
$ rpki-client -vvf rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
File: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier: FptSR8q7lfMCgCSKLjWnM/OjVJhBqEdi2E49VH6LcSA=
Subject key identifier: AD:A2:D9:C7:21:B6:49:46:0A:E2:4D:44:5C:92:F9:6F:DF:DC:65:37
Certificate issuer: /CN=F831F8D1B7EB333E836D19E2C6659AA968449902
Certificate serial: 6491641238BFBA4A16813F8EFE8B68802F719C09
Authority key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
Signing time: Sun 03 May 2026 02:33:38 +0000
ROA not before: Sun 03 May 2026 02:28:38 +0000
ROA not after: Sun 02 May 2027 02:33:38 +0000
asID: 133800
IP address blocks: 103.58.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl
rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:91:64:12:38:bf:ba:4a:16:81:3f:8e:fe:8b:68:80:2f:71:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F831F8D1B7EB333E836D19E2C6659AA968449902
Validity
Not Before: May 3 02:28:38 2026 GMT
Not After : May 2 02:33:38 2027 GMT
Subject: CN=ADA2D9C721B649460AE24D445C92F96FDFDC6537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:ae:7e:62:94:47:29:16:57:80:3d:04:05:
df:ff:5a:eb:60:b5:94:97:95:56:a9:08:a3:e9:0b:
50:a5:68:1e:45:fb:66:fe:6f:41:0a:8c:be:55:d5:
b3:da:0a:2b:18:23:8c:c8:d0:83:ac:a0:6f:ea:c7:
de:e9:ee:cc:80:5c:46:0a:02:82:e2:cb:9b:86:af:
3c:5f:b8:69:78:52:5d:88:53:2e:9b:38:93:8a:31:
13:d9:a6:2e:fb:36:28:36:56:57:c5:04:ef:49:a1:
66:cf:98:25:06:2a:53:77:73:01:8e:9d:d8:b4:18:
06:26:d6:ee:c7:ce:79:9c:3f:08:f6:12:f2:07:4f:
89:95:ea:6f:f8:34:aa:fc:65:04:79:3f:3d:11:e0:
bf:2e:d5:a0:52:53:ab:c9:03:e5:01:5b:7a:9e:4a:
51:19:f2:85:2b:5d:28:1a:6d:17:6f:04:ec:e1:ab:
fe:b7:8a:8e:75:c7:7c:c4:6d:54:e7:62:34:02:aa:
63:54:fa:0b:eb:25:dc:00:80:1e:be:27:41:a8:08:
f3:61:f9:2f:bc:d0:0a:27:22:f0:2d:fc:fe:a6:32:
6a:94:22:b5:98:8c:7f:0c:9e:74:35:14:01:4d:75:
46:6d:3e:21:b0:9d:fa:eb:b3:ef:95:12:df:8f:a9:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:D9:C7:21:B6:49:46:0A:E2:4D:44:5C:92:F9:6F:DF:DC:65:37
X509v3 Authority Key Identifier:
keyid:F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:f9:1e:0a:65:5e:37:4c:bb:8d:17:54:7b:19:d8:b8:fa:6a:
20:65:a6:4d:db:04:75:bf:95:ff:75:53:29:1a:2b:1c:2d:1d:
d2:98:7d:7b:6c:91:fc:8b:4f:b2:0d:21:15:f9:e9:02:b0:df:
f2:d9:df:23:b8:ab:32:eb:2a:a1:a3:51:5f:6d:53:18:34:75:
a5:c0:8e:aa:4e:72:a7:8d:98:57:0e:59:d8:56:48:52:ec:37:
ee:da:b3:c8:2a:f9:89:ab:a1:90:f2:66:33:76:da:8e:f2:de:
45:6b:55:98:af:d3:3b:e0:0e:68:0d:f8:3b:7f:75:2c:42:d1:
33:3d:3e:18:46:a4:4d:6b:c7:e9:e8:9d:7d:9c:e6:42:a1:99:
51:97:df:ba:12:84:16:59:a8:1b:de:3b:90:ff:8f:17:7f:d4:
eb:d0:aa:27:15:1a:c3:f4:04:a4:3c:fb:1d:09:5c:30:92:ab:
40:96:bd:23:5b:92:71:aa:0f:e6:35:ca:47:95:37:07:db:36:
3a:23:d4:e1:99:9d:14:82:64:84:34:d0:77:70:77:b3:55:70:
f8:01:19:8a:1e:b5:0d:9e:13:d9:3b:06:19:91:18:77:37:7f:
b1:e2:bd:1d:80:6d:a3:0f:d1:0d:46:ee:53:49:a5:be:c7:bb:
11:5d:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:39 2026 by rpki-client