
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa
File: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=
Subject key identifier: BE:4A:7B:B9:48:5A:C6:80:1B:E6:A1:2E:3F:27:5E:12:24:27:79:DE
Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8
Certificate serial: 41281A498474D560322D317393FABC10D864E3D4
Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa
Signing time: Sun 03 May 2026 02:13:40 +0000
ROA not before: Sun 03 May 2026 02:08:40 +0000
ROA not after: Sun 02 May 2027 02:13:40 +0000
asID: 132634
IP address blocks: 103.134.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl
rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:28:1a:49:84:74:d5:60:32:2d:31:73:93:fa:bc:10:d8:64:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8
Validity
Not Before: May 3 02:08:40 2026 GMT
Not After : May 2 02:13:40 2027 GMT
Subject: CN=BE4A7BB9485AC6801BE6A12E3F275E12242779DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:47:19:e1:03:3f:7f:48:78:98:52:d1:55:
bc:68:a1:36:dd:f2:0a:cb:93:fb:49:94:2c:fe:46:
99:a7:a0:38:56:fc:a7:81:76:0b:3e:50:04:03:4a:
50:f8:20:65:68:11:a2:7b:76:0d:ab:43:fc:16:b7:
e1:5f:b8:fa:5b:55:38:a1:e0:b7:b9:4f:27:c9:b8:
f2:74:14:bc:42:c9:4c:cc:51:8a:f4:e0:8a:63:af:
9c:69:32:c4:b4:e1:40:92:1c:d7:c3:c1:58:7d:40:
a9:20:8c:1b:7b:25:10:9e:2b:a7:d6:76:ab:6a:ec:
2c:49:f9:33:68:54:43:47:f3:c0:ac:2b:2a:41:2c:
d9:cc:90:7e:9d:e3:8f:e5:7b:e5:5c:08:7d:2a:f6:
e4:03:d1:18:1b:97:89:7b:38:15:e1:12:de:c5:94:
bb:00:23:8c:e8:bc:ff:c3:4c:e4:d3:76:37:80:04:
49:b6:cd:7e:8f:dd:04:56:f9:76:f8:90:5e:a2:4e:
2f:66:25:e9:38:b3:2c:3c:d5:84:34:a6:51:38:73:
13:72:c2:65:5c:4f:c1:64:90:aa:28:f9:df:94:46:
a6:b2:cc:39:e2:e7:1a:03:a7:70:83:60:64:8a:41:
b5:82:1e:85:9d:73:cc:b6:ff:17:90:64:60:80:d0:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:7B:B9:48:5A:C6:80:1B:E6:A1:2E:3F:27:5E:12:24:27:79:DE
X509v3 Authority Key Identifier:
keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ff:e1:2c:9a:36:f3:9a:68:a7:1c:98:79:75:db:0a:ff:4a:
b7:e3:c5:69:ea:d7:01:c3:34:6b:a5:e4:e1:97:5e:70:18:85:
a4:cf:08:17:97:87:8f:f6:da:f2:c8:e5:c3:32:4d:d8:11:7b:
37:26:1d:6d:ac:a6:28:4b:29:3e:12:be:0c:4d:6e:a7:22:8b:
d3:67:d5:db:cd:0e:d4:bf:84:8e:48:4b:49:a4:af:c2:b4:69:
7a:57:a3:5f:ae:6e:a5:fe:e6:45:f5:a6:7b:31:f7:57:66:0f:
11:d4:65:f1:f3:68:de:62:29:79:5a:db:09:a0:92:99:40:75:
cb:7f:35:db:f2:5d:9a:06:61:fc:af:d8:6c:54:1d:ae:4f:22:
61:7d:5b:74:76:2f:e3:b2:c1:b5:97:74:1e:83:79:b6:e6:63:
b9:ee:c1:6f:79:c2:58:34:35:f1:49:bc:47:17:e1:ee:4f:65:
c2:bc:43:68:12:b7:8b:b9:40:a0:5a:90:01:7d:6f:3b:ad:c8:
df:d7:84:5f:d0:c3:1f:c8:d5:ab:04:97:4c:8d:e6:36:c3:5b:
07:e7:49:f8:fa:d8:17:b1:89:67:06:46:26:2b:83:68:94:76:
d2:a1:8d:fa:3f:17:81:a7:25:c6:3e:76:b5:60:ab:ce:31:3f:
63:1f:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:55 2026 by rpki-client