
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
File: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=
Subject key identifier: 8F:E7:BD:B2:98:8A:81:80:AE:03:75:3B:2C:9F:BC:05:84:60:E7:F6
Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD
Certificate serial: 10D616436AFB00BABFE3C57A5B917929E69EB37D
Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
Signing time: Sun 03 May 2026 02:21:54 +0000
ROA not before: Sun 03 May 2026 02:16:54 +0000
ROA not after: Sun 02 May 2027 02:21:54 +0000
asID: 136842
IP address blocks: 103.100.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl
rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d6:16:43:6a:fb:00:ba:bf:e3:c5:7a:5b:91:79:29:e6:9e:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD
Validity
Not Before: May 3 02:16:54 2026 GMT
Not After : May 2 02:21:54 2027 GMT
Subject: CN=8FE7BDB2988A8180AE03753B2C9FBC058460E7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:6e:fa:eb:be:39:52:98:c5:dd:a5:5c:cb:
8c:dc:7d:35:ca:db:30:95:38:02:af:c4:73:14:ef:
90:6a:65:a6:9b:4e:2a:7b:8e:63:5b:50:3b:c5:78:
b8:36:91:65:35:cd:39:ce:0e:f2:64:ec:da:78:db:
c9:d6:00:5f:96:c6:15:68:3f:2a:2e:32:1d:50:dd:
1c:7c:e9:93:13:a2:a8:70:dd:c0:60:37:35:84:02:
e2:65:9c:ff:8b:9d:06:02:c6:53:9d:7d:b0:5e:f0:
41:9c:45:75:c2:e4:be:ba:4a:cc:33:f2:49:8d:f2:
42:0d:25:55:75:ea:a4:2f:a6:8b:44:6b:5a:2d:a7:
f6:96:94:6f:13:cc:3d:62:08:4d:54:1f:fb:1c:f9:
61:1a:0c:bd:19:bd:a4:e9:98:0d:8c:24:bb:ca:2a:
9a:0a:8b:41:5f:0c:9a:ce:bc:5f:11:d9:2c:27:55:
75:01:2a:21:0a:81:51:f9:47:09:1f:a9:7e:38:2f:
0e:6b:50:87:85:4c:0a:f3:82:c6:d1:32:61:b8:a8:
4c:c3:12:ae:d5:77:0e:f0:75:04:a8:2a:41:3f:0f:
d2:dc:99:ae:62:4c:01:f2:cc:19:8b:30:f2:0d:c9:
5d:6d:56:04:3e:ad:ce:71:29:b5:46:c4:a6:f9:39:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:BD:B2:98:8A:81:80:AE:03:75:3B:2C:9F:BC:05:84:60:E7:F6
X509v3 Authority Key Identifier:
keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.246.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:18:f6:3e:db:20:02:df:5d:51:79:cc:fb:cf:d8:5e:ce:d2:
4d:d9:d2:04:eb:9b:c1:73:87:01:04:80:84:b4:2f:a5:d1:ed:
16:77:ef:c4:14:ab:0f:54:78:9c:f0:f5:3c:d7:c9:88:0a:1e:
b0:fa:78:77:84:d8:36:8b:f2:b4:76:d4:e0:2c:9f:67:19:c4:
7f:1c:88:86:bb:6a:b5:1d:f3:3b:ee:ad:a0:65:a2:ac:87:2b:
2a:8f:b7:73:13:31:96:ff:91:79:cd:db:d0:c9:44:2e:40:bf:
19:eb:99:16:71:30:37:79:f2:22:24:95:fb:37:42:02:ff:1c:
7d:40:9a:0f:73:90:3e:3e:06:5c:09:4a:f3:34:97:05:c9:d5:
69:de:db:8d:64:25:00:4c:f2:5b:d8:8a:ac:bf:cf:c0:5f:04:
04:78:cb:24:dd:e7:9c:e9:46:22:dc:72:9b:3b:74:44:56:29:
86:09:e6:56:71:47:4b:c5:00:e6:f1:ef:62:14:4a:4e:33:10:
1a:21:40:e0:75:01:69:fe:3e:a4:c8:6b:1c:2e:b4:ec:d3:88:
37:ad:bd:fe:fb:4a:a3:74:8f:96:ac:a3:82:5a:dd:98:67:bf:
99:90:17:0a:69:84:9b:8b:22:8f:fc:23:75:5d:a0:31:f7:44:
c7:c1:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:14 2026 by rpki-client