
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa
File: 3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa (raw, json)
Hash identifier: jXy0CdGkOe/aCpL4F3KoTBpYXV8a9YPJGcjZWIKjM3o=
Subject key identifier: 76:5F:28:4E:A9:7E:EF:FC:65:EE:9B:5B:CB:A3:30:55:4A:A3:32:0B
Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
Certificate serial: 2556DB6C27802BA417F3EB7E8DE615687EF09595
Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa
Signing time: Mon 21 Sep 2026 04:31:55 +0000
ROA not before: Mon 21 Sep 2026 04:26:55 +0000
ROA not after: Mon 20 Sep 2027 04:31:55 +0000
asID: 152790
IP address blocks: 103.176.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl
rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 02:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:56:db:6c:27:80:2b:a4:17:f3:eb:7e:8d:e6:15:68:7e:f0:95:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
Validity
Not Before: Sep 21 04:26:55 2026 GMT
Not After : Sep 20 04:31:55 2027 GMT
Subject: CN=765F284EA97EEFFC65EE9B5BCBA330554AA3320B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:14:be:d3:58:2d:52:36:c7:b8:82:9a:08:
cc:a7:90:e8:63:60:0c:b3:9d:c7:32:6c:24:9e:e0:
86:78:50:aa:a3:0b:fe:fd:23:a3:6a:ad:2b:21:df:
c9:69:1e:91:dd:f6:83:27:db:05:13:37:23:67:bd:
b7:f7:52:4b:fb:db:da:ca:18:77:44:ae:91:79:d5:
84:ac:69:6a:37:b3:cd:ec:c5:74:e8:da:d3:c4:e3:
00:8f:06:e4:85:ba:6d:52:3b:d3:ab:33:5a:12:bd:
de:b9:e9:dd:fa:e7:fd:fd:fb:49:c1:9d:6c:3b:1c:
64:6c:8a:8c:4a:39:c5:c2:e4:39:da:b0:8e:8d:00:
ec:a7:99:14:2f:fb:33:33:a7:97:cd:7f:4d:45:80:
f3:40:13:2e:20:8b:09:96:7b:75:da:c7:eb:db:92:
0e:1e:0c:e7:1c:d8:d1:39:87:b6:74:a9:68:c3:0e:
52:02:cb:a7:f1:fd:10:95:3e:ca:f4:c8:40:04:ed:
7b:48:79:52:23:bf:a2:ba:df:98:75:b6:6e:04:4c:
e6:b2:c1:c7:6b:e9:6e:e7:15:2c:14:da:b2:dd:f0:
1b:94:f5:70:f5:c9:6c:d7:be:01:b5:9b:79:35:04:
3b:8e:8b:e1:a3:0c:1a:52:46:c8:be:fd:51:06:97:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5F:28:4E:A9:7E:EF:FC:65:EE:9B:5B:CB:A3:30:55:4A:A3:32:0B
X509v3 Authority Key Identifier:
keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.44.0/24
Signature Algorithm: sha256WithRSAEncryption
78:12:1c:e9:a2:f1:10:23:21:93:c0:53:9d:60:2c:c6:a6:29:
24:7f:3b:df:74:3d:9a:46:60:25:63:8f:60:61:e6:c5:28:2c:
a2:58:70:e9:f9:4b:7b:a8:31:48:75:a8:74:21:5c:7b:70:47:
99:b0:c3:00:df:04:ba:7b:ca:5d:36:93:4b:bb:68:81:2a:3d:
6c:95:e9:5a:2f:ff:d0:50:51:73:70:10:c2:94:97:7b:7f:c1:
5b:f1:de:d3:db:62:fd:bc:7e:87:66:cf:1a:7a:85:f6:aa:82:
7d:b5:6d:b0:22:4e:fe:0b:3f:c2:9c:16:8e:0e:0a:40:4a:03:
43:ca:46:69:e0:27:93:1d:08:29:12:29:c2:f9:48:f5:7f:9d:
f2:08:98:80:4d:64:e6:80:2a:e8:52:9a:b7:81:af:d5:9e:12:
87:2a:54:94:6f:c5:1d:d9:31:d1:e3:3a:00:05:9c:52:7a:3e:
6a:99:fa:2d:a3:44:14:99:37:ea:da:ca:d1:69:da:4b:44:2b:
fa:8a:16:4e:6e:78:d9:9a:05:95:24:eb:e7:da:01:17:80:f4:
ce:a3:8c:3e:4c:43:8c:d7:15:5e:0b:a5:6a:27:1e:fd:c4:42:
1e:97:d8:2c:3f:fc:ba:ac:69:29:e9:cc:ec:28:f3:dc:82:82:
c3:a4:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:27 2026 by rpki-client