
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa
File: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (raw, json)
Hash identifier: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=
Subject key identifier: 4D:C1:D9:1B:28:D1:DF:1E:BF:49:95:17:33:CC:7A:F6:3F:A3:CB:D0
Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13
Certificate serial: 1A79A45844861CD92409C5E3DB80F8A0A5BF4FF5
Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa
Signing time: Sun 03 May 2026 02:32:12 +0000
ROA not before: Sun 03 May 2026 02:27:12 +0000
ROA not after: Sun 02 May 2027 02:32:12 +0000
asID: 58821
IP address blocks: 103.242.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl
rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:79:a4:58:44:86:1c:d9:24:09:c5:e3:db:80:f8:a0:a5:bf:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13
Validity
Not Before: May 3 02:27:12 2026 GMT
Not After : May 2 02:32:12 2027 GMT
Subject: CN=4DC1D91B28D1DF1EBF49951733CC7AF63FA3CBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:45:79:26:5d:24:40:a4:c3:0b:8b:7a:48:
62:b4:33:5d:fd:c9:d4:99:d1:95:c3:38:ea:ef:00:
1a:94:64:7e:cb:45:8d:9d:bf:a4:7e:6b:7b:d6:14:
d2:d7:ce:3a:80:dd:db:a9:1a:78:a6:5c:cd:1f:60:
0a:f8:e5:24:3d:0f:80:f2:1a:78:7f:43:73:29:f3:
f9:bd:5f:1d:31:98:74:dd:15:04:e2:24:ef:16:d3:
71:cd:33:5e:8a:2f:2c:b0:59:13:35:b7:f2:b7:da:
f9:5f:3e:c0:e5:c0:6b:3d:14:a3:66:7c:bf:1b:04:
89:b2:0a:34:ea:78:f7:92:bb:6f:ef:c4:da:52:f1:
c4:b1:8c:5d:60:15:b3:01:64:49:32:dc:7c:66:f6:
ee:fc:23:74:0a:7d:12:8a:30:a9:ec:7a:aa:4e:05:
e6:e3:7a:ee:2a:b9:9e:95:4c:0c:66:e4:b6:70:f7:
26:0c:e2:9b:99:25:7a:e7:81:16:c6:9c:1c:b5:f2:
d6:a1:f1:42:06:42:18:db:16:23:0e:57:28:8b:e6:
a8:6d:00:13:54:ad:29:9e:58:55:de:bf:15:24:ce:
75:2c:65:97:28:3f:df:91:8e:c8:14:b5:8e:a7:6d:
e4:76:e2:4e:f5:1c:05:96:f3:12:ac:b8:c6:2d:7b:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:D9:1B:28:D1:DF:1E:BF:49:95:17:33:CC:7A:F6:3F:A3:CB:D0
X509v3 Authority Key Identifier:
keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.104.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d3:9b:76:ac:d0:e3:4d:35:52:2c:a8:7e:94:14:78:fd:b7:
ac:a8:3a:09:3c:96:bb:ac:1d:7d:cb:1b:06:cf:a5:cb:b5:64:
bc:dc:46:95:f4:0f:f7:20:31:45:80:1f:e7:6d:9d:26:c1:7e:
4a:75:a0:77:81:6e:b5:ec:d9:31:95:ca:b1:19:fa:c0:35:a8:
43:8e:90:3b:c0:27:73:f0:20:55:f7:ff:a5:00:5e:81:f1:8b:
de:70:59:fd:02:00:61:f5:df:0c:ad:09:14:18:38:1a:77:0d:
fd:e2:58:0b:01:72:79:f7:b0:ff:0d:70:34:41:c4:0f:47:e5:
c8:49:49:30:10:1c:fc:d7:64:13:5e:a3:ac:b9:c8:61:6f:07:
2f:78:0e:a3:e9:b9:73:36:36:5a:da:d6:68:48:b6:e9:fb:b5:
bf:3f:91:94:06:ac:de:88:b2:77:0f:29:ac:8e:b8:c4:09:e7:
cc:91:1c:92:d3:10:9c:8b:c6:9d:fa:85:90:7b:a8:85:d9:34:
4d:5d:6f:bb:4c:99:e4:f7:e4:6a:ab:a9:10:cc:25:cc:ca:ad:
dd:b3:ff:a0:4d:e8:70:b4:46:5f:0a:9c:20:13:ac:26:3d:f2:
c8:ee:ac:20:f7:e4:ba:04:0b:2a:92:a2:30:b6:73:8d:86:50:
9f:3a:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:34 2026 by rpki-client