
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa
File: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (raw, json)
Hash identifier: 6QOkAmqGiGRSbivZx0unIqegpMeo8pm4RaGUZUWR5xc=
Subject key identifier: EA:79:94:AB:75:6C:14:B0:AD:16:41:64:75:5F:15:6F:AE:20:DA:68
Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Certificate serial: 4D504D378D128CF2E00AE61BD97C0C323320485D
Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa
Signing time: Tue 03 Mar 2026 15:00:03 +0000
ROA not before: Tue 03 Mar 2026 14:55:03 +0000
ROA not after: Tue 02 Mar 2027 15:00:03 +0000
asID: 149665
IP address blocks: 103.182.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl
rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 08:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:50:4d:37:8d:12:8c:f2:e0:0a:e6:1b:d9:7c:0c:32:33:20:48:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Validity
Not Before: Mar 3 14:55:03 2026 GMT
Not After : Mar 2 15:00:03 2027 GMT
Subject: CN=EA7994AB756C14B0AD164164755F156FAE20DA68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:da:e1:76:2f:b7:20:bf:f3:fe:5a:cc:e7:ec:
f0:4a:3c:07:15:f2:e3:d6:9e:be:16:fe:89:42:9f:
1a:dd:01:8b:a6:8e:9b:4c:0e:01:4c:cd:08:75:ae:
59:5a:5b:a8:dc:59:c5:7d:05:d0:25:26:83:f7:30:
73:3b:fc:51:a6:07:1f:e4:74:a5:d4:4e:13:0f:28:
3b:e2:07:45:f6:f9:21:0d:cc:ac:00:56:2e:31:c6:
cd:4f:bf:9d:c1:40:38:12:9a:a0:d8:12:9c:2c:55:
1f:79:58:50:63:8e:c5:6f:65:4c:55:3f:f8:d8:78:
d0:c0:c4:56:59:a7:59:d5:71:db:63:a8:ab:a1:6b:
64:49:1b:c7:b8:f3:05:55:d5:d3:88:fa:cd:31:b8:
a1:61:fa:53:ba:03:4f:49:23:f2:6a:b3:b3:f2:a2:
78:67:66:a2:c2:32:0e:ec:64:0b:b6:f0:3b:fa:37:
d2:93:01:01:0d:9a:37:ac:0f:65:47:3d:1c:3a:c4:
43:ef:c9:bc:f1:d5:a0:d8:4d:b7:75:38:91:9c:4a:
1e:c0:24:f5:ce:87:2d:d2:fe:46:d2:69:e7:e7:20:
14:d8:7d:f7:39:dc:8c:84:d6:14:2b:8e:72:07:da:
dc:bc:3d:88:58:f4:03:71:d5:e0:fa:a3:fb:cd:57:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:94:AB:75:6C:14:B0:AD:16:41:64:75:5F:15:6F:AE:20:DA:68
X509v3 Authority Key Identifier:
keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5f:b9:df:0f:61:68:3b:f6:d7:8f:37:bf:65:20:9c:41:b1:
5c:d0:04:0f:83:18:1b:00:72:1d:9b:7b:5b:ce:49:78:24:b1:
19:85:b1:de:a2:1b:ad:8e:81:77:aa:4f:a7:1e:41:14:6b:78:
d0:55:00:d8:cc:90:8b:c4:7b:f7:c6:6e:d8:0b:ff:54:5f:11:
76:16:9a:5b:c0:85:b6:57:1a:cd:6c:dc:c3:83:c6:b5:47:12:
dc:8e:32:67:e8:58:d5:77:ed:ab:13:fe:cc:f1:6d:bf:04:de:
9d:6a:7d:40:2f:ee:00:88:19:75:6f:1b:af:61:19:17:43:81:
00:72:4a:05:c7:60:c7:0e:9e:67:b9:7d:70:a2:81:1f:86:0e:
00:ff:05:0d:5f:5c:96:a8:73:9b:2b:39:cb:af:cc:54:82:94:
48:90:57:e5:ab:7f:60:b1:4d:8a:84:b6:6e:ae:c6:3f:bb:c3:
08:ec:57:c9:b9:3c:11:e1:e9:00:aa:f6:06:a1:64:a7:c3:d3:
4e:43:59:6b:6e:8e:5c:13:d0:21:62:82:5b:68:76:9f:02:71:
a6:23:00:7f:be:ee:b0:ff:75:0d:ed:e8:87:b1:86:2b:18:3a:
b3:6a:d6:89:60:16:87:88:7e:22:2a:51:b0:e8:41:2b:40:43:
3d:60:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:55:25 2026 by rpki-client