
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa
File: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (raw, json)
Hash identifier: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=
Subject key identifier: D3:24:E5:AD:25:B2:A6:9B:62:61:E6:BF:FD:4B:C9:3E:E7:24:66:94
Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Certificate serial: 0789AF77A18AF05C5D6B64BE1E533ADDB8F638F0
Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa
Signing time: Sun 03 May 2026 02:22:22 +0000
ROA not before: Sun 03 May 2026 02:17:22 +0000
ROA not after: Sun 02 May 2027 02:22:22 +0000
asID: 139952
IP address blocks: 103.174.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:89:af:77:a1:8a:f0:5c:5d:6b:64:be:1e:53:3a:dd:b8:f6:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Validity
Not Before: May 3 02:17:22 2026 GMT
Not After : May 2 02:22:22 2027 GMT
Subject: CN=D324E5AD25B2A69B6261E6BFFD4BC93EE7246694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:1b:bb:f1:b9:3a:c7:bf:7b:ed:42:e9:9e:
76:58:87:d7:f4:07:c9:a4:cf:8f:73:c1:c5:0e:f5:
10:a7:04:d4:82:18:6e:ae:3a:b9:52:48:10:36:ed:
26:7c:df:d5:ab:c0:37:55:3a:03:c7:97:25:96:4d:
5d:c6:45:4f:c2:45:49:8b:74:87:8e:ff:a6:dc:d4:
59:81:81:b8:c5:89:10:ac:0b:0b:e1:9a:96:bf:8b:
e6:f5:92:51:f2:74:77:54:45:9b:03:fb:b6:d2:6d:
28:10:5b:07:50:6c:0f:b1:b0:93:b8:66:91:99:31:
18:48:16:2f:64:52:3d:8c:0f:02:3a:08:f1:34:d2:
3a:35:30:72:d8:94:00:a7:11:de:13:87:ec:09:af:
b0:2f:88:f3:3e:93:91:ed:3a:f3:49:48:df:32:83:
bd:72:54:89:2b:c4:43:03:fb:8e:0c:0a:58:13:92:
12:50:14:95:9e:22:24:43:7d:57:0b:3d:32:b5:37:
76:b4:58:38:89:40:5e:e4:97:cd:c6:38:ac:7d:84:
8a:cc:63:f2:23:32:ae:a9:e8:4e:68:33:64:10:23:
97:22:ee:71:43:56:6c:ec:2b:ca:94:5e:b1:76:7c:
b4:7c:e6:d4:75:46:90:07:2c:60:5a:49:48:10:78:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:E5:AD:25:B2:A6:9B:62:61:E6:BF:FD:4B:C9:3E:E7:24:66:94
X509v3 Authority Key Identifier:
keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.112.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:d6:4d:f7:1f:10:6b:1c:07:2d:40:24:73:87:81:88:78:33:
1e:93:e3:64:78:cb:d0:a4:c8:7b:3d:03:a0:e3:e3:e6:d2:dd:
db:64:a3:4f:e1:31:8a:32:74:b3:c8:fc:b6:6c:91:e4:50:c8:
5d:bc:d7:5b:d2:c7:fa:72:32:e6:74:8b:6b:0e:14:51:e9:bb:
f2:56:bf:ea:19:58:e2:2b:de:d6:d4:ba:0b:5d:6c:37:03:29:
a0:3e:9d:85:5f:62:2a:18:6c:26:81:ad:ed:cc:bc:ed:80:a3:
15:c6:d8:4a:a4:a2:7c:9e:2d:59:e3:77:d9:3b:1e:a0:8f:e6:
e5:7c:91:8a:dc:f8:67:07:28:b2:3b:c2:f8:f0:2d:10:88:09:
4a:f7:ae:3e:70:24:27:b2:8c:de:bd:91:86:b0:4b:28:64:df:
60:cc:6d:57:c4:15:bc:54:40:c5:3e:03:09:2f:84:23:8e:3a:
07:c0:e7:84:02:56:0f:8c:96:23:1b:84:12:22:e2:bf:ce:2e:
e8:3d:c7:5e:7a:51:49:b5:6b:e2:e7:ba:83:b9:30:48:87:d3:
c0:af:6f:dd:93:81:9a:32:5e:49:6c:52:b1:9b:b4:17:5b:b6:
b9:3a:5b:92:bb:12:02:04:1d:91:d5:8b:78:14:a8:71:bf:6c:
84:7c:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:12 2026 by rpki-client