
$ rpki-client -vvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa
File: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (raw, json)
Hash identifier: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=
Subject key identifier: 1A:E9:DA:3F:BC:4D:41:F6:7D:F9:A7:95:BD:F8:F3:A1:FC:63:4F:2F
Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5
Certificate serial: 35E3AD3BB0BB71DD71E4FFF2B1C0FFE29B4C6525
Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa
Signing time: Sun 03 May 2026 02:32:52 +0000
ROA not before: Sun 03 May 2026 02:27:52 +0000
ROA not after: Sun 02 May 2027 02:32:52 +0000
asID: 135465
IP address blocks: 103.146.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl
rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e3:ad:3b:b0:bb:71:dd:71:e4:ff:f2:b1:c0:ff:e2:9b:4c:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5
Validity
Not Before: May 3 02:27:52 2026 GMT
Not After : May 2 02:32:52 2027 GMT
Subject: CN=1AE9DA3FBC4D41F67DF9A795BDF8F3A1FC634F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:82:eb:d6:2c:16:cd:e3:ef:aa:86:c2:30:
3b:32:a3:40:d8:67:cd:9e:8c:3f:7e:03:30:ad:c2:
13:87:97:70:6c:b6:a0:9e:eb:04:91:9f:32:f7:69:
53:b1:f2:82:3b:65:85:6d:aa:9c:cc:ca:4b:75:a4:
07:fa:bf:1c:4a:ea:30:a6:d3:53:a0:07:00:98:cb:
c2:c2:df:79:bf:7b:76:d4:ac:75:bf:d5:67:6f:bc:
59:64:b4:7d:ca:b2:1a:a8:39:21:5a:b8:37:2d:89:
95:bd:0e:38:7b:58:76:8c:3f:64:b5:c1:13:16:25:
9d:7e:b4:45:c2:e7:65:b2:d8:da:22:fc:72:be:90:
6f:c0:c5:43:5f:fb:22:b3:7e:d0:d9:d0:c0:82:d5:
b8:3d:ed:54:98:19:f7:17:9c:b5:b9:e7:a7:fa:64:
47:0c:34:8a:1b:13:1d:13:e0:c0:06:df:a3:cd:2a:
f3:af:03:40:5a:96:c2:00:9e:1d:99:03:6b:d5:66:
3f:71:f9:dc:71:cb:ee:3c:4a:4b:86:33:20:61:14:
fa:ce:83:17:32:6d:24:3c:f3:4e:7f:91:2f:15:87:
d1:3c:69:7f:ce:8d:0a:f9:60:ed:bf:ce:89:20:a6:
76:50:b0:9a:02:07:8d:ef:5f:81:e3:bc:e9:d9:0f:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:DA:3F:BC:4D:41:F6:7D:F9:A7:95:BD:F8:F3:A1:FC:63:4F:2F
X509v3 Authority Key Identifier:
keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:33:c4:f3:db:55:92:9b:5e:03:db:8e:d0:d8:17:86:db:38:
da:d7:ef:91:3e:57:61:39:6c:cf:31:c7:e0:73:ed:26:da:49:
85:c0:ef:f8:5a:f4:a6:b8:35:36:ea:31:21:e1:b3:88:54:98:
47:5a:8f:b0:76:42:36:0a:dc:eb:ec:1c:3b:48:80:11:ed:bf:
02:17:18:f8:4d:e1:e8:64:ba:1f:32:13:96:db:77:12:4d:69:
7f:30:db:3b:77:44:0f:8d:8c:26:a6:a6:79:40:19:74:11:05:
87:ae:d7:56:98:31:e9:4b:e0:32:eb:42:b0:f6:7d:7b:47:79:
61:70:ca:61:57:9c:cd:1f:a3:85:92:00:a0:90:36:45:c0:f1:
f5:4e:79:a5:2b:22:62:c1:91:b5:be:3a:9f:64:7b:54:b7:67:
21:79:3e:0c:79:37:7d:83:b8:1f:4c:22:44:3b:0e:84:8f:90:
10:a0:74:24:b4:47:ed:53:83:4c:96:ea:99:e2:8e:9c:36:28:
12:e9:dc:f7:36:8c:56:d0:3b:1d:24:28:e3:73:1d:8f:a2:e4:
1a:de:b9:7d:5c:6e:db:49:b4:eb:b1:59:58:e7:32:2a:a6:ce:
77:2a:e2:a3:13:7f:32:4c:4e:f7:4b:1b:ed:9b:3b:8a:98:43:
b4:21:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:35 2026 by rpki-client