
$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
File: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier: Y6VzFaG2FbyNdRwLMR4BvXhR1/TPWS0MIZ86oCceOfk=
Subject key identifier: D1:F4:E9:52:1B:79:FD:8D:7E:98:CB:0E:5B:75:A6:E2:4F:9F:FA:05
Certificate issuer: /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA
Certificate serial: 6CBD1C938FEDF040E8D1F06AD731B955A6AE85D4
Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
Signing time: Sun 03 May 2026 02:29:08 +0000
ROA not before: Sun 03 May 2026 02:24:08 +0000
ROA not after: Sun 02 May 2027 02:29:08 +0000
asID: 139419
IP address blocks: 103.43.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl
rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bd:1c:93:8f:ed:f0:40:e8:d1:f0:6a:d7:31:b9:55:a6:ae:85:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA
Validity
Not Before: May 3 02:24:08 2026 GMT
Not After : May 2 02:29:08 2027 GMT
Subject: CN=D1F4E9521B79FD8D7E98CB0E5B75A6E24F9FFA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:9f:d2:53:02:0c:b1:c1:53:6b:85:83:ac:
98:20:dc:d2:37:95:cc:54:93:46:fa:a0:47:c2:56:
f5:df:df:07:ef:f6:de:18:0b:3f:7b:8c:48:58:30:
d1:97:38:c8:a2:d8:fa:41:02:cf:9b:01:00:bc:e8:
3e:7f:39:5a:43:73:b0:d5:48:2c:b7:5d:b5:5a:1a:
87:16:72:c0:6d:11:e2:28:49:96:d8:fa:7c:0b:b0:
39:19:21:1e:b7:cb:4d:37:3f:b1:43:1f:08:8b:dc:
56:83:13:df:46:70:c3:10:74:8c:f9:d0:28:3b:55:
57:c2:b7:f6:c3:34:0d:08:cc:5a:ac:e8:e3:28:97:
f3:d0:29:37:dd:8e:31:19:45:62:ae:4d:ed:84:0c:
4b:f9:ab:3e:70:eb:d7:71:55:16:91:99:57:81:d5:
87:13:5f:c2:f8:6c:7d:a6:4f:2b:82:d8:f9:8a:11:
d0:f6:ec:2f:9c:6a:9f:2c:80:b0:2e:33:62:89:2f:
3f:d9:dd:53:86:6a:91:9d:9e:0a:30:f4:b1:16:b3:
85:01:60:5c:56:f0:c3:d1:20:2f:fa:d2:a3:74:8f:
7f:ae:47:7b:aa:7d:ee:3c:c1:22:55:f5:82:fc:5e:
68:0c:78:df:14:1b:66:3c:8a:45:20:70:91:74:3e:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:E9:52:1B:79:FD:8D:7E:98:CB:0E:5B:75:A6:E2:4F:9F:FA:05
X509v3 Authority Key Identifier:
keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313339343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.24.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b6:34:8b:bf:94:84:6d:12:7c:01:89:75:2c:af:df:a7:ec:
32:81:3f:9d:31:51:8d:75:eb:97:b0:9b:18:ba:f9:a4:b1:43:
0a:e6:d7:c1:50:dc:fa:2a:dc:75:4a:1d:02:cc:1f:91:47:1d:
eb:fe:42:f4:7b:44:3b:d8:ad:bd:6d:49:91:2b:69:8a:7c:2f:
e6:fd:bf:ef:59:2e:52:6b:c2:52:8d:11:c8:da:0e:a6:26:a8:
88:ed:b4:b5:6b:f6:39:c5:a7:ff:5c:ff:e2:fa:0f:93:01:a3:
ef:e5:68:35:17:e6:f1:c4:b6:d6:c9:81:f3:1b:49:29:7d:1e:
3a:06:b8:98:f0:ce:59:2d:0b:a0:e0:92:bc:73:3e:11:07:7d:
02:74:f4:d3:82:1e:4d:4a:4b:ab:6b:ec:74:82:49:9f:62:2c:
b5:8f:40:d7:7a:bb:f7:ac:99:30:2a:55:9d:17:52:ea:98:d0:
1c:b7:9c:e4:6a:3c:8c:89:bc:e9:56:0c:a4:b0:d1:32:33:e1:
e9:ea:c0:f7:29:85:83:14:34:fa:f1:9c:a6:28:24:26:e7:bb:
43:b3:fc:1b:7b:02:af:4c:42:71:49:bd:c7:39:f4:84:a8:b0:
6d:2b:ae:b7:0b:34:9d:04:c3:70:25:30:c6:e7:27:71:a1:1e:
9e:74:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:58 2026 by rpki-client