
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa
File: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (raw, json)
Hash identifier: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=
Subject key identifier: 7F:58:C5:03:F9:67:E1:67:6E:6C:05:6D:17:C1:9D:83:14:4E:C5:B1
Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216
Certificate serial: 1E443F26AFD3803BFBCF8AEF9CEA2B705BDC11D4
Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa
Signing time: Sun 03 May 2026 02:13:14 +0000
ROA not before: Sun 03 May 2026 02:08:14 +0000
ROA not after: Sun 02 May 2027 02:13:14 +0000
asID: 152008
IP address blocks: 103.168.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl
rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:44:3f:26:af:d3:80:3b:fb:cf:8a:ef:9c:ea:2b:70:5b:dc:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216
Validity
Not Before: May 3 02:08:14 2026 GMT
Not After : May 2 02:13:14 2027 GMT
Subject: CN=7F58C503F967E1676E6C056D17C19D83144EC5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:f5:fc:9d:f6:79:f0:a1:b0:42:5b:6c:a3:
ac:0f:4f:2b:de:0e:96:74:b2:29:f3:d4:e4:26:6d:
42:d0:09:68:8c:a1:a0:df:97:4d:ce:b0:cf:34:2b:
87:9a:bc:7c:2b:f1:fc:e4:d0:2d:39:6b:1f:97:15:
ea:58:9d:74:37:1c:6e:9b:00:11:fd:bb:65:10:23:
6a:5b:7c:83:98:12:46:ea:2a:db:a4:1d:0a:fb:3d:
61:5c:b5:36:34:b9:02:57:49:d7:68:82:4d:21:5b:
61:a1:5c:18:a5:56:19:dd:66:3a:da:da:41:70:54:
49:10:e9:05:3d:73:5b:b9:75:fc:21:06:68:08:a8:
c5:82:02:97:fb:c9:ae:85:bc:3c:d2:e0:c8:f7:20:
d1:53:9d:02:6e:38:9d:2d:50:b7:2c:85:f7:a7:af:
21:20:21:94:fc:0d:0e:98:8a:91:b4:d0:86:d7:5a:
e2:04:b2:43:ea:93:3e:b6:ec:5a:02:95:10:d1:bb:
11:70:49:88:ee:11:67:7e:77:10:40:89:bb:a9:fa:
da:17:54:5a:ab:4b:4a:c7:6a:b1:25:08:8a:92:50:
51:e9:b5:33:3a:2a:8a:bf:53:d3:ed:05:55:84:f9:
ac:e3:de:62:d6:e9:77:76:94:54:53:8a:d6:ae:43:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:C5:03:F9:67:E1:67:6E:6C:05:6D:17:C1:9D:83:14:4E:C5:B1
X509v3 Authority Key Identifier:
keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.149.0/24
Signature Algorithm: sha256WithRSAEncryption
00:da:39:e7:f3:e7:7b:58:3e:5b:3b:51:6d:58:52:00:d4:bc:
58:bc:7a:3f:c0:4d:cc:b2:e5:76:df:2a:e0:09:de:53:58:5d:
35:ea:b4:f6:33:e9:0a:35:bd:a0:2d:76:b1:eb:dd:35:cd:96:
b0:c8:74:f7:68:c1:7a:ac:27:79:fe:92:67:a5:df:7f:a2:e0:
4e:f8:26:d6:ca:e1:92:8c:f8:e8:8e:2b:0c:a0:01:37:b8:68:
9e:32:93:12:95:4d:8f:24:44:49:de:b5:e8:00:9a:0a:08:11:
9c:32:fe:d6:1a:73:ac:4e:c3:d3:95:7e:52:8f:bd:b5:6d:9b:
3d:7f:96:9c:58:93:c5:b8:f0:69:f4:96:5d:4c:bf:e5:89:2c:
52:d8:54:3f:06:55:46:77:0c:1b:e9:7e:86:b9:31:ed:d5:45:
c1:3e:b6:7b:d3:ad:0a:8f:3c:a7:77:2a:04:29:54:89:fa:94:
4b:52:cb:e3:96:6e:c2:ca:37:af:ff:cb:5e:a1:69:a5:25:36:
14:41:84:0f:93:03:11:f3:b4:b5:a9:45:f0:1b:1c:72:7c:19:
11:36:cb:b9:08:f5:e7:6c:a1:88:e3:6b:aa:aa:c9:82:39:94:
91:17:81:e2:75:9a:c6:36:6c:b7:ab:16:07:90:a8:15:11:75:
96:ee:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:09 2026 by rpki-client