
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3130332e332e34372e302f32342d3234203d3e203536323338.roa
File: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (raw, json)
Hash identifier: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=
Subject key identifier: 36:8E:3F:53:70:AF:58:65:E6:C3:E4:1B:DE:EB:EC:6B:99:CD:DE:74
Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5
Certificate serial: 29830E300CA14661A6897DE5B03C373EC718959A
Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3130332e332e34372e302f32342d3234203d3e203536323338.roa
Signing time: Sun 03 May 2026 02:39:57 +0000
ROA not before: Sun 03 May 2026 02:34:57 +0000
ROA not after: Sun 02 May 2027 02:39:57 +0000
asID: 56238
IP address blocks: 103.3.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl
rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:0e:30:0c:a1:46:61:a6:89:7d:e5:b0:3c:37:3e:c7:18:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5
Validity
Not Before: May 3 02:34:57 2026 GMT
Not After : May 2 02:39:57 2027 GMT
Subject: CN=368E3F5370AF5865E6C3E41BDEEBEC6B99CDDE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:a1:9c:01:67:0e:92:bc:9d:95:4f:2f:7a:
e1:1d:7e:38:4f:e2:fc:eb:54:b7:e0:33:ca:ef:74:
df:07:b9:bc:df:d2:04:55:f6:28:b9:59:4b:68:e4:
47:5c:f1:6c:5b:59:d2:b4:cd:0e:4f:2c:27:81:ae:
43:17:86:89:47:6a:9a:c3:05:6d:59:cf:0c:60:b1:
f3:6b:00:37:3f:fe:d9:6f:29:d5:cf:97:90:0f:2b:
a6:e6:ef:07:87:dc:4b:21:19:00:02:51:fa:08:45:
1b:13:60:98:3b:43:56:5b:5f:5e:5f:48:5a:b3:e1:
57:af:36:c5:c7:aa:d1:91:07:78:64:4d:0e:8d:e6:
a8:9e:4b:98:f8:3b:de:aa:c6:39:c2:4e:1c:4c:d8:
08:f4:ef:db:3c:5b:9b:8e:09:a9:ab:79:1d:42:68:
b5:7b:0c:2e:95:e5:33:65:9f:63:9d:92:00:66:29:
d0:f0:c7:94:72:d4:97:52:4f:0f:d1:bd:4f:b0:e5:
4b:80:a4:e2:ca:b0:12:ac:aa:25:49:84:18:af:c4:
d6:d3:2a:04:47:fb:2d:9a:3c:88:b8:39:28:77:bf:
73:d0:56:1f:5f:e2:87:9c:fe:62:fb:f6:df:89:65:
66:2e:38:b1:5c:1d:21:34:75:50:03:8f:74:00:3d:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:3F:53:70:AF:58:65:E6:C3:E4:1B:DE:EB:EC:6B:99:CD:DE:74
X509v3 Authority Key Identifier:
keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3130332e332e34372e302f32342d3234203d3e203536323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.47.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b5:22:a2:9c:7c:ce:7f:94:de:d9:d3:66:cb:15:4f:17:63:
c8:fc:0a:9c:42:70:64:f4:8b:5e:fe:25:74:68:b3:cb:4c:e4:
4c:24:12:02:d0:8c:22:93:d3:7b:85:fe:56:e0:81:58:fd:b9:
91:39:c5:bf:16:c5:c7:ee:7d:d6:2e:0d:ec:a8:e3:bc:48:83:
76:6c:1a:26:df:7a:7f:5e:30:f6:76:19:5e:f2:21:61:dd:ec:
f6:65:54:21:d7:66:89:a2:4e:fa:f3:8c:59:df:2f:67:89:9e:
c0:8b:94:4e:20:c8:5f:06:24:cc:bd:18:1b:5d:be:95:e7:35:
64:55:d1:f6:86:21:38:f5:01:e5:d2:8b:3d:12:b7:6c:27:32:
35:94:1c:40:17:5a:61:24:50:c7:61:83:d2:af:ca:b5:75:4a:
e9:6b:e4:0f:e8:5b:f8:0b:23:dd:e6:3b:69:2b:99:c4:40:91:
5f:18:a5:bf:32:28:fd:30:18:30:08:ac:ea:3a:48:81:04:c7:
73:89:2f:07:bf:6e:9b:af:c2:62:31:3b:cb:46:eb:dc:92:52:
ec:ce:45:76:99:e6:30:56:11:4b:6d:8a:5d:c2:b4:52:da:ca:
c2:5b:65:cb:72:c0:9d:b4:51:c0:54:2a:c0:f2:2a:73:1a:32:
2c:72:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:45 2026 by rpki-client