
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
File: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (raw, json)
Hash identifier: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=
Subject key identifier: 4C:8F:07:E1:3F:D5:0D:86:A7:E8:69:2E:20:A2:9A:61:20:2E:8D:FE
Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306
Certificate serial: 1B2192067B4ED16C417146C2CB16EC2A8AAE73EB
Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
Signing time: Sun 03 May 2026 02:14:03 +0000
ROA not before: Sun 03 May 2026 02:09:03 +0000
ROA not after: Sun 02 May 2027 02:14:03 +0000
asID: 142339
IP address blocks: 103.169.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl
rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:21:92:06:7b:4e:d1:6c:41:71:46:c2:cb:16:ec:2a:8a:ae:73:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306
Validity
Not Before: May 3 02:09:03 2026 GMT
Not After : May 2 02:14:03 2027 GMT
Subject: CN=4C8F07E13FD50D86A7E8692E20A29A61202E8DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:c5:78:c0:b7:40:fc:c4:c9:c4:fd:e1:4e:
2b:24:ea:db:dd:4a:bf:66:52:12:40:b2:eb:bd:24:
43:27:1b:65:78:3d:58:5a:76:ce:ca:9d:38:10:f3:
64:cb:cb:15:2c:4a:4b:e2:31:a1:57:02:94:5f:fa:
f4:b8:6f:1e:fd:66:6e:60:fe:d8:4b:6c:44:30:79:
3e:a0:57:cc:51:8d:b5:7b:be:0a:1e:b8:00:96:2b:
4f:7b:59:4a:65:68:b0:da:fe:9a:9c:a7:96:03:be:
9f:d3:b1:ff:e1:d5:22:af:59:db:a8:d9:de:19:2b:
4c:2f:a7:a5:4f:36:d5:b1:e5:e5:0c:7c:16:af:89:
54:4e:ea:91:00:0e:ee:13:c7:ca:b2:88:c6:a2:30:
ff:68:dd:a9:63:6d:e8:5b:f7:f4:ec:8f:99:6d:0c:
cf:a1:a1:36:33:96:a1:1e:de:54:d8:1e:58:71:70:
8a:4a:9f:77:f2:47:c8:12:f5:27:51:01:6b:6c:52:
47:c8:a9:3a:41:1f:fc:83:71:6a:03:37:c6:76:bc:
df:3f:eb:76:23:b4:a4:c4:e0:29:62:85:b9:be:5a:
05:07:01:cb:a4:a3:90:c3:8c:f6:44:9e:2b:de:88:
83:a1:35:85:66:49:3b:cd:44:db:5f:52:7f:f8:5c:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:07:E1:3F:D5:0D:86:A7:E8:69:2E:20:A2:9A:61:20:2E:8D:FE
X509v3 Authority Key Identifier:
keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.148.0/23
Signature Algorithm: sha256WithRSAEncryption
35:b3:ae:8e:0c:2b:28:53:6a:4a:75:6c:2e:85:c4:b8:c6:57:
aa:5b:13:3e:84:e5:87:de:d7:e3:e4:5b:c9:3e:02:6c:d8:31:
2e:41:b3:2d:e4:1c:bb:86:e9:38:c8:2f:ed:4e:1e:a8:3c:06:
98:e6:a4:c9:c5:0c:24:fc:e5:3c:5c:b7:ad:7d:8f:77:7e:9d:
53:b5:39:ca:1e:68:01:fd:c7:e1:53:e5:b0:49:6a:5e:8f:ef:
70:2c:5c:70:61:5f:b8:26:fe:91:16:75:39:f9:68:17:b5:8f:
9b:a7:fc:70:5a:ab:c1:2d:fd:3a:6a:bd:e0:78:2e:b2:7c:fb:
b9:5c:af:db:d3:0d:ed:b8:92:e1:94:62:4b:de:d6:e2:c3:c7:
9a:6b:8e:b3:06:5b:17:20:2c:e0:0a:ad:ce:99:d3:30:dc:ea:
c7:c3:4e:2b:32:2e:57:5c:c4:d6:1b:f2:20:fc:bb:98:95:0f:
5c:ae:35:a8:ce:a7:7a:e1:26:ec:8a:04:a9:e5:e8:bc:e2:c6:
0e:26:86:c8:c9:6f:cf:e7:35:a7:53:3d:ad:5b:7f:bd:7a:4a:
7a:2d:4d:51:98:f8:6b:f3:ad:a8:32:2a:0e:41:1e:25:e8:3e:
2c:d8:d0:46:77:84:5f:d7:0b:89:5c:58:c1:e2:32:a7:24:ec:
ba:e0:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:26 2026 by rpki-client