
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa
File: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (raw, json)
Hash identifier: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=
Subject key identifier: AB:D1:7A:B2:D0:43:68:A3:C3:7A:FB:5D:3E:C0:1C:63:C7:C3:61:24
Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E
Certificate serial: 670C89074DFFF645208385CB40FE9A177F518CF4
Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa
Signing time: Sun 03 May 2026 02:31:18 +0000
ROA not before: Sun 03 May 2026 02:26:18 +0000
ROA not after: Sun 02 May 2027 02:31:18 +0000
asID: 135472
IP address blocks: 103.71.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl
rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0c:89:07:4d:ff:f6:45:20:83:85:cb:40:fe:9a:17:7f:51:8c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E
Validity
Not Before: May 3 02:26:18 2026 GMT
Not After : May 2 02:31:18 2027 GMT
Subject: CN=ABD17AB2D04368A3C37AFB5D3EC01C63C7C36124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:cc:00:da:c3:80:95:e0:75:d7:f3:8c:cd:
6e:7f:8f:42:79:57:95:03:44:a5:4a:68:6d:ae:a0:
61:00:a4:94:3d:cf:22:07:fa:bc:e2:17:43:5a:44:
58:a7:4f:e9:e6:38:12:2d:29:41:32:f7:d5:33:4b:
db:df:29:e6:67:28:d3:36:d0:51:8e:93:29:d8:61:
c9:4d:d9:ff:ba:91:05:8f:8e:9d:1e:57:c4:1e:c9:
82:da:79:e8:cd:0f:26:84:34:a2:83:79:90:58:a2:
af:69:56:e9:d8:a8:b7:f8:de:52:a8:f8:31:69:5f:
5a:bf:c5:8d:2d:45:93:93:24:75:90:d0:33:8f:f5:
da:23:68:a7:09:64:65:bf:6b:19:54:d3:c0:af:0d:
08:f6:00:31:3e:05:0b:bf:34:05:93:75:4c:ee:10:
7c:86:39:bf:c7:19:65:3b:b3:de:59:e9:2f:8a:14:
40:25:59:69:c3:96:ca:3f:ae:af:21:77:79:a5:53:
43:14:bc:dc:e6:fb:a9:29:56:08:6e:5c:0c:22:36:
f3:09:44:0f:ae:93:80:82:0f:ee:6c:8a:ed:e3:80:
0a:ff:e3:05:e1:f8:62:c4:09:f7:ed:eb:06:10:b5:
2b:66:f2:d4:3b:e7:5a:80:7d:d3:ab:e3:3a:d9:80:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:7A:B2:D0:43:68:A3:C3:7A:FB:5D:3E:C0:1C:63:C7:C3:61:24
X509v3 Authority Key Identifier:
keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:65:f4:12:eb:f6:89:73:c0:1e:9e:a6:ef:35:de:40:61:8e:
95:a2:45:5d:51:14:c6:ea:7e:79:da:3b:6e:69:81:bd:27:5b:
27:8c:b3:76:7b:4e:65:9a:2d:5e:e5:c2:a9:db:73:80:22:66:
78:60:42:8f:3f:c6:be:d7:c9:19:f1:0c:62:1e:a0:fc:5f:97:
20:e9:6d:85:a3:f1:73:95:8e:d3:b6:73:3e:c9:6a:4a:f8:fc:
31:26:e8:f4:9d:32:06:65:42:6b:ab:f6:68:a2:ca:49:bc:db:
7e:fc:8b:27:a1:81:a9:d7:93:4b:35:fb:b6:f5:f7:97:ad:e6:
5a:20:a1:cb:ae:c4:5b:c6:1a:7a:c9:5c:8f:b2:75:ce:7c:1e:
70:c6:13:a0:25:3e:02:c9:2c:d6:40:59:40:d4:65:cb:d0:04:
bc:8f:4b:7f:b2:4c:2d:02:cb:de:6b:9b:d1:ac:14:c7:26:b1:
31:27:c2:82:b0:6a:1a:53:d0:8c:90:7b:0a:57:16:d0:90:f5:
87:df:89:b9:1a:6a:2a:6a:bf:b4:01:75:2d:86:0b:f0:ca:a5:
09:d3:f7:72:c1:03:b2:36:26:68:b3:aa:92:88:1d:f3:ee:e2:
b4:ad:18:09:2b:90:97:ff:9d:c0:97:9e:e7:31:d2:af:aa:ae:
d6:6f:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:11 2026 by rpki-client