
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
File: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (raw, json)
Hash identifier: C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=
Subject key identifier: 32:E3:F1:A1:32:9E:8F:43:46:1B:5E:7A:26:82:5D:62:36:AC:12:18
Certificate issuer: /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
Certificate serial: 633E69301718B3714A0FD086639ACD15CA3E10A8
Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
Signing time: Sun 03 May 2026 02:19:06 +0000
ROA not before: Sun 03 May 2026 02:14:06 +0000
ROA not after: Sun 02 May 2027 02:19:06 +0000
asID: 151530
IP address blocks: 103.242.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl
rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3e:69:30:17:18:b3:71:4a:0f:d0:86:63:9a:cd:15:ca:3e:10:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
Validity
Not Before: May 3 02:14:06 2026 GMT
Not After : May 2 02:19:06 2027 GMT
Subject: CN=32E3F1A1329E8F43461B5E7A26825D6236AC1218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:6b:96:21:d1:d6:77:08:e2:eb:96:ff:61:
19:73:9c:14:df:c6:1a:f8:3a:31:80:34:58:83:67:
dd:b2:40:f1:f6:18:b9:e0:c2:1a:be:88:8e:db:96:
b4:4c:a7:e2:e2:28:a3:28:97:e0:90:a0:b4:b2:35:
46:65:74:99:25:0e:c5:b9:75:e9:f7:fb:4f:ae:f5:
a0:6e:02:68:da:a1:68:e2:d5:d3:c9:c5:32:9a:1c:
cc:34:6e:76:e6:2b:4e:2d:50:fd:9a:24:eb:61:07:
99:0a:30:42:61:a5:d9:4b:3e:de:e3:7b:cb:df:4e:
9c:a3:15:9d:17:94:cd:69:79:c5:4c:5e:6f:ff:3b:
ee:19:54:fb:f3:66:c8:e0:ca:39:30:a2:c2:74:e3:
07:0d:e6:9a:51:cf:21:1f:a9:9a:24:0f:b2:87:98:
be:a1:35:27:20:35:b4:83:17:9f:94:5c:4a:b5:0b:
f3:f7:c3:87:80:78:e1:68:d0:a0:9e:53:d7:d7:b8:
45:79:8c:9d:bd:1b:89:4f:7a:dd:fa:89:55:d9:0d:
30:45:d4:9c:fc:fc:4d:d1:89:4e:3b:f3:a2:71:d8:
f7:ab:40:78:ad:d8:c6:ec:a0:d2:fe:28:09:2a:63:
58:89:7d:31:e8:8e:fc:a7:92:4b:2e:2d:32:ab:1b:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E3:F1:A1:32:9E:8F:43:46:1B:5E:7A:26:82:5D:62:36:AC:12:18
X509v3 Authority Key Identifier:
keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.79.0/24
Signature Algorithm: sha256WithRSAEncryption
61:60:0a:10:f7:38:46:e1:bb:77:3a:58:00:8d:55:e9:9d:54:
9e:2f:df:99:78:b9:d0:9c:5d:c3:8d:34:a4:0c:d3:9c:88:24:
51:d2:55:f2:fd:f4:c4:4a:97:f3:89:42:04:84:96:f0:f2:22:
5a:7c:0a:a7:59:5f:28:63:f2:d9:0e:73:9a:2b:d2:e3:46:1f:
9d:a7:1a:53:96:4f:f6:ef:2b:9c:71:76:e3:cf:df:3a:90:f3:
34:c8:57:b4:16:47:5b:97:63:72:06:ec:f1:29:b0:52:41:37:
a7:e9:65:8f:70:0b:a9:76:72:10:5d:db:b9:86:2f:70:e4:10:
55:21:2e:62:9b:f3:8b:a4:74:23:3f:34:c7:37:bb:3e:35:0d:
2a:36:44:1f:1f:5d:5e:0b:9c:c0:14:75:e5:b9:e2:f3:d3:40:
62:ac:f5:13:0a:4e:9b:a1:a2:e0:f6:0b:f2:bf:d0:aa:8d:a6:
4f:65:12:ed:0a:a0:3d:ee:4f:e2:a2:3c:d8:4f:c1:98:d7:c0:
b3:ba:a0:f3:3a:6c:1f:e4:1d:1f:96:41:9b:ac:82:11:d8:5e:
a7:0b:6b:81:a6:f8:df:86:b9:46:20:69:bf:4f:5e:50:a1:4b:
8d:cc:ed:e7:38:b0:6a:1a:09:b7:6d:b9:ea:44:9c:e4:11:89:
65:56:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:52 2026 by rpki-client