
$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
File: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (raw, json)
Hash identifier: 4gi3J8FjPJTNq/5daFRZnZCK3lpxCNHJRNdMzqPgZFU=
Subject key identifier: E3:57:97:F0:ED:6F:71:41:FB:61:8A:9B:B9:45:B8:EB:27:BC:2C:61
Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Certificate serial: 69D891A5DF95420A28B944FFF804E4ECA2858187
Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
Signing time: Mon 09 Mar 2026 20:00:02 +0000
ROA not before: Mon 09 Mar 2026 19:55:02 +0000
ROA not after: Mon 08 Mar 2027 20:00:02 +0000
asID: 140390
IP address blocks: 103.150.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 17:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d8:91:a5:df:95:42:0a:28:b9:44:ff:f8:04:e4:ec:a2:85:81:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Validity
Not Before: Mar 9 19:55:02 2026 GMT
Not After : Mar 8 20:00:02 2027 GMT
Subject: CN=E35797F0ED6F7141FB618A9BB945B8EB27BC2C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:3e:e1:ae:37:2c:82:40:47:a8:be:fe:e2:
99:72:1b:b8:39:f4:34:67:7a:45:7f:af:4a:12:1f:
4e:25:e3:3f:7d:d9:15:1c:03:b1:32:ae:a6:de:a3:
54:70:e8:c8:2e:79:40:5f:45:56:29:39:95:41:f0:
f2:1d:de:2d:8b:ed:9a:89:58:5e:1f:cb:93:2d:b0:
57:a2:40:ec:ad:b0:1c:c6:e2:76:ff:c2:37:ab:ab:
77:bc:39:b2:98:41:bb:9c:d7:39:93:1c:37:84:8b:
63:a7:e0:82:8b:ae:f6:90:e6:39:a1:49:40:c3:0b:
3b:9b:32:a6:c3:62:eb:91:c6:da:a6:6d:32:66:62:
1c:8c:db:c6:42:9e:9b:b7:2f:54:6c:0d:f6:bd:94:
b2:ab:ef:69:23:8c:7f:a1:81:9a:fb:3d:09:a7:af:
ae:4d:37:76:69:08:e2:70:b5:e9:a7:d4:e0:0b:42:
5d:83:80:63:be:d9:c4:ec:5a:5d:a1:c8:8a:ac:ae:
19:4c:64:df:8d:f7:6a:12:59:2d:5d:e0:da:d4:0b:
0c:1a:80:fb:de:14:6b:97:f0:24:5d:bf:a0:9a:a1:
46:eb:28:1f:94:e2:dc:49:cd:7a:1a:b5:34:68:39:
74:c1:89:0d:b4:8d:6c:f0:ea:6b:fd:61:46:bb:8b:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:97:F0:ED:6F:71:41:FB:61:8A:9B:B9:45:B8:EB:27:BC:2C:61
X509v3 Authority Key Identifier:
keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.32.0/23
Signature Algorithm: sha256WithRSAEncryption
68:75:8a:45:46:76:04:a9:94:a8:12:12:fb:17:d3:06:e6:89:
f7:43:26:73:bb:35:03:da:d2:59:0f:35:99:83:ed:8e:97:8c:
61:f9:e0:2d:eb:65:7f:c1:34:df:28:d6:3e:3f:cc:3e:8f:e5:
08:87:2f:7f:c6:57:ec:a4:b3:c9:5a:aa:01:6d:c0:80:19:d5:
a4:69:7f:32:75:78:b6:d2:5c:43:b9:ff:2c:4e:10:88:28:cb:
d5:d3:e4:d3:13:5b:e1:c1:39:c0:08:81:22:56:1f:01:2b:b2:
df:e3:20:c1:6a:86:29:8e:b4:b4:5c:87:f5:00:25:42:5b:5f:
15:4f:54:99:5d:f3:86:69:96:58:a1:07:6f:7e:e3:b9:88:ba:
1d:27:cd:39:96:8e:15:e6:c0:1a:12:b3:4b:77:16:61:38:49:
d5:ac:65:d8:c0:ba:e6:f1:83:5a:5c:e8:48:ff:99:3d:6f:9d:
ca:bd:93:f3:c6:50:79:0d:98:d6:06:c3:10:a4:b6:f6:9d:96:
26:d8:4a:ee:47:77:48:f1:22:0a:87:1d:83:39:fb:18:08:6b:
1a:6f:66:6c:39:22:89:2e:25:3b:e9:0a:33:09:60:9e:0f:0e:
a3:27:b9:24:ae:e6:07:3f:e7:c9:f9:a4:91:d6:2f:df:49:a7:
d0:57:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:20:04 2026 by rpki-client