
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
File: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (raw, json)
Hash identifier: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=
Subject key identifier: AA:2E:8F:32:8A:DF:00:CB:2D:DA:98:55:65:F8:5C:C8:B3:90:91:99
Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial: 7DFC1473FC47F09CA3C2E3B11CDF1DB03E3F34B1
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
Signing time: Sun 03 May 2026 02:24:48 +0000
ROA not before: Sun 03 May 2026 02:19:48 +0000
ROA not after: Sun 02 May 2027 02:24:48 +0000
asID: 150241
IP address blocks: 103.66.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fc:14:73:fc:47:f0:9c:a3:c2:e3:b1:1c:df:1d:b0:3e:3f:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Validity
Not Before: May 3 02:19:48 2026 GMT
Not After : May 2 02:24:48 2027 GMT
Subject: CN=AA2E8F328ADF00CB2DDA985565F85CC8B3909199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:f9:52:12:43:4b:f3:20:01:44:04:1b:7a:
0b:42:45:45:5e:93:b0:cb:a8:8c:11:19:79:11:94:
bf:ff:19:90:e7:40:60:65:52:ae:5c:ff:ce:9e:56:
8a:2a:86:f9:7a:cc:c2:69:a2:8c:38:55:49:8b:bb:
dc:55:16:e1:93:6b:79:12:e2:50:c3:26:9a:6d:25:
30:2a:3e:9c:32:3c:ce:e3:09:e8:8f:1e:fa:f2:62:
0e:9d:46:7d:2d:d7:53:46:bd:76:6c:0e:02:98:88:
b3:91:13:5a:8b:81:06:e4:24:b6:da:a3:b3:e0:2f:
67:85:9f:55:17:ab:55:a9:a0:d1:28:89:5d:50:a3:
f0:5e:24:50:43:a7:e8:29:a1:88:6f:d4:de:e3:56:
f0:4c:4b:b2:d8:9f:c6:fb:0d:f8:ef:04:8d:18:5a:
a2:df:43:fb:76:b2:0a:ab:b1:10:bd:2e:99:d6:53:
71:65:43:d7:64:79:94:a7:98:8f:af:a3:9a:4d:8f:
0d:37:24:c8:85:cf:ef:ff:1d:1a:4f:fc:5c:3a:9a:
f6:98:01:33:37:e2:d9:a2:e0:38:05:74:04:77:19:
c0:e0:86:57:61:8c:d4:5f:6a:4f:73:ba:a5:ed:3b:
e3:a5:6b:de:f0:42:57:e9:c9:31:14:d7:c2:13:4f:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:8F:32:8A:DF:00:CB:2D:DA:98:55:65:F8:5C:C8:B3:90:91:99
X509v3 Authority Key Identifier:
keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2e:ad:07:98:0e:c7:a0:77:fb:df:16:21:93:17:ca:41:15:
4f:18:0d:6d:ab:54:89:b1:21:62:25:b6:44:2e:9b:08:71:39:
14:6e:f8:d7:31:55:27:0b:5b:48:ac:14:6a:1a:eb:90:42:62:
4f:41:d1:d4:bc:d7:00:9c:09:a3:3f:b7:aa:1a:aa:c1:4c:b5:
03:ba:77:47:dc:cd:86:9b:8e:64:49:f5:2c:8c:9e:54:62:35:
00:d0:0e:17:6e:36:f9:26:aa:f6:ef:45:b7:15:61:16:74:6d:
bc:9f:55:46:58:22:c3:54:40:2d:46:2c:12:4d:35:88:b4:f9:
0b:f4:da:3c:70:f0:73:09:41:a6:e3:12:68:91:40:49:83:56:
cb:21:c4:fe:07:23:c3:6f:ce:15:da:0d:bc:53:f0:4a:49:9c:
1e:dd:e8:27:cb:cb:2f:42:7e:24:65:fc:1b:6c:d9:99:30:05:
85:f7:69:49:8e:2d:5e:65:de:3b:3e:cb:a5:94:a9:12:42:83:
bf:5f:de:c0:2a:e6:85:c9:66:87:8a:e4:2d:7f:1b:92:4e:66:
75:43:e1:ab:af:80:1e:73:76:bf:0b:3e:c1:53:f3:00:53:49:
83:3b:95:95:b3:4d:63:50:a6:eb:a1:24:68:ee:f3:3c:95:78:
ff:e5:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:38 2026 by rpki-client