
$ rpki-client -vvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa
File: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (raw, json)
Hash identifier: 8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=
Subject key identifier: 16:DF:89:5D:9A:1F:6D:71:9E:B5:11:0F:BF:89:2C:63:81:81:4E:9F
Certificate issuer: /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3
Certificate serial: 7B7498854D6925A8FE1165CBA86F6260FC90FDE1
Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa
Signing time: Sun 03 May 2026 02:15:45 +0000
ROA not before: Sun 03 May 2026 02:10:45 +0000
ROA not after: Sun 02 May 2027 02:15:45 +0000
asID: 150931
IP address blocks: 103.196.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl
rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:74:98:85:4d:69:25:a8:fe:11:65:cb:a8:6f:62:60:fc:90:fd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3
Validity
Not Before: May 3 02:10:45 2026 GMT
Not After : May 2 02:15:45 2027 GMT
Subject: CN=16DF895D9A1F6D719EB5110FBF892C6381814E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:65:8d:94:59:85:18:9e:88:1d:0e:fc:ac:9b:
a1:57:e2:42:c0:cc:d7:d0:73:48:2e:51:cc:84:4f:
65:af:2f:ab:26:b4:b0:2c:d2:f8:86:73:0f:04:b1:
ad:b8:9e:5a:06:20:c9:a3:fe:14:3d:9e:3e:3c:98:
c7:bf:13:12:71:f9:70:67:f5:52:a3:62:a4:1f:55:
b5:e9:7b:03:7e:40:e5:ce:8f:22:60:40:c0:f8:0a:
ae:26:cc:44:90:d2:84:fb:37:3f:b9:73:56:95:92:
55:5d:a4:e3:10:40:3d:aa:84:3e:06:cc:76:a3:f1:
d1:6a:31:55:36:88:da:eb:2c:ab:e5:95:22:d7:f5:
64:d8:52:05:5e:33:21:5e:04:2f:4d:f7:7f:b5:5b:
69:6c:eb:13:b1:62:87:5b:c2:ee:60:99:b0:d6:c7:
a9:ec:0c:5c:67:93:64:6a:ad:af:1b:7b:aa:26:5e:
dd:ce:43:1c:d8:8c:6d:8f:de:cf:57:81:bc:83:df:
c3:17:08:17:5b:86:01:0c:d3:c9:1d:12:5d:99:77:
0f:16:f3:d4:4d:54:ff:2c:81:44:c6:84:e4:ac:63:
4a:1e:0a:e3:40:e4:fd:f2:00:84:92:4e:09:4b:d6:
d9:f7:8a:bf:9f:a0:0c:63:ef:32:4a:c2:0b:7c:f8:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:89:5D:9A:1F:6D:71:9E:B5:11:0F:BF:89:2C:63:81:81:4E:9F
X509v3 Authority Key Identifier:
keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e1:23:87:a4:a8:ae:9f:2a:88:c0:fc:ea:10:6e:b2:95:e0:
8f:a6:2d:29:10:4c:3d:c6:e0:9d:cf:a3:5b:1a:f5:4a:fd:53:
8a:58:c7:d7:0b:7c:ef:f5:fd:53:28:3c:c4:00:62:28:62:00:
5f:b4:ee:c5:09:11:4c:c6:da:27:85:17:de:8b:ea:6d:c6:11:
a1:f0:c2:a6:b8:fa:10:ff:9d:60:9a:65:5d:78:bb:1e:16:68:
86:50:be:bd:be:3b:1f:2e:d8:ac:f6:3b:a1:0b:9b:8d:92:44:
cb:82:a4:6a:94:da:1c:d7:5c:5c:96:a3:c9:8f:2d:9a:a9:5c:
ec:d5:e8:fc:8d:fb:0b:6f:95:5e:a0:29:ed:da:f6:eb:52:ba:
09:2f:0a:d0:d7:c1:d0:06:b1:61:be:56:4f:ce:b2:1c:9e:fd:
9f:ca:da:5f:3d:3d:f4:ba:3c:5e:ee:e3:e6:1a:9d:d5:b5:4e:
0e:29:b1:23:c9:3e:4f:30:29:23:90:0b:2d:ad:d6:14:a9:65:
ad:9c:11:b6:80:21:b8:8a:4a:9f:39:9d:92:75:ff:da:31:ef:
13:ca:3e:d0:dd:3a:15:00:9b:f7:1c:e7:6e:9f:40:13:86:c7:
71:43:94:0d:c6:e9:91:2b:f2:4d:e1:e0:3b:2b:fa:8d:88:e9:
30:af:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:20 2026 by rpki-client