
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa
File: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (raw, json)
Hash identifier: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=
Subject key identifier: 61:29:29:F1:6A:9F:1F:9D:45:FD:EC:BA:05:1D:9E:56:69:9F:7E:7C
Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial: 514CC47128D0AEC1B22CDC7D52B81711EAC15CB2
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa
Signing time: Sun 03 May 2026 02:17:41 +0000
ROA not before: Sun 03 May 2026 02:12:41 +0000
ROA not after: Sun 02 May 2027 02:17:41 +0000
asID: 139381
IP address blocks: 103.142.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4c:c4:71:28:d0:ae:c1:b2:2c:dc:7d:52:b8:17:11:ea:c1:5c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Validity
Not Before: May 3 02:12:41 2026 GMT
Not After : May 2 02:17:41 2027 GMT
Subject: CN=612929F16A9F1F9D45FDECBA051D9E56699F7E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:7f:9c:1f:31:9a:2d:e0:f8:ad:0e:f0:61:
9d:c0:cb:b2:55:ba:5f:f3:57:24:87:3c:a7:9a:a9:
d0:5a:fa:32:74:f1:29:d1:78:82:a6:e2:18:bb:78:
6e:81:dd:ed:2b:7c:1a:3b:93:43:4a:09:78:97:21:
af:03:87:21:5d:f1:1c:b4:47:f3:16:46:c8:6a:6e:
e0:08:bc:8f:5b:c3:34:f3:49:ee:90:f2:8e:84:23:
83:81:db:bd:04:0e:90:56:6c:4f:16:00:5c:de:52:
0b:21:16:35:63:5a:d0:b7:c5:73:cb:8d:2d:46:8d:
b6:0a:42:8e:29:16:85:51:6c:20:1e:b8:28:85:f3:
7c:97:82:1f:6b:ee:3b:22:08:29:5c:71:96:e1:03:
3c:28:8f:41:0e:f1:bf:65:d1:81:0a:29:7d:1b:7c:
df:e8:85:63:86:95:6d:61:15:2c:50:46:21:ea:85:
24:fa:c2:7a:69:d1:fb:ef:af:47:a4:ec:56:f4:ab:
3d:e1:0f:c6:d3:06:d4:1c:5e:e2:54:55:df:11:df:
39:44:7b:75:14:dd:d1:db:0a:c1:ad:cc:08:c8:fd:
2d:50:28:18:a9:7e:42:5a:9f:97:a8:59:a0:7c:64:
55:fc:40:be:e7:e3:44:a7:ab:84:dd:35:fa:8f:fe:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:29:F1:6A:9F:1F:9D:45:FD:EC:BA:05:1D:9E:56:69:9F:7E:7C
X509v3 Authority Key Identifier:
keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:2c:f5:44:91:5c:fb:81:e1:ba:6b:e0:b5:f9:82:48:cc:51:
5f:b0:14:b6:19:5a:28:6c:f9:6e:55:b8:2b:3a:78:a9:9d:30:
3f:7e:6c:1b:d5:46:9a:db:4a:ce:8d:ad:4f:4a:f0:33:c0:16:
0f:c3:fd:5c:3d:27:42:8c:a5:6e:7b:b7:28:d5:be:22:e9:20:
12:64:88:11:b5:19:fb:c4:98:6f:b1:f7:45:8d:d0:e9:be:92:
35:c1:fa:46:e8:a4:4a:21:e5:a2:c7:d5:8c:b6:af:72:73:5a:
d2:ec:3d:58:56:e1:e8:2e:9d:77:bb:1c:65:15:5a:f5:91:9e:
ef:7c:86:9c:34:01:79:5a:55:28:01:b2:e6:22:70:45:b2:ec:
bf:0c:e9:2a:5e:00:f9:4e:10:2a:4e:5a:ee:1d:50:ea:9b:5f:
8b:50:68:5f:49:e8:94:51:bf:94:08:22:6b:b6:63:7d:20:3d:
c4:62:0b:46:1c:62:db:0c:72:00:69:96:37:28:5d:69:dc:1a:
84:fb:92:94:7f:4b:de:a8:b5:5d:80:e7:42:1d:db:b7:4b:a8:
63:ff:fd:22:04:22:e3:5a:2b:a7:74:28:22:3d:70:ff:f0:f6:
c7:2b:9f:90:fc:48:39:05:d1:9f:9f:c1:f5:bd:1e:4a:c0:53:
09:14:a5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:00 2026 by rpki-client