:ea:0b:e4:14:8c:
18:c8:c4:22:26:c8:c0:a5:ab:d2:bd:51:1b:09:94:
cc:22:b0:7d:85:66:c9:ca:67:4d:4d:1c:61:db:09:
38:55:58:40:a4:76:6e:35:bc:eb:8e:d2:87:fd:fb:
31:6b:8e:d1:fb:6b:de:ce:7f:57:41:29:c2:63:6e:
c2:a7:42:00:cc:1a:8a:df:2e:a2:7c:58:69:ae:2b:
2f:14:ce:31:50:02:4f:59:6a:53:b7:01:5f:f7:2f:
c3:b9:61:b8:97:15:48:1b:50:3e:82:73:54:4a:d1:
54:70:c5:59:c5:93:20:cf:f1:e5:49:64:8d:ee:32:
18:85:f7:80:3c:2d:24:b9:cb:df:85:27:c5:bd:72:
cf:68:b1:3b:01:31:e6:16:7c:33:dc:5f:1f:bd:e6:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:1B:73:50:9B:5C:F0:4B:DC:54:6A:EF:66:A0:CB:13:22:8A:C5
X509v3 Authority Key Identifier:
keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.188.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:c9:b8:ea:cd:62:92:71:27:8a:b9:94:05:ed:6b:03:5f:5e:
ca:a8:0c:c0:34:c7:b2:0a:be:c8:f3:dd:9d:de:b9:3a:e8:19:
20:f7:b0:ae:18:70:cf:9f:b8:5e:f0:a3:9b:a9:95:c1:31:87:
1d:9a:26:00:40:e5:92:6f:5f:95:af:59:52:44:bd:02:5a:42:
7f:39:6e:b8:61:11:cb:6d:5c:c2:c5:f8:f8:ec:c6:02:cf:3c:
3e:da:31:a2:4a:17:27:4f:3d:d8:81:3e:c7:93:f8:64:20:64:
ec:4e:e7:b6:74:41:8f:bc:1a:2e:54:48:a1:3b:09:55:36:4b:
68:14:58:ce:97:e7:93:16:27:48:1f:1a:df:f3:1c:d9:cf:17:
74:99:f2:f9:b6:bb:64:5e:0a:44:5f:cd:84:8e:40:a6:4f:77:
40:19:be:c1:bc:76:37:75:f3:15:ec:ab:df:0d:85:6c:50:b9:
0e:8b:b0:8c:f0:90:a3:f9:02:c7:78:c7:e4:70:9c:7a:7f:08:
c9:27:fd:56:e2:a0:9c:43:40:a4:39:3e:62:de:3e:d0:65:a5:
95:e7:39:95:d7:61:f6:a1:50:d2:a5:c1:9e:98:5b:36:eb:f5:
ad:6d:d5:06:ba:93:95:2f:47:7d:ae:51:f3:e3:1d:53:8b:f1:
1f:d9:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:36 2026 by rpki-client