
$ rpki-client -vvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa
File: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (raw, json)
Hash identifier: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=
Subject key identifier: AB:CA:B9:AA:06:04:4C:4C:44:60:4D:50:91:DE:5E:9E:D0:77:1E:30
Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD
Certificate serial: 2D88EC3B7D9D042D3F7218E15EC8B8F46F4F9267
Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa
Signing time: Sun 03 May 2026 02:24:18 +0000
ROA not before: Sun 03 May 2026 02:19:18 +0000
ROA not after: Sun 02 May 2027 02:24:18 +0000
asID: 149883
IP address blocks: 103.184.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl
rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:88:ec:3b:7d:9d:04:2d:3f:72:18:e1:5e:c8:b8:f4:6f:4f:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD
Validity
Not Before: May 3 02:19:18 2026 GMT
Not After : May 2 02:24:18 2027 GMT
Subject: CN=ABCAB9AA06044C4C44604D5091DE5E9ED0771E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:c9:5e:0d:84:8e:46:09:77:43:03:cf:6c:
41:17:e1:64:a5:5e:43:57:a0:c5:34:49:9e:11:2e:
de:1a:2e:bb:8c:ad:14:b5:b6:fc:41:37:b0:03:4a:
8e:1a:2e:3c:ee:1c:da:30:7e:2f:dc:ae:fa:2b:40:
ac:09:2d:ce:40:be:4a:67:e5:a9:9f:7f:8a:ea:a1:
64:51:c5:72:a4:c8:4e:89:fc:20:99:10:f9:e8:2a:
fc:5f:fd:74:96:38:77:3a:39:71:b3:a1:62:24:11:
e6:46:24:1a:37:bc:eb:08:b5:b1:7e:ca:e9:a3:d2:
8e:85:46:a1:ba:bc:0c:61:e5:ee:6c:81:08:a4:23:
f0:72:5d:07:f8:05:9f:e6:39:15:65:46:e3:38:ac:
2d:72:d9:af:6a:0b:29:b7:48:44:ea:7e:84:eb:0a:
af:38:ca:3d:12:4f:d4:ed:f2:97:be:31:c7:0e:cc:
39:a8:54:0f:2a:d8:c0:b0:bd:6c:7e:f1:7b:1f:cd:
29:0b:98:66:f8:d4:9b:7a:99:fc:49:d8:5a:60:da:
c4:5f:d6:2e:0b:d5:9d:1d:9b:5f:a2:16:75:b1:3f:
de:0c:34:2d:0b:89:2b:c2:18:c3:25:7f:2e:e7:c0:
99:98:3b:77:c2:d0:e8:c7:7d:cd:66:86:9d:44:a9:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:B9:AA:06:04:4C:4C:44:60:4D:50:91:DE:5E:9E:D0:77:1E:30
X509v3 Authority Key Identifier:
keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:3f:8b:cc:6f:a6:8d:b5:b9:f0:8c:eb:37:67:fc:91:31:94:
6b:d9:19:bc:9d:09:cc:f7:23:80:f2:b7:63:70:b6:cf:37:f9:
d9:9f:b7:7a:02:1a:61:55:38:fe:4b:dd:09:46:cb:94:ce:23:
1e:44:6e:fd:6a:12:4d:b9:bb:7a:83:0e:21:05:18:f6:3f:6b:
2d:b6:0c:bc:2e:1e:b3:22:0d:fb:06:8e:89:eb:0d:0a:51:dd:
8e:68:aa:9f:bd:9b:04:9e:36:47:9c:e0:55:b7:ba:2f:cd:9b:
f2:14:c4:c2:ed:4e:83:0a:50:d8:6b:ef:3e:4a:e2:1b:b6:a1:
5b:f9:56:c6:ef:82:f2:bf:2a:0c:0c:6a:f0:4a:55:87:fb:e2:
eb:fd:98:7c:16:76:47:34:18:34:ed:7b:96:7c:4a:e8:82:72:
54:a2:5e:b2:ae:75:9d:11:04:e1:2f:5a:27:2a:df:d1:4f:f5:
6a:9c:00:3e:bd:dc:b0:9b:23:17:99:fb:32:8b:dd:b2:e8:7c:
1b:83:67:b1:1c:5c:aa:69:3f:3e:14:18:f9:08:b0:6b:d6:e9:
93:2e:15:e5:30:76:ef:24:03:36:df:70:07:47:44:65:2e:bd:
48:6e:8e:c5:e9:7e:bd:69:07:9b:e0:6b:69:b7:c8:73:82:fc:
a9:34:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:53 2026 by rpki-client