
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa
File: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (raw, json)
Hash identifier: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=
Subject key identifier: 91:1B:C2:31:CA:74:EA:9C:76:AB:FA:D6:CA:73:92:BC:A7:4A:14:76
Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2
Certificate serial: 7B40FC48B3AA981E275A9794B6BD633E1D28F5A8
Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa
Signing time: Sun 03 May 2026 02:37:30 +0000
ROA not before: Sun 03 May 2026 02:32:30 +0000
ROA not after: Sun 02 May 2027 02:37:30 +0000
asID: 149661
IP address blocks: 103.184.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl
rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:40:fc:48:b3:aa:98:1e:27:5a:97:94:b6:bd:63:3e:1d:28:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2
Validity
Not Before: May 3 02:32:30 2026 GMT
Not After : May 2 02:37:30 2027 GMT
Subject: CN=911BC231CA74EA9C76ABFAD6CA7392BCA74A1476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:43:b0:0f:2d:1a:f4:1c:e2:1e:e2:0b:5c:
55:23:38:97:01:25:31:08:85:8c:55:91:fe:6b:eb:
26:90:95:c3:56:16:2a:c2:60:4c:cd:4a:ad:42:71:
48:9b:08:d2:4c:7c:7b:66:ee:ca:30:04:67:60:d5:
cb:3e:79:4e:89:3f:a3:54:28:22:87:8e:da:e8:d7:
fe:55:0e:a3:4b:f6:3e:19:54:4e:ad:c2:f6:32:be:
6f:5b:ff:2a:d0:93:85:5b:7d:07:6f:33:85:50:f8:
3a:11:6a:3c:45:c8:fa:6c:c6:1e:fe:fb:e5:16:db:
98:a9:74:9d:f0:60:ad:fa:84:39:b0:9b:1b:f7:a7:
ff:2a:0d:44:da:95:cc:b1:c8:7e:88:ee:ca:f4:3f:
10:08:ef:43:0f:29:1b:3d:9a:6e:a5:3b:bc:76:c0:
88:cd:3d:f4:8c:a4:86:6b:f7:2d:2a:cc:61:b1:93:
5c:88:ac:fc:1e:dc:f1:b9:ef:a5:c4:a0:7b:f4:12:
27:a6:1b:e0:be:4f:fc:43:fd:28:f1:5b:43:ec:23:
e1:ba:4c:2f:e6:a2:3e:0c:6b:57:f9:ed:2f:8d:37:
95:26:0c:c3:f5:20:d8:2c:47:a6:09:2c:fd:58:32:
c9:b2:24:aa:b9:71:6c:d6:a4:9b:b3:cc:d5:c9:80:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1B:C2:31:CA:74:EA:9C:76:AB:FA:D6:CA:73:92:BC:A7:4A:14:76
X509v3 Authority Key Identifier:
keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.167.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ab:2f:c5:fe:38:75:c2:83:f3:94:a8:ad:57:88:de:e4:a3:
7c:f2:47:5b:9a:23:71:00:9d:10:1a:46:cd:52:76:6f:24:c4:
59:e4:b9:93:35:eb:f6:dd:93:07:0c:27:47:fe:42:aa:d5:4b:
a9:9c:67:f4:26:47:71:a7:52:af:27:2e:95:fc:79:25:cd:3e:
e9:e8:fb:d5:0a:de:34:92:7d:4b:6e:56:65:ce:fc:ab:8c:e5:
57:ce:89:c3:e6:82:bb:76:88:1e:34:88:4d:f3:8b:f9:c0:62:
43:71:c4:d6:17:86:ba:e3:1f:81:b7:0f:00:04:f9:ef:f1:3d:
81:78:6e:26:8a:32:7d:48:61:6d:17:c4:1c:e5:58:5e:80:bb:
42:07:9b:d0:c1:2e:66:eb:72:cf:02:05:70:cd:98:b6:1c:19:
aa:56:ec:b9:4c:79:61:46:b9:c6:fc:67:02:4c:92:f1:a9:79:
7a:4c:68:db:2d:16:c7:60:9f:f1:95:fe:41:96:1c:80:ac:36:
bf:3e:dc:ea:fa:7d:2b:b2:1d:04:5c:71:08:7c:ed:42:1d:7c:
8c:a3:ec:e8:db:f8:3a:8f:16:bc:7e:df:b8:79:d4:52:a9:ce:
79:c1:32:d4:a8:3c:f8:cd:10:75:c1:67:73:f7:33:e7:aa:f4:
66:ff:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:29:44 2026 by rpki-client