
$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
File: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (raw, json)
Hash identifier: 2Mco9ackQ4PwcAVBn4smFndK+Bf6IWVVGl+ndoOGQrM=
Subject key identifier: A4:78:3E:8C:4E:44:F6:B8:65:9D:C7:7E:88:BD:2C:7D:50:07:99:52
Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial: 77E7F37373670BFD9FF6F9678444ADD02D5A7D77
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
Signing time: Thu 05 Mar 2026 12:02:42 +0000
ROA not before: Thu 05 Mar 2026 11:57:42 +0000
ROA not after: Thu 04 Mar 2027 12:02:42 +0000
asID: 142356
IP address blocks: 103.169.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 17:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e7:f3:73:73:67:0b:fd:9f:f6:f9:67:84:44:ad:d0:2d:5a:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Validity
Not Before: Mar 5 11:57:42 2026 GMT
Not After : Mar 4 12:02:42 2027 GMT
Subject: CN=A4783E8C4E44F6B8659DC77E88BD2C7D50079952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:1d:fc:b1:c0:cc:e1:86:9a:f8:76:52:58:
2b:a9:c8:7b:82:93:db:85:6c:99:34:90:ec:f4:63:
81:d3:0d:b5:88:50:3c:9e:68:98:7b:5f:ae:ad:3a:
9e:55:b5:c7:90:41:e4:76:fe:15:dc:98:d2:1d:71:
48:9c:af:f8:a1:98:df:0b:4a:37:13:b9:61:7b:47:
8f:92:51:a1:60:30:86:23:bd:ae:86:fc:fd:b0:48:
e4:8d:e4:c8:f3:d1:0d:7c:aa:66:87:cd:e8:01:6f:
03:88:2a:59:c8:9e:ea:db:7b:6c:e4:7c:db:9c:b5:
65:49:d0:f4:c5:69:7b:36:71:b9:5a:98:e6:68:87:
9f:3b:0b:61:c1:d6:78:44:88:b6:12:63:83:77:f5:
1b:da:8f:8a:35:2d:ee:3f:84:1f:74:31:b3:d8:f2:
9e:a5:54:3d:c8:15:ba:e6:9f:58:1a:fd:06:dc:d9:
52:65:e2:7c:99:69:b8:7c:b5:05:7d:93:74:40:3a:
18:b4:dd:03:8d:5b:3f:98:61:62:3a:6f:16:a9:79:
2b:71:3c:94:44:58:58:e1:7e:ed:76:70:0e:b7:be:
1c:54:cd:3f:7b:40:c6:f9:e2:83:eb:73:b6:4a:d3:
fd:6f:fc:f6:5a:8e:21:7a:78:e7:4b:f6:83:ee:79:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:3E:8C:4E:44:F6:B8:65:9D:C7:7E:88:BD:2C:7D:50:07:99:52
X509v3 Authority Key Identifier:
keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.194.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d3:6e:d5:ee:f6:4b:51:81:11:cb:83:64:d7:c5:cd:34:2b:
4d:8d:2c:c4:21:3b:41:e4:31:a5:37:a4:cf:70:6f:12:33:9e:
27:3b:9e:62:48:14:0e:df:90:be:a6:8d:aa:2a:0c:1a:a1:ba:
7f:07:74:a1:1d:de:8c:22:fe:d2:d6:ee:56:57:ca:96:45:8a:
4d:2c:da:c7:ac:db:d8:f5:72:0c:9c:4c:27:1d:e4:06:da:1b:
9b:76:f4:0b:56:68:11:15:b9:3a:f1:f6:a8:44:97:d0:0d:2f:
a3:92:5a:a7:7e:c3:3c:06:30:03:27:59:bf:64:ef:b0:e2:bb:
2a:93:30:b1:82:eb:15:d1:9c:69:ed:54:cd:c4:fd:24:c6:88:
2f:b4:e6:15:37:ec:44:9d:11:0f:79:81:d1:06:91:41:e9:e3:
19:12:79:b5:76:84:cf:a9:7e:35:22:97:4b:b9:83:11:52:61:
da:08:22:a6:ac:65:df:be:ff:f2:cb:2a:e3:9b:b0:78:5c:1c:
78:48:29:d9:d7:a0:13:8f:f1:2c:21:9e:f6:c5:7e:bb:18:54:
57:86:6c:58:b2:5c:66:d2:f8:70:8c:ba:72:80:bb:78:d0:5d:
e2:4c:10:85:7c:48:92:60:31:49:47:bd:78:05:fe:e2:cb:e1:
0b:7b:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:18 2026 by rpki-client