
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e34302e35342e302f32332d3234203d3e203538333932.roa
File: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (raw, json)
Hash identifier: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=
Subject key identifier: BC:36:8A:3A:CB:7D:D4:C7:0B:FD:6B:41:C5:66:AF:A1:2B:7D:D4:CF
Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B
Certificate serial: 166FC3A69388E51A90524F5A4DAA1A3FBF7CDA70
Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e34302e35342e302f32332d3234203d3e203538333932.roa
Signing time: Sun 03 May 2026 02:32:33 +0000
ROA not before: Sun 03 May 2026 02:27:33 +0000
ROA not after: Sun 02 May 2027 02:32:33 +0000
asID: 58392
IP address blocks: 103.40.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl
rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6f:c3:a6:93:88:e5:1a:90:52:4f:5a:4d:aa:1a:3f:bf:7c:da:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B
Validity
Not Before: May 3 02:27:33 2026 GMT
Not After : May 2 02:32:33 2027 GMT
Subject: CN=BC368A3ACB7DD4C70BFD6B41C566AFA12B7DD4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:0d:93:16:91:07:10:ea:ba:84:40:82:a6:
bb:6a:24:26:93:39:8e:05:1a:d6:67:a0:c9:21:1e:
25:cc:4a:4e:a5:22:b1:2c:41:ea:a7:67:ee:9e:a5:
e6:e8:43:be:af:07:d2:f7:34:7b:f6:6e:54:c3:92:
7b:57:c5:a2:74:41:62:eb:16:52:7b:41:f9:c6:f8:
de:ca:a8:2e:64:39:06:71:ae:df:37:47:9a:7d:e4:
3d:f9:a3:35:4b:55:24:3d:86:55:13:89:51:b8:3a:
ae:d4:07:7a:51:7f:6e:ad:95:9f:e0:37:72:f4:b7:
35:b4:e7:2c:24:42:91:24:38:c8:bf:57:e5:f4:04:
c8:e1:b7:5e:48:49:90:1e:f8:60:22:2d:fe:b2:23:
70:55:ec:9f:8f:19:58:dc:15:40:13:15:d6:47:a6:
e2:f2:0a:d2:ca:59:2e:a7:7a:37:c9:2d:c8:3b:59:
dd:0f:aa:31:68:33:65:58:08:b0:6f:bd:ce:c4:ab:
ab:e4:3b:ba:44:88:be:bc:f5:11:9c:ab:ac:84:86:
80:16:01:85:32:9a:7d:43:36:3b:bd:e1:21:06:85:
a8:c7:c0:cf:85:a6:fc:9e:d0:35:a4:c2:ae:4f:7d:
96:6a:ce:9a:78:4b:05:db:45:a1:36:35:6e:ec:ee:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:8A:3A:CB:7D:D4:C7:0B:FD:6B:41:C5:66:AF:A1:2B:7D:D4:CF
X509v3 Authority Key Identifier:
keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e34302e35342e302f32332d3234203d3e203538333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e5:62:8e:dc:bf:36:76:1f:2f:54:43:35:9a:ec:d3:33:ef:
d9:b8:1b:a3:fa:9c:e0:a5:92:e2:4d:29:19:70:37:5a:57:97:
62:94:f4:7d:cc:68:8e:a1:35:d6:e4:54:55:24:41:4b:5f:2d:
7d:73:0d:c8:07:5e:86:31:43:b8:a7:0f:96:25:1a:dc:b6:87:
4d:e7:2c:41:82:27:bb:0e:78:7c:49:d6:60:ad:26:af:e4:61:
42:bf:78:7f:e4:75:66:8e:0a:71:97:c9:33:af:97:93:e7:e4:
9d:99:e1:68:49:4f:61:1c:18:95:2c:27:d3:8d:b5:d8:7f:dc:
20:9f:7a:de:e1:52:db:84:44:63:b3:6e:d6:a7:0d:14:49:34:
0f:2e:0e:97:28:b5:f9:4d:07:7e:a4:06:23:98:cd:fd:5f:9d:
94:62:1d:5c:82:64:27:04:25:3a:95:12:dd:ce:72:45:55:64:
04:9d:c9:53:b0:1b:5d:2a:d9:0b:2c:d9:c5:d2:76:c6:68:b0:
0e:46:29:61:c6:d8:a2:e5:1e:54:6d:49:1e:ca:6e:a7:ef:a4:
40:f1:09:58:96:58:2d:1a:97:62:90:a6:37:e5:2e:23:56:fc:
7b:f9:a4:ef:2b:56:42:b1:4a:02:69:8d:e6:d2:b0:ff:f6:8f:
6d:a0:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:12 2026 by rpki-client