
$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
File: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: 16REvE5kemlxlXUkBlf2MUSEFyN5rENLT9cPzHwRYNA=
Subject key identifier: EF:6B:A1:C9:00:46:92:12:BE:D7:95:7B:C4:87:43:4D:B4:62:38:05
Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862
Certificate serial: 60F2A62366CA3140E8D33F693DB58BC8E04FE326
Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
Signing time: Thu 19 Mar 2026 05:02:46 +0000
ROA not before: Thu 19 Mar 2026 04:57:46 +0000
ROA not after: Thu 18 Mar 2027 05:02:46 +0000
asID: 38320
IP address blocks: 103.174.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl
rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f2:a6:23:66:ca:31:40:e8:d3:3f:69:3d:b5:8b:c8:e0:4f:e3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862
Validity
Not Before: Mar 19 04:57:46 2026 GMT
Not After : Mar 18 05:02:46 2027 GMT
Subject: CN=EF6BA1C900469212BED7957BC487434DB4623805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:f7:51:2d:f6:cf:8b:52:0e:d0:59:94:5a:
31:69:da:9b:94:6d:e7:97:85:d2:98:11:cf:fd:55:
4d:10:82:fb:5c:7a:55:48:9f:b3:5f:4a:41:71:4d:
9e:7a:61:42:20:9c:2a:58:b2:78:d7:ad:38:16:43:
ef:e2:a8:7e:b8:89:60:7b:51:be:c0:67:16:1b:d1:
89:00:b4:17:a7:ea:14:73:e4:e8:5d:5c:5f:e6:8b:
ff:c6:0d:aa:5e:17:a1:ea:72:3d:a0:85:98:73:aa:
eb:28:fb:b9:b6:b6:09:08:3e:02:d2:71:0e:4f:25:
d1:50:5f:23:67:0f:16:d8:a9:a1:21:a0:72:5c:83:
43:3e:4f:c5:f4:3d:23:8f:7c:74:70:78:e3:f1:50:
34:57:c1:16:e8:d1:1c:ce:8f:2d:99:61:74:06:3e:
39:7b:c3:b9:cd:54:aa:86:1e:ab:31:80:f8:d1:25:
df:ca:81:34:86:a2:43:92:5e:7c:09:5f:45:19:d2:
6c:7d:13:95:13:54:d5:16:a8:50:cc:cd:69:34:51:
33:e4:f1:d3:ed:99:eb:23:3b:d5:c2:b7:03:74:3c:
27:74:92:3d:26:a9:21:1e:b5:7d:4f:1e:01:1f:5a:
28:7b:df:bd:2d:8a:21:dd:13:cd:a6:8d:af:1f:07:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6B:A1:C9:00:46:92:12:BE:D7:95:7B:C4:87:43:4D:B4:62:38:05
X509v3 Authority Key Identifier:
keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.90.0/23
Signature Algorithm: sha256WithRSAEncryption
43:c2:4a:d1:b2:9a:bc:6d:3d:cd:b9:b0:e4:f3:b6:5a:4f:30:
1d:d9:76:23:f7:e3:38:6a:1d:62:be:8c:21:6a:75:7f:17:8a:
d6:c0:93:d3:4f:e8:9b:1a:c0:c2:24:78:db:51:fb:53:31:f0:
07:fd:44:99:df:bb:ac:cb:aa:38:15:ef:ff:4f:cc:0d:2b:1c:
c7:7f:c4:67:a4:6a:00:89:b5:d6:14:be:c9:98:7d:4d:a5:4b:
4a:42:b7:43:10:69:5a:ea:ac:56:4d:09:28:88:64:5e:98:e7:
e8:97:13:19:ff:b9:4e:50:c2:be:0a:04:16:d0:e4:27:f5:dd:
65:c0:dc:17:6a:5b:f1:cc:ef:c1:07:22:c1:3e:d0:69:62:6b:
b5:7a:17:b9:4f:98:6f:e8:7f:ae:1e:d2:cd:cd:d8:88:8d:75:
b6:1b:bd:dc:05:2a:05:d5:a6:5d:f8:b2:95:df:42:e2:a9:ec:
fa:cc:18:5b:15:66:dc:05:c2:2b:7d:f4:30:b3:11:30:3f:bc:
43:c2:40:59:d7:9e:61:14:a7:de:d9:69:13:22:90:2d:ad:aa:
03:f2:20:34:79:52:49:8b:8e:bc:93:36:7d:8e:ae:9c:27:a3:
6a:f6:fd:49:63:3f:25:44:7f:e0:60:1a:2b:eb:f5:fd:06:3d:
42:cb:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:31 2026 by rpki-client