
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa
File: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (raw, json)
Hash identifier: P6O2GRvb5cY6yS3BwOz9xCf5V2VK8SPqxHthNi6b0ow=
Subject key identifier: 61:47:A8:B0:2C:54:0C:87:F6:E6:05:D0:3C:BD:26:00:9F:5B:13:FB
Certificate issuer: /CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA
Certificate serial: 281432199B1075882E4F597F59EC2178EB0BFD1A
Authority key identifier: F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa
Signing time: Sun 03 May 2026 02:23:55 +0000
ROA not before: Sun 03 May 2026 02:18:55 +0000
ROA not after: Sun 02 May 2027 02:23:55 +0000
asID: 138107
IP address blocks: 103.126.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl
rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:14:32:19:9b:10:75:88:2e:4f:59:7f:59:ec:21:78:eb:0b:fd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA
Validity
Not Before: May 3 02:18:55 2026 GMT
Not After : May 2 02:23:55 2027 GMT
Subject: CN=6147A8B02C540C87F6E605D03CBD26009F5B13FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3c:fb:d8:8d:fe:c3:4a:df:94:87:c2:d5:89:
31:b3:ea:68:94:90:30:4c:07:2d:34:34:be:2e:0c:
df:e9:18:8d:ba:3e:82:53:34:03:5e:8c:ee:67:5d:
75:5a:8c:e2:62:a0:d1:f4:0b:55:47:aa:51:37:a2:
4f:98:57:88:8f:7f:0c:fe:44:4e:03:14:a1:20:7e:
a9:ed:24:98:a0:af:f3:95:0e:79:95:78:40:97:3e:
7d:74:0f:d0:cf:d5:33:b9:47:63:11:fa:57:f1:ad:
f9:e7:64:72:ee:10:b7:00:27:db:cf:dd:bf:62:70:
68:0a:3c:08:99:a0:fb:46:39:8e:cc:3b:e8:7c:72:
70:a5:42:b6:33:e1:ae:19:d0:31:ad:3c:7b:91:d8:
61:49:7c:14:d8:18:61:ec:2b:83:e3:12:39:e0:19:
74:d7:63:1e:b3:11:39:c4:1e:4a:73:37:b3:ca:13:
57:ba:ce:b9:7f:10:b8:03:8a:2d:eb:ea:4c:b3:f5:
55:79:56:27:3c:0e:36:36:55:61:cb:30:74:24:f0:
aa:fd:8d:f3:a2:cd:48:b6:7e:5f:64:a9:1a:fb:cf:
be:e7:6b:3f:b3:95:3d:08:c6:63:d7:74:80:82:7e:
e1:12:3a:15:cc:0c:98:16:24:11:a4:40:ae:76:50:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:A8:B0:2C:54:0C:87:F6:E6:05:D0:3C:BD:26:00:9F:5B:13:FB
X509v3 Authority Key Identifier:
keyid:F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.56.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a9:5a:b7:f6:d5:27:56:e0:78:ea:61:54:6e:6d:7e:e6:69:
cf:14:c6:23:46:3f:e0:ad:f6:70:a4:97:74:1e:3c:c1:1b:2a:
c6:64:d8:f7:ca:5a:a4:83:d7:9c:42:da:fb:bf:7a:c4:75:97:
2c:03:6b:08:e0:55:f7:cd:96:cc:fe:39:eb:18:b2:31:4d:c4:
c8:fc:31:b7:96:4d:ac:9b:9e:02:b7:09:77:d7:80:a0:a2:6b:
cb:0c:94:b1:dc:b4:a5:95:30:ee:14:71:21:2d:d8:5b:17:25:
da:c4:b5:9e:27:c3:7a:2a:39:9d:61:77:ac:8f:0d:7a:b9:5e:
d9:06:be:60:31:7c:25:5e:66:48:06:02:4c:90:ba:cc:16:4f:
0c:90:2d:48:81:0c:19:68:11:44:47:0f:95:f1:f0:4b:75:01:
b9:95:2a:d1:74:c7:a4:2e:9f:12:33:ef:29:cc:c5:a6:94:fa:
fa:22:5d:d5:64:81:68:aa:76:35:e4:ef:5e:b9:e9:63:a9:0a:
a6:bb:95:d9:e5:ab:e4:14:a3:16:0c:05:9c:8a:5c:c7:db:d7:
5b:66:0e:7b:a5:b3:b7:c4:28:b8:39:d9:1e:94:bd:d1:a8:56:
56:bd:ac:c8:43:9f:75:fe:61:eb:af:3e:0a:8c:e7:f6:d9:67:
64:e3:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:23 2026 by rpki-client