
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32322d3233203d3e203338313438.roa
File: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (raw, json)
Hash identifier: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=
Subject key identifier: 26:70:B2:A9:AD:97:2F:9F:06:35:78:7C:57:8C:FD:14:E3:06:85:7A
Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Certificate serial: 67DA0D20649D340A494AF5E0E7F302908065EEBE
Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32322d3233203d3e203338313438.roa
Signing time: Sun 03 May 2026 02:15:06 +0000
ROA not before: Sun 03 May 2026 02:10:06 +0000
ROA not after: Sun 02 May 2027 02:15:06 +0000
asID: 38148
IP address blocks: 103.30.220.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:da:0d:20:64:9d:34:0a:49:4a:f5:e0:e7:f3:02:90:80:65:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Validity
Not Before: May 3 02:10:06 2026 GMT
Not After : May 2 02:15:06 2027 GMT
Subject: CN=2670B2A9AD972F9F0635787C578CFD14E306857A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:4a:78:f1:c8:99:a8:d9:02:d4:dc:c8:89:
81:4a:98:a7:b7:30:90:b0:98:9e:7b:7e:0d:c8:fa:
79:1d:03:ba:6c:7c:7a:7e:96:7a:1d:e8:b2:d2:7b:
9a:d5:ad:50:e4:c6:2a:8b:33:ab:b2:9a:d8:f8:3c:
9a:85:ae:03:a5:6d:b1:21:d9:6e:e6:55:53:e8:00:
95:ba:c7:b3:46:56:b7:3b:c6:f6:e5:34:3f:29:0c:
2e:98:58:e6:b0:af:37:4f:a9:4b:2b:03:6b:41:cf:
d7:5b:7e:cd:94:dd:bc:b9:57:bd:87:3a:06:26:5f:
dd:66:27:8b:55:8a:dd:57:51:26:a4:f6:40:22:4a:
b9:0b:d4:c7:89:fc:f5:b9:df:d4:92:8a:97:75:79:
82:d3:a0:4c:2b:a6:f5:24:f0:8f:72:f5:9a:47:9d:
d5:6a:fe:92:55:eb:40:40:c1:83:ad:49:21:25:c9:
7a:fe:dd:2b:6a:aa:33:1c:72:89:63:ea:25:f7:17:
47:ac:ff:79:de:0f:c7:f7:60:dd:af:e9:8a:93:1f:
36:75:b6:f6:3d:db:7c:21:fe:a2:3f:dc:07:5f:ab:
9b:72:d4:c0:0e:63:72:cf:a6:3b:e6:b7:e8:49:68:
ce:d3:66:52:bc:1a:0b:6b:7d:dc:8b:89:64:57:75:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:B2:A9:AD:97:2F:9F:06:35:78:7C:57:8C:FD:14:E3:06:85:7A
X509v3 Authority Key Identifier:
keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32322d3233203d3e203338313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.220.0/22
Signature Algorithm: sha256WithRSAEncryption
01:86:74:93:01:c9:18:ae:db:f2:65:df:17:92:13:44:97:10:
c6:62:07:a3:36:c2:9b:f9:e4:0d:52:2b:69:38:c1:b6:6b:ad:
7a:bd:7b:f0:b2:af:b4:db:a3:25:91:20:4d:68:12:03:1c:fd:
98:20:3e:69:8b:bd:5f:db:00:8b:0a:a5:42:22:8d:23:ef:0b:
34:ba:18:da:9a:c7:2f:14:da:b0:2b:08:66:d8:a8:02:79:86:
b8:40:4d:99:e3:6c:3a:27:cc:ce:4f:86:15:85:45:c8:78:3e:
42:6e:a0:35:ba:70:85:51:18:62:06:f7:95:b0:e0:dd:95:92:
46:fa:ac:ef:de:71:76:20:c0:da:5a:bc:bf:a2:ba:cb:f6:1d:
38:55:92:76:7e:87:b6:5e:0e:68:b7:63:42:4e:33:54:93:c8:
1a:fe:8d:0a:3d:34:f0:58:21:f7:fc:a6:7b:a2:1e:ba:a6:31:
45:9e:45:6b:09:43:57:90:1e:98:ef:26:32:3f:6b:6c:e0:40:
21:9a:50:24:61:85:46:e6:31:30:89:ca:9a:3e:58:09:83:b9:
89:28:24:db:bb:54:2d:2b:2b:b8:89:99:53:67:22:6d:aa:b8:
e8:ab:3e:af:27:29:5c:7e:25:65:69:48:43:97:91:66:43:45:
e2:34:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:14 2026 by rpki-client