
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa
File: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier: HIvBExvjcNL80TSt3Rk5JG3F8xg1VqZTRljgmRS5hK0=
Subject key identifier: 1D:C8:E4:B7:A2:23:25:E5:4E:91:B8:DF:94:CA:07:91:F0:CB:4F:8E
Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820
Certificate serial: 0B19E1A26B4C5BFF933B3B52B55B1387943B004F
Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa
Signing time: Sun 03 May 2026 02:40:06 +0000
ROA not before: Sun 03 May 2026 02:35:06 +0000
ROA not after: Sun 02 May 2027 02:40:06 +0000
asID: 142354
IP address blocks: 103.169.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:19:e1:a2:6b:4c:5b:ff:93:3b:3b:52:b5:5b:13:87:94:3b:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820
Validity
Not Before: May 3 02:35:06 2026 GMT
Not After : May 2 02:40:06 2027 GMT
Subject: CN=1DC8E4B7A22325E54E91B8DF94CA0791F0CB4F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:a8:aa:3f:51:a0:cc:57:c5:04:55:57:db:
7b:b7:06:7e:06:e7:b8:81:14:8d:b6:64:04:e4:0c:
f9:10:42:74:0f:79:7a:30:ba:a3:a0:6f:94:d6:53:
6f:6c:b8:bd:48:f3:56:d2:65:fd:20:23:d9:99:21:
eb:9d:ec:2f:f8:38:84:c9:58:13:3b:0e:fd:f3:5e:
ed:56:93:ec:72:6a:16:7c:f9:94:dd:67:36:81:ba:
32:51:c9:35:5a:26:45:92:7b:bc:6a:dc:b4:d2:fd:
44:b0:0a:20:f1:88:4f:d5:f2:b8:ce:f8:b6:42:41:
6e:7d:a3:3d:b2:2c:48:10:ab:7d:8e:af:16:65:08:
ae:ee:54:3a:15:92:4b:f1:bd:40:0c:39:0f:c1:02:
18:73:af:19:7f:80:12:fc:f8:4e:30:14:e8:01:ed:
b2:e0:54:fc:62:e8:18:4a:fb:44:a8:9c:7f:a4:0b:
60:9a:5b:23:93:79:64:88:93:e1:b6:11:7d:70:d7:
18:39:18:7c:c8:90:dd:61:6e:b8:6b:4d:3a:c6:9a:
1f:2e:13:2b:50:85:98:c7:ce:77:16:27:f5:71:7f:
ff:a4:62:ae:f6:56:e4:eb:96:9c:ea:1f:05:b2:19:
f5:e5:79:87:69:5d:60:33:05:ba:71:48:3a:ef:fd:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:E4:B7:A2:23:25:E5:4E:91:B8:DF:94:CA:07:91:F0:CB:4F:8E
X509v3 Authority Key Identifier:
keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3f:a9:96:d4:af:15:81:e5:50:92:a7:3e:f3:d7:fa:6a:ba:
b9:bb:3a:47:89:f0:9d:b1:b2:43:e7:bb:27:ce:44:a0:28:b4:
a0:1c:f8:4d:fe:f6:b5:80:27:b0:76:bc:f4:82:d8:8c:fa:d1:
67:35:8d:84:c9:51:0a:74:36:1f:45:26:54:03:76:f6:2f:7f:
d2:03:a8:56:4b:31:3f:5c:bf:a1:42:c1:e7:78:9c:e3:c2:9d:
86:37:c5:56:bc:dc:03:ea:69:1c:8c:35:b9:5d:5d:0e:ce:20:
1a:e7:26:4d:bd:ae:19:4a:b5:03:2f:d7:c2:e6:25:8a:5c:e1:
a9:f9:71:92:1c:3b:da:61:ef:27:6d:c2:53:45:4e:08:8c:ff:
a4:d5:ea:72:5d:74:a6:fd:c3:de:70:6b:b1:18:b6:65:3c:8b:
50:1e:03:93:d0:8c:38:9e:68:c8:a1:96:b3:c7:40:34:10:0c:
b0:2f:a4:91:e9:88:e7:82:b4:94:b2:07:1d:f8:41:f8:48:3c:
61:52:3a:83:c5:ab:2f:c4:e8:fa:f0:2f:21:35:9b:cf:66:39:
e2:dc:d9:7b:74:08:e0:cd:92:20:53:26:33:9b:b8:dd:f7:08:
45:76:48:cd:e1:5a:c9:57:32:c2:3a:ce:fa:12:ce:83:4e:39:
7b:af:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:17 2026 by rpki-client