
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
File: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (raw, json)
Hash identifier: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=
Subject key identifier: 05:D3:8B:18:F3:33:4E:85:70:03:2D:2C:55:88:CA:3C:8A:F6:06:9A
Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Certificate serial: 24F4B94529543B11E48552F29AA20BA1F8B147EC
Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
Signing time: Sun 03 May 2026 02:28:39 +0000
ROA not before: Sun 03 May 2026 02:23:39 +0000
ROA not after: Sun 02 May 2027 02:28:39 +0000
asID: 138119
IP address blocks: 103.126.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f4:b9:45:29:54:3b:11:e4:85:52:f2:9a:a2:0b:a1:f8:b1:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Validity
Not Before: May 3 02:23:39 2026 GMT
Not After : May 2 02:28:39 2027 GMT
Subject: CN=05D38B18F3334E8570032D2C5588CA3C8AF6069A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:d3:ac:49:c6:22:69:16:e1:10:8f:ec:5f:
c2:01:1b:69:02:bd:5b:6f:df:9f:f9:dd:69:09:e0:
e1:94:20:38:5d:10:92:8d:2a:4c:45:88:59:22:c6:
4d:53:d7:22:fd:e9:41:23:e8:1f:cd:33:a8:cc:a6:
92:3d:fc:9e:ce:29:75:0d:11:e6:15:7c:3e:a4:43:
d8:77:43:93:da:a5:e4:2b:05:8d:f2:65:7d:ae:3d:
9a:ce:16:8d:b3:7c:c9:a2:dd:61:17:47:32:de:ca:
2b:55:3d:ed:6a:39:9a:a5:d7:bd:e4:52:a3:ef:24:
fc:b7:9f:35:bc:36:32:6b:25:49:65:10:79:3b:70:
4d:16:bd:1e:0e:ad:c4:42:e1:d9:d9:97:8f:80:2c:
1c:d8:e5:72:cc:88:00:49:24:20:a4:05:b9:ee:24:
b5:ac:60:bd:9b:c9:b3:ed:97:fc:66:1c:64:4a:e9:
c7:cf:42:9c:45:77:89:ee:a4:04:7a:59:6f:89:2d:
3a:1e:79:e1:13:21:39:6f:27:07:77:91:66:b0:87:
29:e4:34:ae:b6:9b:3d:ec:4b:6e:f1:95:5a:b8:1f:
b7:14:34:45:33:a1:95:f5:7e:6e:90:25:f7:40:95:
e7:05:49:72:13:01:aa:b6:66:e8:3c:2a:21:49:03:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:8B:18:F3:33:4E:85:70:03:2D:2C:55:88:CA:3C:8A:F6:06:9A
X509v3 Authority Key Identifier:
keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:89:be:df:ea:52:18:ad:f4:e0:df:44:ae:20:10:9b:c6:cf:
fa:02:bc:94:1a:54:8e:21:32:d4:28:84:e9:34:cb:55:e8:06:
fe:6a:c1:ae:c7:8a:4f:eb:64:2b:2e:70:3f:c9:69:7a:86:8b:
41:2e:72:99:9c:b0:42:d3:12:a5:a7:b2:0d:3f:f6:b1:53:74:
30:be:e9:14:ad:bd:cd:77:32:94:49:55:47:02:fc:f9:28:dc:
75:09:21:81:e2:0b:51:d2:16:a7:9e:69:88:53:a9:b6:28:37:
b0:22:da:8a:c4:e3:b9:72:cd:aa:7a:eb:29:6e:09:43:f1:f0:
80:d3:ae:6e:72:cd:f7:fc:88:1e:9b:a5:2f:a1:3c:4e:d8:be:
3a:c4:ca:f1:20:78:29:cd:36:3f:75:f6:4b:29:46:f8:3b:57:
5b:0a:31:a8:ee:f9:ef:46:fd:fe:47:1a:05:d2:dc:6d:b4:0c:
87:51:31:81:fd:ae:6b:ae:a5:c8:e2:a3:7b:be:3b:a8:e9:7f:
a5:dd:fc:c3:09:ff:20:0e:f0:77:62:e1:a3:92:3d:07:ff:53:
d5:be:19:4a:0c:cc:20:50:e7:d6:a5:9d:c5:93:cc:15:0b:85:
74:97:cd:8d:4f:00:ef:14:9b:ce:da:12:1e:34:e9:51:9f:89:
d0:c4:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:44 2026 by rpki-client