
$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa
File: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (raw, json)
Hash identifier: fTLUAZbiCY/Ww+CA8ekFwysStY8qimv1O0WpbE/EpHs=
Subject key identifier: F1:1F:F4:32:F9:1D:50:31:08:95:68:58:93:AD:28:F2:51:44:6E:1A
Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Certificate serial: 59CF1FF83714327FF46FB33BAD57109E2697F8C9
Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa
Signing time: Mon 16 Mar 2026 17:00:00 +0000
ROA not before: Mon 16 Mar 2026 16:55:00 +0000
ROA not after: Mon 15 Mar 2027 17:00:00 +0000
asID: 141069
IP address blocks: 103.155.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl
rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 19:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cf:1f:f8:37:14:32:7f:f4:6f:b3:3b:ad:57:10:9e:26:97:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Validity
Not Before: Mar 16 16:55:00 2026 GMT
Not After : Mar 15 17:00:00 2027 GMT
Subject: CN=F11FF432F91D50310895685893AD28F251446E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:5a:12:25:10:8f:78:30:13:7a:0e:74:8f:
77:1d:d6:a4:85:92:d3:47:50:cf:d0:37:95:ff:f6:
5a:23:bb:59:30:7a:3f:cc:11:3e:03:6c:00:1e:e5:
d6:36:4a:f2:64:57:5d:b4:16:d2:4f:b7:68:0a:62:
26:23:a7:db:75:38:6d:f2:17:5d:c5:47:6e:af:1b:
50:55:24:1c:27:cc:a2:4f:ce:90:f1:21:b8:53:69:
7d:70:be:e7:bb:19:2f:df:1a:c0:1f:20:05:a7:02:
c1:c4:27:62:23:00:90:d3:f9:20:69:86:5e:bd:2f:
ce:44:6c:7d:fe:4c:76:a4:9c:1b:48:b8:56:27:c9:
db:61:ea:c1:c8:2d:38:5d:0d:cc:6d:a8:78:c9:ad:
d1:0c:09:ef:a7:f5:9c:30:1f:ef:c2:5e:2d:20:60:
40:f5:0d:c0:20:2a:df:43:1d:62:a4:df:1d:df:a1:
fa:52:dd:be:54:f3:98:1f:c0:dc:f2:47:1a:ee:f7:
20:bc:ba:5c:17:ed:69:7a:29:28:8a:1d:a7:d7:23:
45:95:a9:61:4f:07:d5:a1:28:a8:e6:04:d4:3e:5c:
d9:57:52:a8:83:b7:25:e2:e7:37:bb:36:fa:a6:d8:
32:72:cc:59:ad:9a:ae:62:78:6b:30:c1:d4:4c:a6:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:F4:32:F9:1D:50:31:08:95:68:58:93:AD:28:F2:51:44:6E:1A
X509v3 Authority Key Identifier:
keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.192.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ba:59:ef:26:03:55:bc:30:70:ef:cc:ef:37:c8:b3:de:02:
dc:40:87:7f:5f:5b:23:01:58:d4:c8:6f:49:53:3b:6e:62:43:
dd:a7:09:f6:c0:04:ba:ab:e8:03:b0:f9:09:ef:61:d2:11:32:
e1:40:c3:5a:03:f0:aa:d9:9b:8d:cf:63:95:e9:9b:e2:fb:ce:
b2:46:7e:08:8a:fc:35:34:d8:af:d4:3d:ee:05:e7:e1:20:e4:
bc:54:54:39:eb:b1:16:2d:6d:6c:bf:de:cb:9c:81:67:dc:30:
07:10:42:91:5d:ad:ba:86:14:9e:61:ff:de:ad:6b:39:a7:6f:
d1:5c:81:18:8d:9d:4e:d5:5a:21:da:4d:ae:00:e8:f5:54:d9:
07:d7:f3:4e:3f:6c:97:0b:e1:3c:fe:d3:40:82:3a:c0:c9:e3:
6c:18:46:cd:8f:94:bf:62:e6:e2:fa:7a:c3:5f:6e:b3:be:0d:
c3:96:2f:ea:8b:2c:e1:17:a0:2d:f0:db:fe:84:9f:31:28:b7:
25:3c:c1:dd:68:26:71:37:5f:17:5e:05:71:d0:73:7a:53:54:
b2:f0:09:ee:2e:0b:af:6a:1b:6d:cf:ab:b9:1f:7f:a5:68:da:
6a:91:4e:f8:7b:d9:46:38:25:48:e1:15:76:11:8b:b0:8a:08:
6d:db:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:34 2026 by rpki-client