
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
File: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (raw, json)
Hash identifier: Lndmx8VAy2DFBCTOeRbYATrs2gBsgQhEdnrs3xfeT3Y=
Subject key identifier: 12:A5:D3:C4:15:32:A0:7F:15:E7:32:85:6A:3A:6F:39:84:FC:63:F5
Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
Certificate serial: 08447B780166758ED7020096BA52EC5E4AE53280
Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
Signing time: Sun 03 May 2026 02:12:43 +0000
ROA not before: Sun 03 May 2026 02:07:43 +0000
ROA not after: Sun 02 May 2027 02:12:43 +0000
asID: 147108
IP address blocks: 103.175.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl
rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:44:7b:78:01:66:75:8e:d7:02:00:96:ba:52:ec:5e:4a:e5:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
Validity
Not Before: May 3 02:07:43 2026 GMT
Not After : May 2 02:12:43 2027 GMT
Subject: CN=12A5D3C41532A07F15E732856A3A6F3984FC63F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:ef:ea:3b:36:2d:e2:12:7a:3f:cd:d2:51:
91:cb:15:b9:7a:2d:41:af:d6:50:92:a3:11:56:5c:
8a:f4:6f:b6:22:7f:d7:a1:32:7d:f3:37:1c:4e:49:
a9:b3:35:a8:a9:d1:fb:c9:31:f2:23:b6:63:ec:47:
ec:a0:50:6b:95:f0:cd:90:bf:91:e7:a9:56:06:28:
dd:3e:cf:79:95:40:6e:8c:c3:7d:68:c8:95:49:a5:
0a:31:86:97:f2:78:ca:53:85:52:38:cd:a5:aa:06:
cb:b7:b2:95:04:b7:22:be:35:75:14:52:88:eb:1b:
6f:71:45:67:d1:3b:0d:06:f8:5b:6d:3e:78:0d:83:
44:67:ac:ad:19:e2:b3:6f:e9:1e:9e:39:60:ec:7c:
55:25:df:f0:25:fd:bd:18:8a:f4:48:93:87:4b:20:
e5:94:55:ab:24:b8:34:0a:26:6d:3e:39:27:ea:22:
99:66:5e:7a:bf:e3:c6:1d:18:7e:f5:1d:6a:6e:6e:
99:e2:e8:88:1e:f2:d9:85:b7:78:8e:b3:c7:4b:5d:
ac:05:6d:0a:8c:87:d0:6f:88:da:ff:b8:51:68:89:
9b:aa:91:ae:ca:a7:22:b0:92:02:52:67:53:84:01:
9a:f5:84:f5:3d:c4:5f:26:58:e0:46:57:30:57:f3:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:D3:C4:15:32:A0:7F:15:E7:32:85:6A:3A:6F:39:84:FC:63:F5
X509v3 Authority Key Identifier:
keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.38.0/23
Signature Algorithm: sha256WithRSAEncryption
55:34:a0:92:c9:68:e4:13:0c:5d:c2:66:63:60:f9:a8:86:1e:
77:d6:24:97:92:37:be:4e:6f:07:6e:39:52:f2:67:ee:14:5f:
6a:65:aa:5e:1e:ad:d3:3c:ec:34:b9:f8:1b:c0:37:66:fe:cc:
34:bf:37:85:b9:48:a0:3c:10:a6:08:8c:49:16:30:65:5e:12:
af:81:82:bc:f6:08:0f:84:f3:a0:2e:44:0c:a3:d3:81:23:ad:
5f:3a:7a:2e:2a:da:e4:ae:1c:a6:41:7e:b6:3d:fb:30:30:04:
20:cd:db:02:67:44:b6:8a:57:45:37:d5:83:44:5c:f2:12:53:
74:80:8b:6a:32:61:28:c7:e6:5a:81:f6:bf:12:b5:f2:de:b7:
c9:38:03:2c:53:de:ab:76:1e:37:57:a8:c7:3d:80:66:74:fc:
9f:2c:7c:c8:f1:c5:f4:57:ff:48:2b:50:28:80:53:33:d7:a4:
d9:0d:4f:c2:a9:d3:c2:c4:29:cd:7d:7b:79:ba:96:20:41:01:
a1:87:21:46:7e:4a:fa:70:d7:a7:ab:14:9e:c6:22:ef:82:f7:
39:81:cf:7f:aa:5e:1d:1e:a8:94:8c:29:4c:da:78:eb:73:1f:
17:94:89:5b:45:fa:d5:78:fd:b1:bb:d8:82:23:26:c1:33:98:
7f:2e:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:08 2026 by rpki-client