
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=
Subject key identifier: 47:DA:E3:A9:6A:96:53:1F:72:C1:BA:9A:B7:00:42:8C:A7:78:56:EB
Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E
Certificate serial: 46354922C4F7F198016A13915393251DAE4AACAE
Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 02:29:58 +0000
ROA not before: Sun 03 May 2026 02:24:58 +0000
ROA not after: Sun 02 May 2027 02:29:58 +0000
asID: 135478
IP address blocks: 103.121.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl
rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:35:49:22:c4:f7:f1:98:01:6a:13:91:53:93:25:1d:ae:4a:ac:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E
Validity
Not Before: May 3 02:24:58 2026 GMT
Not After : May 2 02:29:58 2027 GMT
Subject: CN=47DAE3A96A96531F72C1BA9AB700428CA77856EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:3a:b9:54:91:ae:31:5a:95:b6:59:f6:9a:
37:ba:90:f8:91:e4:6d:80:ef:60:a8:57:6a:60:86:
db:f9:64:fb:ba:68:a5:d2:6d:13:bf:9e:9b:34:ed:
26:ee:92:dc:34:62:9a:32:65:cf:71:c2:28:6b:bf:
7a:31:b0:e5:07:4c:4a:ba:17:de:51:7c:0d:be:56:
0c:89:56:d4:7f:28:79:e1:94:4d:f9:ad:e1:8e:1c:
63:8c:d2:fc:f6:58:93:e6:5f:9d:ad:5e:4c:83:34:
03:bf:3b:ba:22:5f:da:d0:5b:a0:7a:7e:3a:40:96:
a3:eb:66:22:42:2e:06:ec:c4:de:f9:f4:a6:7d:75:
a9:12:06:fe:ee:d0:6f:fc:96:5b:1c:23:21:ed:15:
37:f1:75:49:74:2d:fe:50:94:9e:03:bd:96:ac:b9:
9d:ba:de:2f:9e:76:a7:fe:57:98:4e:35:f8:df:9e:
61:bc:8b:07:57:d2:47:2a:71:02:f8:77:39:6b:2f:
eb:e0:9a:9e:24:ca:11:4b:26:eb:40:00:0c:ba:35:
8a:a9:53:f4:b1:1d:7a:55:0d:5a:4c:d0:d1:09:0b:
d0:bb:9b:67:17:3e:86:ad:f5:e1:c4:ae:8e:19:3b:
3d:71:0b:ab:62:ad:4c:8b:3e:ff:49:56:2c:29:00:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:E3:A9:6A:96:53:1F:72:C1:BA:9A:B7:00:42:8C:A7:78:56:EB
X509v3 Authority Key Identifier:
keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.108.0/23
Signature Algorithm: sha256WithRSAEncryption
40:35:e6:d3:da:e0:59:45:85:0f:04:c2:8d:2b:50:85:a7:4e:
12:92:02:37:80:e0:8b:98:cc:e0:1c:0b:b5:73:3e:ef:13:f7:
28:18:4d:63:f5:e9:f0:98:b5:52:89:27:8f:39:fe:98:ff:22:
70:15:70:38:fd:8c:3e:18:40:0e:84:fe:c4:5e:db:a3:3f:9f:
d4:9c:8d:9b:60:aa:9f:f0:cb:4d:12:ae:2a:66:5e:3d:09:9e:
0f:c0:6e:bb:6c:16:e2:e6:cd:13:3d:7c:5f:1d:59:49:18:fc:
7d:b0:e7:47:f0:f0:a1:c9:7d:00:6b:42:2c:10:ea:e2:2c:49:
e6:43:8e:d3:8a:2d:bc:c7:63:b0:ed:df:92:04:18:e0:d4:58:
a7:39:be:07:b7:e1:c6:b5:ee:7f:5b:45:5f:91:2a:bf:8c:17:
7a:e4:84:03:5b:1c:71:e8:13:31:36:90:5b:eb:f6:7d:7b:58:
55:6d:f1:4c:a1:70:ca:32:0c:6f:21:d7:c4:15:63:6a:ff:89:
9e:26:46:fa:25:aa:97:db:14:11:87:b3:3c:ff:cd:28:2f:fc:
db:cd:c7:67:77:2c:66:75:98:ad:12:49:06:34:73:4d:8a:f2:
2a:2d:7e:62:b1:5d:77:36:45:50:8b:aa:6b:75:d6:31:7e:cc:
c5:9f:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:29 2026 by rpki-client