
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
File: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (raw, json)
Hash identifier: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=
Subject key identifier: 51:FA:43:A2:DB:05:B6:9E:73:BF:AC:7B:0F:02:0A:B0:E7:64:91:AB
Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial: 796255E2049741BD92F6F8258D26F94171A437D2
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
Signing time: Sun 03 May 2026 02:19:21 +0000
ROA not before: Sun 03 May 2026 02:14:21 +0000
ROA not after: Sun 02 May 2027 02:19:21 +0000
asID: 132634
IP address blocks: 103.16.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:62:55:e2:04:97:41:bd:92:f6:f8:25:8d:26:f9:41:71:a4:37:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
Validity
Not Before: May 3 02:14:21 2026 GMT
Not After : May 2 02:19:21 2027 GMT
Subject: CN=51FA43A2DB05B69E73BFAC7B0F020AB0E76491AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:33:1c:16:a3:16:b3:90:2f:b5:b9:50:c3:
6a:ff:16:90:9a:f4:11:41:0d:dd:c7:3a:b5:a4:0b:
03:92:b8:7a:68:d2:38:7c:b8:ab:ae:ce:2a:bd:51:
7c:a4:19:69:c0:76:d6:dc:7a:40:6f:63:46:52:9d:
41:12:17:41:73:fb:cc:3c:89:a4:f8:b5:9f:c4:e2:
bc:34:e3:41:10:e9:4f:4d:69:03:e1:79:37:02:db:
98:7c:35:75:cf:3d:6b:5f:d4:9d:78:cb:a3:69:c3:
ab:26:45:11:6c:b0:05:36:c2:74:61:b6:0e:7d:93:
8f:76:f2:0b:b3:ae:ac:3b:dc:21:de:8e:ef:88:a4:
a1:9f:51:b6:d8:5d:e1:44:64:0a:2b:4d:44:7b:19:
7b:70:3a:88:9e:27:a2:24:0a:07:2a:b2:57:94:15:
30:5f:84:01:f6:4c:7b:85:55:50:aa:5f:81:79:74:
bb:83:97:c6:de:72:18:07:4c:cc:a9:95:83:ad:75:
4e:78:be:a8:d0:11:5f:8a:0d:e7:e0:49:04:36:a6:
c2:06:cd:ce:82:81:35:95:3a:84:b1:76:e5:3d:54:
60:24:1e:da:81:18:26:91:6f:8e:d5:52:56:30:74:
c0:21:c2:99:24:f4:ef:06:aa:c5:a6:74:ae:a8:ba:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:43:A2:DB:05:B6:9E:73:BF:AC:7B:0F:02:0A:B0:E7:64:91:AB
X509v3 Authority Key Identifier:
keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.48.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:8b:33:6a:55:c7:89:22:da:69:8b:98:53:82:ff:f7:53:30:
07:07:12:a2:40:92:c6:c5:67:23:a1:48:a6:5b:42:49:ae:04:
e6:33:97:19:23:1d:bd:b7:8c:5a:25:73:a2:38:a7:18:eb:04:
24:d6:8d:d3:73:fe:fe:c1:c7:e6:4e:da:7b:13:dd:91:12:76:
0e:86:52:11:5e:08:77:55:12:c3:27:24:fc:ab:dd:8b:a1:e4:
ae:ad:1f:eb:ae:34:62:7c:68:9b:81:90:7d:a0:99:14:fc:09:
9d:bf:20:8f:62:62:8a:a9:9c:cb:d4:53:fe:8a:4e:ac:0b:33:
0f:1a:b9:d1:df:ea:05:b2:22:1a:b4:94:41:f0:0f:fe:12:5e:
db:cc:8d:25:e3:94:37:5d:36:77:c8:0f:4b:15:03:a2:de:52:
1e:dc:cb:df:b8:a9:4b:f6:61:f4:6e:6a:e1:c8:19:05:d2:c5:
c3:53:9e:86:1c:dd:a7:c1:a7:f0:41:bf:07:0a:64:47:49:35:
ff:e2:7d:ef:5e:19:56:5e:9e:d3:1b:76:ec:6f:7e:97:5f:52:
ee:d9:8a:0e:0f:99:75:83:10:e0:e5:0f:4b:73:71:fd:47:08:
5d:79:fa:9e:66:e5:0c:35:53:e2:ed:64:4f:b0:4c:9c:43:42:
bb:e3:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:03 2026 by rpki-client