
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
File: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: o9HU0CrVTQycJgLZz8HUkkMxGbR9NaWzzFPR3fhFim4=
Subject key identifier: C6:8B:83:FE:E2:46:27:6F:05:AB:42:BF:24:55:F3:04:26:85:3D:01
Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Certificate serial: 169571F540425E32CD6EFD19DC3A65DBBE8B8A
Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
Signing time: Thu 19 Mar 2026 03:02:43 +0000
ROA not before: Thu 19 Mar 2026 02:57:43 +0000
ROA not after: Thu 18 Mar 2027 03:02:43 +0000
asID: 38320
IP address blocks: 103.136.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 17:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:95:71:f5:40:42:5e:32:cd:6e:fd:19:dc:3a:65:db:be:8b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Validity
Not Before: Mar 19 02:57:43 2026 GMT
Not After : Mar 18 03:02:43 2027 GMT
Subject: CN=C68B83FEE246276F05AB42BF2455F30426853D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:30:6d:f0:43:bb:4a:38:01:92:57:e3:f0:
92:51:2a:69:01:fe:51:07:7f:38:cf:ef:c9:6d:a4:
b6:d1:04:01:aa:f3:a1:d6:cc:cd:54:15:52:35:63:
78:96:35:bd:af:f0:d5:b8:6e:9d:14:c2:73:f2:da:
84:07:dc:a3:07:b0:9c:f5:ce:21:af:1c:5d:eb:a8:
60:cf:3b:15:6d:59:0f:fc:0b:87:25:c0:15:90:e2:
3a:31:a8:f2:83:6b:48:e1:23:c5:8b:17:28:0d:3f:
63:e7:a9:2e:8d:51:dc:9a:1d:7c:d3:23:b9:0b:05:
75:dd:db:18:db:14:fa:3d:a2:df:f0:02:50:f0:61:
af:e3:b1:2b:a6:0c:ef:15:77:9c:7c:14:7c:13:04:
44:5e:9c:4f:f0:09:9b:69:54:84:e1:4b:02:a1:df:
0d:70:1f:b1:30:ec:95:59:62:16:38:f4:a7:27:8b:
90:b7:12:9f:7e:9b:0b:f3:45:5d:52:99:65:a6:91:
61:52:76:84:0b:22:0b:6e:43:ba:72:80:34:d1:96:
15:0e:75:d4:bd:c2:fa:bf:20:19:ca:7f:de:03:41:
c6:53:e3:9a:4c:41:82:b0:1f:b4:ec:79:d8:69:14:
44:75:a4:ec:e8:ee:d7:cb:24:b3:7b:18:70:09:34:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:83:FE:E2:46:27:6F:05:AB:42:BF:24:55:F3:04:26:85:3D:01
X509v3 Authority Key Identifier:
keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.4.0/22
Signature Algorithm: sha256WithRSAEncryption
e8:46:e9:01:1d:82:27:1e:f1:69:ca:ce:50:0c:05:15:51:00:
8a:92:b2:05:09:b7:1c:ab:bf:9e:a7:a3:df:2e:5d:65:82:16:
4a:88:0c:f5:f1:65:90:08:82:59:f0:66:41:47:c4:dc:bc:4c:
7e:95:9a:3f:d4:83:86:14:45:b9:c7:85:58:a7:9f:b0:40:22:
a1:de:f8:1e:24:21:ba:4c:ba:4d:cc:0b:59:4d:53:fb:ec:d5:
5d:bc:73:c5:3b:1e:93:bd:1d:b0:5b:b1:48:61:3b:f5:cb:a5:
89:26:60:a6:f7:a3:36:39:56:7e:c1:ef:15:21:0e:31:23:d1:
d8:0f:1c:c3:df:39:7c:11:cb:41:ae:41:98:9b:f9:a5:8a:eb:
d9:19:20:45:ab:f2:0a:39:f2:77:6f:e4:d5:00:d3:1f:11:82:
b4:bb:39:97:b3:7b:a5:0f:4f:48:60:f1:8e:22:78:9f:ac:16:
1b:86:6b:47:08:eb:06:7c:2a:02:8b:88:e0:f0:09:1f:c4:b2:
8f:72:51:82:c4:eb:82:e6:9b:b3:a0:26:62:30:02:2d:a2:71:
81:eb:9e:f4:9e:e2:d1:48:5a:62:cc:98:2c:a4:c4:81:b8:cd:
2c:8a:99:e4:9c:2b:ed:43:b0:3d:e7:c3:16:be:91:ae:9e:ff:
ca:bd:79:ce
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgITFpVx9UBCXjLNbv0Z3Dpl276LijANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxRjU2QjRGQURFMTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0
NTE5MUZEMB4XDTI2MDMxOTAyNTc0M1oXDTI3MDMxODAzMDI0M1owMzExMC8GA1UE
AxMoQzY4QjgzRkVFMjQ2Mjc2RjA1QUI0MkJGMjQ1NUYzMDQyNjg1M0QwMTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALHGMG3wQ7tKOAGSV+PwklEqaQH+
UQd/OM/vyW2kttEEAarzodbMzVQVUjVjeJY1va/w1bhunRTCc/LahAfcowewnPXO
Ia8cXeuoYM87FW1ZD/wLhyXAFZDiOjGo8oNrSOEjxYsXKA0/Y+epLo1R3JodfNMj
uQsFdd3bGNsU+j2i3/ACUPBhr+OxK6YM7xV3nHwUfBMERF6cT/AJm2lUhOFLAqHf
DXAfsTDslVliFjj0pyeLkLcSn36bC/NFXVKZZaaRYVJ2hAsiC25DunKANNGWFQ51
1L3C+r8gGcp/3gNBxlPjmkxBgrAftOx52GkURHWk7Oju18sks3sYcAk0j28CAwEA
AaOCAjAwggIsMB0GA1UdDgQWBBTGi4P+4kYnbwWrQr8kVfMEJoU9ATAfBgNVHSME
GDAWgBQfVrT63hFjAnCGVH+8tCTt9FGR/TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Fj
NDVjMjJjLTI3NWItNDI5NS1iNDUzLTYwYTc4M2I5YzQyYS8wLzFGNTZCNEZBREUx
MTYzMDI3MDg2NTQ3RkJDQjQyNEVERjQ1MTkxRkQuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi8xRjU2QjRGQURFMTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5
MUZELmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0
NTMtNjBhNzgzYjljNDJhLzAvMzEzMDMzMmUzMTMzMzYyZTM0MmUzMDJmMzIzMjJk
MzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeIBDANBgkqhkiG9w0B
AQsFAAOCAQEA6EbpAR2CJx7xacrOUAwFFVEAipKyBQm3HKu/nqej3y5dZYIWSogM
9fFlkAiCWfBmQUfE3LxMfpWaP9SDhhRFuceFWKefsEAiod74HiQhuky6TcwLWU1T
++zVXbxzxTsek70dsFuxSGE79culiSZgpvejNjlWfsHvFSEOMSPR2A8cw985fBHL
Qa5BmJv5pYrr2RkgRavyCjnyd2/k1QDTHxGCtLs5l7N7pQ9PSGDxjiJ4n6wWG4Zr
RwjrBnwqAouI4PAJH8Syj3JRgsTrguabs6AmYjACLaJxgeue9J7i0UhaYsyYLKTE
gbjNLIqZ5Jwr7UOwPefDFr6Rrp7/yr15zg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:57 2026 by rpki-client