
$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
File: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: GBDiH/ZssX0EIYoemKzDZFG2u4fkDEOvHZXbsj6YXMI=
Subject key identifier: EE:22:61:E0:4E:1A:51:0E:0E:69:E7:63:92:9D:D6:D1:37:90:A1:FC
Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial: 6C71A13D97A184D0C2B9E446809A819C5B622A41
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
Signing time: Wed 04 Mar 2026 04:03:19 +0000
ROA not before: Wed 04 Mar 2026 03:58:19 +0000
ROA not after: Wed 03 Mar 2027 04:03:19 +0000
asID: 55685
IP address blocks: 103.247.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:71:a1:3d:97:a1:84:d0:c2:b9:e4:46:80:9a:81:9c:5b:62:2a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Validity
Not Before: Mar 4 03:58:19 2026 GMT
Not After : Mar 3 04:03:19 2027 GMT
Subject: CN=EE2261E04E1A510E0E69E763929DD6D13790A1FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e4:88:0f:6a:fc:06:6e:6b:97:37:4f:5a:08:
b6:3e:44:62:f6:4a:30:8f:23:71:a8:6d:3a:50:9e:
b7:a2:22:5b:1e:cb:45:2e:06:96:b7:93:30:c5:44:
05:d4:50:ae:bc:60:30:1e:e3:c1:af:49:e2:cf:21:
88:2b:c1:b3:03:db:38:f4:8b:4c:52:d9:55:2b:94:
21:5e:67:0f:f2:fd:08:af:67:89:f9:25:1f:1a:1c:
b9:62:cb:39:17:83:04:50:d1:65:11:60:c2:09:d6:
12:31:1e:e3:d7:94:50:99:80:71:e0:ef:1a:eb:9d:
26:93:a3:b5:02:18:2a:1d:76:bd:8d:9d:c8:ba:af:
3d:e4:bb:73:a0:84:37:22:4c:2f:37:6b:9d:ce:1d:
3d:e3:35:b3:bd:63:80:de:bd:a7:e3:d7:ad:a4:f8:
e1:ca:66:bf:d2:67:9f:76:54:65:3c:f8:02:6d:f5:
99:5b:43:40:b6:2a:82:f8:a0:5e:23:30:20:fe:69:
83:6c:a4:de:75:28:2d:39:30:12:cd:16:a6:c7:4d:
19:38:e6:44:37:c6:b1:80:34:13:9a:92:2c:91:ed:
92:79:7d:b1:fe:a4:10:ca:98:48:41:85:5c:6f:1b:
8d:3f:ee:a0:70:e7:05:8a:48:a0:2a:5c:1e:b0:1f:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:61:E0:4E:1A:51:0E:0E:69:E7:63:92:9D:D6:D1:37:90:A1:FC
X509v3 Authority Key Identifier:
keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.41.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2c:fb:fe:0f:6d:1d:5e:1d:9b:78:49:62:07:29:96:e6:2d:
bb:ee:bc:d7:bb:7b:42:50:b0:60:78:f1:7b:62:c3:06:85:03:
57:32:bb:17:53:cc:42:41:e1:4d:5b:cb:88:57:ee:c8:5b:70:
b3:f7:ca:d6:e7:b6:01:a5:16:ee:86:58:e7:f0:c9:8c:0e:22:
d9:d8:a8:68:b9:e6:27:52:d6:08:f7:24:91:d9:0a:71:2b:88:
d1:71:b9:a5:47:5e:71:5e:3b:1f:ad:94:fc:08:bb:4d:57:49:
b7:be:e0:78:f6:79:65:ec:6f:90:b9:8b:dd:53:0e:26:00:70:
ae:9b:ae:b8:f5:04:db:39:94:a0:15:de:d2:86:63:d3:1b:82:
7f:b4:bc:c0:a9:37:35:63:ee:b4:d3:b5:00:e7:8d:fc:a3:2f:
47:f3:68:ed:09:df:54:25:11:fc:cc:c3:bf:01:dc:14:68:84:
34:32:81:09:23:7d:e2:03:5c:6d:ce:4b:28:b9:7a:74:be:e7:
e4:73:a9:1d:e1:75:9a:c9:6f:29:41:8b:76:54:0f:46:e4:2d:
cc:6b:12:19:82:5a:d2:ce:c1:0d:b2:34:ff:a9:ca:e3:d6:92:
cf:30:ae:de:da:8a:1a:55:dc:2c:3e:ea:46:03:13:c0:f9:ea:
02:5b:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:10 2026 by rpki-client