
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa
File: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (raw, json)
Hash identifier: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=
Subject key identifier: AA:AB:F3:67:C0:E1:DD:CA:C5:7C:7A:7B:68:B9:CC:98:D2:EF:57:17
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 1EAB7DE3921BB57BA281B6A1231079E95C9CDAB7
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa
Signing time: Sun 03 May 2026 02:29:48 +0000
ROA not before: Sun 03 May 2026 02:24:48 +0000
ROA not after: Sun 02 May 2027 02:29:48 +0000
asID: 133823
IP address blocks: 103.104.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ab:7d:e3:92:1b:b5:7b:a2:81:b6:a1:23:10:79:e9:5c:9c:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: May 3 02:24:48 2026 GMT
Not After : May 2 02:29:48 2027 GMT
Subject: CN=AAABF367C0E1DDCAC57C7A7B68B9CC98D2EF5717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:57:d3:91:1d:bc:a9:93:f1:d9:ab:1a:70:
6c:80:66:05:ab:c6:39:be:db:04:53:30:ba:0a:48:
ec:8f:63:6a:81:3d:af:ce:81:1e:5c:04:b3:2c:05:
dc:a3:30:a7:fe:9d:93:34:a1:a3:3c:bb:89:10:24:
5b:3e:bd:85:c2:62:41:76:ab:bf:30:03:73:d5:af:
76:ec:2f:52:0c:f6:53:3f:0a:91:c7:d7:7f:4f:a2:
06:37:c0:3f:1a:f4:e1:86:e3:52:16:f4:6d:54:2c:
eb:82:90:dc:ac:a9:40:a9:6a:9f:ea:54:23:92:d0:
c1:b7:fb:6c:c8:86:e9:27:34:03:14:00:15:ee:3a:
ab:cf:64:a4:ea:08:b4:56:8a:87:2b:da:01:82:93:
16:11:6f:12:5b:7b:9e:81:2d:3f:07:2d:62:d6:17:
f6:88:45:f2:4b:5d:e2:1a:ed:c7:05:d3:a2:fb:44:
99:0d:e4:2f:e0:27:9c:f4:78:40:4d:cf:de:47:42:
60:9b:37:40:eb:04:e9:c0:11:e6:8c:c7:7b:a5:00:
cf:c3:50:37:2a:f6:ad:f8:0d:c9:03:3f:c4:28:50:
a2:86:3f:a4:7f:5f:5a:62:88:92:2c:b4:85:80:de:
46:ba:e7:48:60:49:a1:a1:a1:c3:2a:96:9a:ae:e8:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:F3:67:C0:E1:DD:CA:C5:7C:7A:7B:68:B9:CC:98:D2:EF:57:17
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.132.0/23
Signature Algorithm: sha256WithRSAEncryption
48:d6:02:47:ec:2c:22:e2:a6:0a:a0:f2:54:06:8a:47:18:fc:
e6:6d:ba:a5:e7:b4:c1:27:bb:ae:2e:8c:85:6f:fb:19:38:e9:
40:a7:3a:1c:a9:b5:66:56:6c:7d:83:8d:d8:b1:52:a8:64:56:
f1:2c:82:12:aa:d6:84:7d:be:1d:2c:e8:46:a7:34:77:36:e5:
83:06:7f:e5:03:c7:e8:f7:5e:8c:0d:1e:0f:fb:f7:08:82:dd:
a2:d3:d0:42:a3:39:40:75:73:a9:07:2f:fd:20:11:9c:d3:19:
79:88:61:1d:84:d9:46:bd:2e:c1:bc:91:53:0f:e6:b5:53:0e:
62:e8:87:b0:43:40:9a:c3:b7:66:63:64:f3:b5:47:77:09:b4:
4b:4c:2f:32:c1:af:b1:ec:4c:6a:5f:73:25:1e:2b:4f:0a:10:
82:e2:e7:ea:db:fa:5d:d2:c6:8b:79:7c:d2:34:e1:e8:12:1a:
7c:eb:01:6c:2c:15:83:57:04:63:d6:c5:12:a0:90:54:13:42:
15:7d:65:5a:96:f7:e7:cc:bc:b6:50:34:a1:17:2f:71:f7:10:
07:e0:44:54:74:51:29:7c:62:50:85:00:23:27:dc:6a:cb:35:
da:40:10:1b:1a:1f:d7:ab:5c:e2:c7:07:ea:25:ab:44:bf:73:
32:ef:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:22 2026 by rpki-client