
$ rpki-client -vvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa
File: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (raw, json)
Hash identifier: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=
Subject key identifier: BF:67:C1:AB:CB:C0:30:29:B9:AB:9B:1F:B8:85:95:44:F4:97:06:15
Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD
Certificate serial: 6CA782BF4A1ED18F36137E30CDFB7887CCA64584
Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa
Signing time: Sun 03 May 2026 02:14:36 +0000
ROA not before: Sun 03 May 2026 02:09:36 +0000
ROA not after: Sun 02 May 2027 02:14:36 +0000
asID: 139986
IP address blocks: 103.148.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl
rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a7:82:bf:4a:1e:d1:8f:36:13:7e:30:cd:fb:78:87:cc:a6:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD
Validity
Not Before: May 3 02:09:36 2026 GMT
Not After : May 2 02:14:36 2027 GMT
Subject: CN=BF67C1ABCBC03029B9AB9B1FB8859544F4970615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:b4:28:3f:d7:d4:8d:b7:10:7d:08:9d:48:
3b:70:e4:9c:90:4d:ee:e2:ec:97:9f:9d:b0:85:1d:
dc:b4:ff:26:da:5f:2a:e7:5f:91:bc:f4:8e:76:cd:
57:59:17:9e:98:ff:6a:03:45:cb:e6:f1:44:35:38:
dc:f5:22:79:47:33:64:e4:ef:d5:c0:84:c4:8b:c1:
f8:e4:68:f3:ef:74:50:78:4c:a5:67:40:61:32:e7:
00:23:00:5e:92:a4:1f:63:e4:28:4c:39:0d:02:91:
a0:e3:2b:31:95:a7:54:cd:22:bc:70:58:b3:f1:1a:
c4:40:f9:72:d0:1d:dd:13:5f:e9:70:e5:85:e2:65:
36:7b:39:41:0c:eb:cd:ae:e7:d2:05:e5:a0:87:ae:
4b:ea:3f:34:5b:76:95:13:ea:c2:98:2a:ac:c2:31:
3e:bc:23:7e:90:2f:9c:df:9c:a5:14:5d:c9:76:5e:
9c:28:50:80:72:d2:b7:eb:09:02:e5:ba:dd:3f:a1:
a7:7f:db:59:d7:3e:d4:fc:1b:56:7c:20:72:73:e2:
2d:ea:93:86:24:ad:87:dd:b4:fc:99:db:3a:0e:34:
df:bc:41:55:e9:26:d0:fa:bd:70:27:3f:b7:ea:fc:
db:b0:db:bb:23:a4:f5:a0:15:4a:a7:4a:2a:0f:aa:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:C1:AB:CB:C0:30:29:B9:AB:9B:1F:B8:85:95:44:F4:97:06:15
X509v3 Authority Key Identifier:
keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.84.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:fb:b2:44:15:1b:38:b6:db:1a:75:34:26:15:d8:4b:4f:e0:
18:cd:42:5f:cf:9e:f3:78:54:62:cd:77:8f:2f:90:3f:df:24:
e9:85:7d:11:45:50:e2:34:91:a8:6d:32:57:3d:8b:33:4f:7c:
2d:3f:3c:57:1a:5c:08:77:9e:66:84:07:a6:18:63:f5:ae:71:
43:21:d9:f3:6d:b3:22:c3:a1:53:bf:03:14:56:a5:5d:42:64:
93:45:be:d0:ae:2f:9c:e6:95:28:61:34:e9:4c:40:cc:16:e6:
8d:17:ba:82:67:48:72:dd:c5:c4:5d:0a:8d:49:40:46:1f:7e:
58:1c:34:97:b7:6e:b8:dc:db:7e:46:b4:15:b6:3b:d2:61:7d:
82:67:da:08:24:ec:ae:83:82:c5:45:8b:23:54:0e:72:cd:d7:
2c:a8:07:16:3b:19:5e:d7:6f:b2:e0:89:d8:e0:5f:f2:5b:af:
4b:b4:7c:63:9a:10:1c:d2:17:7c:a8:ef:8f:46:3b:9a:d8:8f:
65:49:29:0f:77:50:86:5c:b4:df:69:85:2b:10:89:dd:7a:d4:
84:fa:e1:96:a6:7c:09:35:2d:77:44:fd:71:bc:cc:61:1e:b5:
46:dd:a3:80:96:e1:21:13:a4:31:00:b6:3d:1b:4f:7f:49:ba:
97:8e:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:35 2026 by rpki-client