
$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
File: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (raw, json)
Hash identifier: ugs0c0VPcoyXvgnQe8BNqVxdTK1dLc3Sk2MjVANs5YE=
Subject key identifier: 67:36:3C:87:73:78:3D:C9:5F:CA:B0:6B:D8:0F:F7:6B:DC:FB:AE:0B
Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
Certificate serial: 28F8D5189BB0F0723C4BEFDCFE8EB0797EF9883E
Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
Signing time: Tue 24 Mar 2026 10:00:00 +0000
ROA not before: Tue 24 Mar 2026 09:55:00 +0000
ROA not after: Tue 23 Mar 2027 10:00:00 +0000
asID: 56251
IP address blocks: 103.4.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl
rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 18:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f8:d5:18:9b:b0:f0:72:3c:4b:ef:dc:fe:8e:b0:79:7e:f9:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
Validity
Not Before: Mar 24 09:55:00 2026 GMT
Not After : Mar 23 10:00:00 2027 GMT
Subject: CN=67363C8773783DC95FCAB06BD80FF76BDCFBAE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:45:2a:04:c0:9f:53:a4:cf:3c:94:05:5f:
f0:1d:e9:16:e2:53:7a:7d:b8:f2:07:3c:58:14:84:
40:72:f4:c3:ad:42:6b:7e:66:de:99:23:26:a8:72:
33:2a:b6:c8:e8:f7:d9:05:d5:9c:c9:16:38:37:d9:
7a:eb:68:4b:71:0c:9e:0a:34:85:22:27:9a:24:24:
63:c6:93:11:bb:0c:1a:34:02:d0:b3:18:38:27:ab:
c2:da:4c:4e:6a:36:b7:b4:29:cf:3c:3d:d6:00:6e:
e7:21:43:e0:68:d2:93:26:86:7f:c9:5f:90:26:8c:
6c:b5:2c:25:cc:64:98:7a:66:1f:b8:5b:d7:93:03:
10:c6:87:1a:56:fa:d5:84:bb:7a:3c:d7:7b:d3:81:
80:74:52:78:1c:f2:c3:fb:75:e2:4c:f5:b2:6d:77:
86:75:a2:d7:1d:98:23:cc:57:e7:c5:d3:cb:1b:96:
2a:8e:fd:61:c1:bd:6f:50:06:32:c2:17:94:3a:bc:
5e:da:c6:81:f0:7a:1f:3f:55:2d:75:fe:0d:ed:29:
ae:29:17:20:21:8b:2d:53:11:f4:a5:79:ef:75:9f:
23:b3:f6:69:1f:22:9f:86:8d:2e:72:23:ed:b4:37:
1e:e1:e3:40:ee:9c:5a:cf:4c:c5:d9:dd:a8:60:51:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:36:3C:87:73:78:3D:C9:5F:CA:B0:6B:D8:0F:F7:6B:DC:FB:AE:0B
X509v3 Authority Key Identifier:
keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.175.0/24
Signature Algorithm: sha256WithRSAEncryption
31:18:3f:a4:c3:03:a5:84:06:53:97:9e:49:57:64:f3:bd:50:
b8:8b:b1:20:e1:af:21:83:54:5c:05:06:81:30:11:04:fd:9d:
84:7b:cd:c9:5a:6a:f4:82:ab:8e:2a:1b:ba:7d:b8:b4:a8:6c:
e7:78:fc:34:39:0f:9f:26:56:9e:9d:5c:b5:d4:fb:57:da:66:
0f:b8:4a:0e:44:d4:a5:ee:2b:33:5e:92:61:71:30:8a:f0:cb:
3c:7f:0c:b4:01:2d:d1:7c:f2:0c:e7:a0:59:36:55:88:8c:f2:
c5:99:33:23:27:a6:2c:e2:d7:34:15:cf:ba:bb:cb:c3:5f:d5:
73:ba:fd:b0:e9:a6:35:a8:d2:c4:82:52:0e:6e:8c:40:cc:fc:
32:d2:a8:86:c7:9b:ba:67:4e:e6:b1:59:01:98:e7:c0:23:fe:
a4:44:28:32:b7:ce:4e:e8:fc:13:5f:b0:4c:8a:1c:89:b7:27:
22:fd:7d:e0:92:e7:b8:aa:82:64:8d:15:92:97:2d:25:4e:05:
ac:b8:ea:7a:dc:05:09:09:11:80:73:aa:d6:2a:9a:94:57:72:
8c:98:c8:c0:39:cb:54:09:1f:f8:f1:ca:f8:e2:bb:30:da:8d:
9f:43:bb:85:52:2f:b2:a4:49:01:27:c9:34:67:f3:e4:d1:9f:
c7:3e:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:07 2026 by rpki-client