
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
File: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (raw, json)
Hash identifier: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=
Subject key identifier: 3F:D7:09:CF:F9:5C:9E:03:65:67:C0:66:60:23:B1:2A:07:D1:FC:67
Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial: 2C9DAE5DA8C1C7A047FECC5DE022C9796ECFD3F5
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
Signing time: Sun 03 May 2026 02:17:22 +0000
ROA not before: Sun 03 May 2026 02:12:22 +0000
ROA not after: Sun 02 May 2027 02:17:22 +0000
asID: 141898
IP address blocks: 103.164.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9d:ae:5d:a8:c1:c7:a0:47:fe:cc:5d:e0:22:c9:79:6e:cf:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Validity
Not Before: May 3 02:12:22 2026 GMT
Not After : May 2 02:17:22 2027 GMT
Subject: CN=3FD709CFF95C9E036567C0666023B12A07D1FC67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:c4:23:b7:b5:7f:25:30:78:02:a7:9b:b0:
14:1d:c9:8f:28:bb:d2:df:8c:43:cb:ab:86:f9:ad:
e7:ca:f5:6d:ea:94:ff:13:0f:d3:02:64:ce:51:d0:
f8:27:7d:5c:de:58:99:7b:5d:73:66:50:92:a5:50:
85:46:49:bb:c2:71:2f:eb:cf:e6:fc:cc:9f:84:25:
ee:a8:41:de:8d:78:dc:c4:95:6e:94:dc:16:22:d0:
9b:be:a6:46:93:69:a3:c2:ca:4f:dd:f6:37:91:a1:
5f:13:3a:01:60:3c:cd:56:06:26:c5:0e:4a:5f:5a:
2e:4f:24:f0:9e:59:32:25:cb:7f:11:4a:eb:f9:9e:
25:46:17:78:a2:7b:3c:8a:81:b4:7a:56:20:7a:0a:
5e:fa:e9:8d:46:dc:d7:37:e6:79:30:8e:8d:b6:28:
5e:63:f1:d5:b7:95:b2:81:6c:81:6c:5a:3a:c6:f4:
6a:2a:86:e3:02:c4:a2:59:b4:5b:db:5a:62:e3:3e:
74:59:89:66:e1:8f:ac:d2:29:c4:0d:66:e8:ff:51:
8d:05:c1:9d:63:2b:88:14:b8:25:63:d4:f0:ef:05:
01:ab:7e:79:24:8d:3d:5e:dd:24:be:3b:48:c5:bb:
f6:0d:b6:cd:d0:00:a1:b6:a5:56:ab:a7:92:97:40:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:09:CF:F9:5C:9E:03:65:67:C0:66:60:23:B1:2A:07:D1:FC:67
X509v3 Authority Key Identifier:
keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.12.0/23
Signature Algorithm: sha256WithRSAEncryption
96:20:c4:0c:31:4b:31:aa:29:a6:db:47:2e:5b:5c:2a:41:73:
62:53:1f:c5:df:21:21:87:4c:46:e7:c5:34:ea:90:8c:20:0c:
67:6a:93:fe:82:7d:e5:6a:7d:be:d4:c6:24:52:de:4c:df:8e:
3c:1d:5a:42:41:14:40:f9:37:69:10:43:0a:02:8e:47:1a:eb:
0a:a6:80:43:40:5d:d4:37:4a:1a:68:d6:7e:6f:27:fe:ba:25:
70:3a:2e:01:e4:d8:c0:65:08:f6:c5:ae:0a:63:39:fd:b9:3a:
e8:08:52:dd:5a:77:03:f1:31:b9:d0:82:fb:00:5b:b6:0f:5c:
d0:5f:be:63:a2:ec:5e:c1:34:74:c9:e1:94:7f:6f:41:3c:6d:
04:c9:f8:64:0c:31:65:b7:bb:3c:fc:5b:0a:5e:08:5a:96:06:
2a:23:7c:ae:26:5a:67:42:20:da:83:cb:a6:f2:0f:93:c1:bb:
06:86:d7:33:50:df:fb:94:33:1b:a3:e2:02:2d:b2:c9:f2:4a:
ae:f1:58:31:b3:2c:dc:32:20:60:8f:13:cb:66:d9:3f:c0:ec:
5c:e1:d4:a4:96:e1:73:4d:4d:ce:19:11:c5:fe:ee:8e:ae:c7:
93:d8:02:01:d6:e4:60:ce:1d:f9:6d:90:0f:00:0a:82:4c:b1:
24:0c:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:05 2026 by rpki-client