
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa
File: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (raw, json)
Hash identifier: 6bIg58V+S6s6w2BVuCVhFWMhoAtGZP/B+0ZE/bwD8i8=
Subject key identifier: 92:88:A6:BF:62:93:25:B0:F7:D6:6E:A9:58:8A:56:88:1E:5A:CC:81
Certificate issuer: /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial: 3909634F014943260DCF3CD2BD8782C8B994D4A6
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa
Signing time: Sun 03 May 2026 02:25:07 +0000
ROA not before: Sun 03 May 2026 02:20:07 +0000
ROA not after: Sun 02 May 2027 02:25:07 +0000
asID: 38788
IP address blocks: 103.242.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:09:63:4f:01:49:43:26:0d:cf:3c:d2:bd:87:82:c8:b9:94:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Validity
Not Before: May 3 02:20:07 2026 GMT
Not After : May 2 02:25:07 2027 GMT
Subject: CN=9288A6BF629325B0F7D66EA9588A56881E5ACC81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:83:1f:37:68:a6:e2:d5:04:1d:81:ee:75:
59:85:e6:d5:c1:77:d8:91:a2:84:68:5e:0e:ab:b4:
ea:87:97:01:c0:0d:17:dc:ea:78:a9:57:f1:ee:2b:
c2:0a:e4:b2:3a:19:ca:87:56:98:2c:50:1e:5a:e7:
f4:6a:90:fb:81:d9:21:6a:c5:b0:f1:f8:aa:51:39:
8c:e4:7c:bf:cd:8f:4c:bf:49:ce:fd:a1:4c:9f:5e:
ce:c3:32:69:82:ca:92:6e:0b:29:eb:0f:1a:78:e0:
ad:02:ca:99:c3:7f:13:54:d7:0e:43:38:35:f5:07:
5b:97:a3:18:37:96:58:68:a5:ff:b6:e8:06:b6:7f:
cd:0b:2a:f9:b5:8b:f7:61:8d:58:df:cd:2c:e2:2c:
57:13:4d:67:97:85:de:31:94:44:00:d3:46:e7:8e:
9a:f1:4b:9a:a2:90:f4:ae:54:14:61:38:14:72:b0:
fd:3a:a9:f8:a8:3b:d9:38:8b:cd:55:e5:0e:d9:4c:
e9:f4:04:55:76:6c:4d:72:9a:2a:b0:42:8a:13:b8:
c9:e2:78:1b:75:53:6e:d8:f8:08:f3:1a:8e:aa:9e:
9a:24:f0:4a:a7:63:5a:e0:a7:a4:7f:38:06:0b:14:
b8:81:fa:70:d6:ba:8a:d4:a7:d1:fc:39:34:66:7d:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:A6:BF:62:93:25:B0:F7:D6:6E:A9:58:8A:56:88:1E:5A:CC:81
X509v3 Authority Key Identifier:
keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.181.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:26:99:35:0e:51:08:40:e0:38:fe:d8:40:a0:1e:8a:32:7f:
cb:89:4f:da:3e:5e:60:da:0c:10:02:1f:cd:94:a3:48:f0:89:
6f:15:39:57:f3:9d:66:a5:b7:36:08:a1:4e:25:6a:05:c5:90:
75:31:2e:6d:fc:67:4d:5a:85:42:d9:45:15:98:cf:70:c3:96:
aa:9c:46:55:e6:8a:f8:9d:f0:5b:de:69:5b:d6:e0:ad:ee:47:
1f:95:26:eb:59:e5:a0:39:aa:cf:2e:eb:c0:50:6e:e2:91:18:
fa:67:c0:d8:ea:01:3b:8b:ae:c1:3a:81:dd:b0:30:33:40:74:
5c:15:40:c3:14:63:ce:5c:23:49:9f:ad:9c:5d:11:10:0c:f9:
17:4a:09:a6:94:c8:24:c6:9a:9a:c6:e4:93:fd:6a:02:f1:37:
d3:9c:71:0f:ea:d8:01:7e:5c:50:aa:7d:bd:f3:cb:e1:78:b5:
56:a2:e6:e2:5b:67:61:ff:05:a6:ac:31:77:b7:88:3c:92:fc:
ad:bb:6d:ce:11:a1:89:5a:fb:10:c4:cb:42:5e:0b:42:b7:9b:
b1:fa:5c:7b:b7:01:8f:85:e3:70:8a:e4:4c:21:7c:20:b6:3c:
bc:87:20:3e:56:69:13:f4:d1:44:94:d9:a7:e0:e0:60:c0:e4:
cd:29:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:59 2026 by rpki-client