
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
File: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (raw, json)
Hash identifier: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=
Subject key identifier: 3C:D0:96:2E:33:2A:25:AB:E1:98:FB:04:58:A2:EB:CD:31:93:44:F9
Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Certificate serial: 694E761D97804AA492C26FF5A7B9213E02D1808B
Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
Signing time: Sun 03 May 2026 02:37:44 +0000
ROA not before: Sun 03 May 2026 02:32:44 +0000
ROA not after: Sun 02 May 2027 02:37:44 +0000
asID: 149943
IP address blocks: 103.191.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4e:76:1d:97:80:4a:a4:92:c2:6f:f5:a7:b9:21:3e:02:d1:80:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Validity
Not Before: May 3 02:32:44 2026 GMT
Not After : May 2 02:37:44 2027 GMT
Subject: CN=3CD0962E332A25ABE198FB0458A2EBCD319344F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:02:9d:29:6e:9b:61:b8:e2:f0:f6:e5:38:
ea:7a:b5:cb:3f:87:0f:52:24:97:e8:3c:33:ee:5c:
59:84:3f:23:56:12:02:1f:58:c2:d6:d2:23:cb:da:
a3:e0:d4:24:8f:26:2f:cc:75:0f:92:60:0e:f3:ca:
bd:a1:52:da:34:02:da:5d:6a:ed:dc:55:9a:29:aa:
94:fc:69:9b:f6:17:73:52:02:bc:45:68:fd:0a:03:
d7:df:55:b4:27:89:a5:be:a9:16:d6:ee:6d:02:43:
51:01:00:cc:f5:c1:a2:53:11:14:2d:90:1b:f8:69:
b2:2f:33:17:ec:80:14:01:65:fc:c0:57:7e:54:e7:
a7:41:51:d7:25:13:6d:8d:c1:96:dc:5b:f9:0a:4a:
3a:e9:85:50:4d:91:e7:58:02:ee:03:7d:2a:5a:f8:
ef:4d:40:88:7d:7b:22:4a:56:f7:c1:d9:4c:cf:8c:
df:d3:2b:9c:31:e1:18:5f:d7:13:8b:68:7f:fa:cd:
45:a8:72:f9:73:e4:3d:ab:d0:8a:d3:f7:75:b4:61:
96:dc:c5:77:a8:bb:79:0d:f3:31:d0:aa:4d:c7:14:
fa:d2:ac:45:50:5a:a7:13:d8:1b:cb:59:04:96:5c:
31:9f:f5:22:92:21:43:c1:41:56:79:5f:5c:ae:8e:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D0:96:2E:33:2A:25:AB:E1:98:FB:04:58:A2:EB:CD:31:93:44:F9
X509v3 Authority Key Identifier:
keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.254.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a8:a8:75:99:1f:d3:8e:64:ae:5d:09:8f:ca:83:aa:53:ec:
88:e1:62:cb:6c:3c:b4:77:53:1d:06:2c:cc:44:52:ca:3b:0b:
a7:39:28:2d:92:d0:48:73:a2:b3:23:02:8d:ba:19:00:e2:7b:
6a:3b:c2:28:8e:6c:0f:ac:08:c0:c4:f1:d9:b4:d1:19:99:95:
0b:30:60:4a:e5:29:48:c5:25:11:85:23:82:57:47:33:e3:27:
79:d9:35:cc:1e:11:5c:64:f2:85:f6:3b:0c:4e:fc:72:82:e0:
d3:77:7e:80:9b:93:44:b8:58:3d:f3:53:4b:4a:5d:f9:47:33:
08:54:9b:a2:d0:c7:05:a0:b9:6a:5c:40:fd:a0:36:6d:11:50:
92:fb:77:89:10:c3:17:d6:17:f1:fa:79:62:89:c7:db:d9:a8:
62:17:47:6f:ae:eb:a9:67:71:9b:49:b2:ad:19:8c:af:c3:0b:
1b:36:31:2c:09:80:32:a3:3b:15:6b:46:58:bc:1a:b4:7a:9f:
6a:4a:94:a0:68:a3:b8:5c:2a:c4:12:fe:5b:75:5c:81:22:e0:
45:17:d5:ea:cb:8d:b5:44:92:cc:40:64:96:a3:93:38:fb:d2:
80:f3:ff:21:33:d3:a1:e6:53:bb:c2:5c:e8:d0:0c:e2:fd:aa:
b5:af:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:09 2026 by rpki-client