
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
File: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=
Subject key identifier: E0:37:6B:48:2A:C5:EE:0A:7B:86:A3:84:B2:AC:24:DA:D6:60:01:44
Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C
Certificate serial: 576ED4B1D1CE51786084CB00F0800ECF75A507A7
Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
Signing time: Sun 03 May 2026 02:39:22 +0000
ROA not before: Sun 03 May 2026 02:34:22 +0000
ROA not after: Sun 02 May 2027 02:39:22 +0000
asID: 138115
IP address blocks: 103.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl
rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6e:d4:b1:d1:ce:51:78:60:84:cb:00:f0:80:0e:cf:75:a5:07:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C
Validity
Not Before: May 3 02:34:22 2026 GMT
Not After : May 2 02:39:22 2027 GMT
Subject: CN=E0376B482AC5EE0A7B86A384B2AC24DAD6600144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:fd:33:61:36:4b:3e:d5:f5:03:0d:29:15:
e3:9d:2b:44:dc:35:63:93:43:e3:6b:f3:fd:dc:54:
b6:c2:af:33:4b:06:c1:e9:37:27:55:55:65:e1:c9:
a7:3e:b5:ba:08:ac:87:86:cf:68:02:e1:13:fa:3c:
7e:b7:d3:e4:6f:22:d1:f8:a3:77:51:d9:4e:25:24:
71:98:61:86:9f:fc:61:e6:88:21:ca:a2:0d:8a:61:
56:50:a6:41:b7:ee:09:7c:f4:fb:ea:34:4f:1e:ff:
70:e9:3d:3b:a8:ad:cd:d9:97:2f:6f:3c:c9:d1:2d:
5a:62:1e:76:cd:15:ac:e4:aa:30:6c:e8:66:3c:7a:
1d:ee:63:3b:ef:66:bc:3c:7e:82:69:d5:2d:2b:ef:
1a:ef:4b:e4:8b:9d:20:7c:11:5e:db:d0:f6:fc:57:
4f:ef:bf:b3:08:1d:51:91:25:22:2c:b6:a4:62:28:
70:e0:19:15:ad:09:e9:f7:89:7e:98:40:07:c8:11:
47:53:2d:43:f2:09:11:33:3e:98:33:3d:34:ff:98:
c1:6d:70:bf:f4:5d:4d:72:e0:39:be:b9:77:c5:67:
8c:3d:7e:83:7c:5d:ea:dc:83:90:40:f9:43:09:64:
32:1c:ba:56:ee:2f:4f:af:78:2f:be:80:80:f8:fc:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:37:6B:48:2A:C5:EE:0A:7B:86:A3:84:B2:AC:24:DA:D6:60:01:44
X509v3 Authority Key Identifier:
keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
39:82:a2:cf:60:2a:9b:1d:5e:7e:77:77:09:b0:53:d5:0e:cb:
a5:39:03:3b:e5:a1:c9:3f:59:d6:e2:2c:4a:09:6c:37:83:42:
ee:3d:7e:b9:dc:7b:2a:77:75:64:e8:9f:6d:29:72:87:e4:76:
e7:a0:dd:47:b1:bd:c1:5f:84:a8:a4:78:56:80:d9:5a:a2:01:
e0:28:70:32:88:8b:37:60:1a:b2:05:40:8d:ba:a1:aa:5d:c1:
4a:aa:35:d1:1d:64:44:8e:7a:ea:53:64:72:90:3c:8c:60:86:
f1:59:cb:a9:c8:79:83:c9:58:37:a5:cb:55:af:a1:b8:5f:45:
16:b4:60:59:c6:4b:d2:36:90:0d:be:f4:7e:94:7c:89:38:32:
20:75:b3:0b:78:85:4c:3c:1c:31:60:4f:c4:3a:75:a1:e2:88:
07:b6:4c:e3:16:f9:4c:0e:09:da:4f:c3:88:33:6b:0f:ea:db:
f5:de:3a:ae:67:e2:39:d3:66:87:c6:75:3e:04:db:e1:d8:24:
e0:83:d3:9c:55:d1:b5:0e:b0:6e:07:c2:d5:55:9f:08:25:22:
c1:95:ff:66:9a:f5:b8:70:03:29:5b:ec:7a:ff:1a:10:4d:4c:
6c:1e:31:b7:90:fb:49:4c:04:9a:ff:b3:72:d9:21:51:d3:d8:
1a:a4:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:20 2026 by rpki-client