
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa
File: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (raw, json)
Hash identifier: pS17p4MkvrBveGdgex+XwX4S4Wesu7Vq17SWjXP0+w8=
Subject key identifier: BB:97:4D:7B:12:2F:4F:B9:09:5B:81:45:BD:A9:5B:A8:CA:F8:9B:90
Certificate issuer: /CN=4E4DE13CED941803F067EA0F530875538E7F1AA8
Certificate serial: 4D04D819AB093E7573B7113A757D40512AF47EBC
Authority key identifier: 4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa
Signing time: Sun 03 May 2026 02:41:27 +0000
ROA not before: Sun 03 May 2026 02:36:27 +0000
ROA not after: Sun 02 May 2027 02:41:27 +0000
asID: 138811
IP address blocks: 103.137.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl
rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:04:d8:19:ab:09:3e:75:73:b7:11:3a:75:7d:40:51:2a:f4:7e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4DE13CED941803F067EA0F530875538E7F1AA8
Validity
Not Before: May 3 02:36:27 2026 GMT
Not After : May 2 02:41:27 2027 GMT
Subject: CN=BB974D7B122F4FB9095B8145BDA95BA8CAF89B90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:73:77:8b:5b:34:e7:6a:e0:14:6f:94:5e:
46:ca:9e:51:1c:53:c6:33:ca:93:d5:5d:4a:4d:65:
2e:e2:12:c9:f3:a9:1f:29:01:3e:85:b8:2f:fe:81:
f2:a6:f5:73:1f:47:a8:fb:36:1e:5c:47:14:7b:9d:
5d:96:4d:53:7c:05:d4:85:fe:14:30:36:f3:c5:1f:
27:f8:1a:4a:82:57:ff:b2:ce:65:8f:84:15:5b:f7:
c1:05:4b:86:e9:dd:66:f9:ef:78:81:4f:fc:cf:af:
ed:db:0a:e9:a1:0e:82:b6:7a:2f:30:08:0f:bf:a9:
25:39:e8:da:98:0f:ae:ad:ac:2e:89:a1:9a:80:4c:
b6:8b:35:db:70:4e:ef:9e:a8:ca:50:25:b4:46:d4:
ec:51:61:1f:33:6b:98:ae:71:3c:e0:9a:68:cf:75:
48:ca:27:30:05:87:29:c0:a8:52:e6:7e:c5:a1:6f:
16:da:4d:b8:1e:97:ea:67:95:da:65:46:78:51:fe:
ab:07:28:d6:22:00:c6:f6:9f:69:44:7c:96:d1:de:
9c:0e:b3:35:fe:cd:92:e3:8d:fb:f9:09:c5:fe:2c:
42:f7:f8:8e:81:73:2a:54:22:7a:f9:ad:bc:97:ca:
3e:93:27:28:3c:fe:fd:74:ca:f4:c4:60:45:89:85:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:4D:7B:12:2F:4F:B9:09:5B:81:45:BD:A9:5B:A8:CA:F8:9B:90
X509v3 Authority Key Identifier:
keyid:4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.32.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ad:4b:9d:69:b0:72:2f:ae:36:46:08:9a:54:e5:51:f2:16:
f7:1a:27:ad:d9:6b:d8:f6:9f:29:f1:c0:ee:0a:31:03:a0:be:
2d:6b:87:28:88:3e:30:b3:8f:0d:62:f0:66:19:50:c7:9f:ba:
19:93:ba:5c:ed:ee:40:88:5d:da:a9:d1:9a:3f:3e:ed:6c:cc:
46:c1:66:d5:ba:fb:15:09:ae:4d:bc:d0:5e:8e:72:b4:ae:49:
e9:2d:87:2a:b9:ea:41:95:bd:38:7c:c4:15:0c:d6:6b:24:3a:
16:05:bf:b4:16:fd:90:88:c9:39:fb:4f:99:27:4e:e7:4d:73:
85:48:3a:03:81:3f:a4:36:e9:cf:f8:ff:08:a1:f8:05:ef:dc:
f2:e2:07:21:b4:e6:6c:30:0b:d0:10:35:29:c9:42:3a:db:b6:
28:ee:9a:39:d7:d5:ba:10:28:30:e4:20:9c:3b:e7:65:84:92:
5d:ab:52:81:c8:c2:c4:77:35:b5:78:2c:c1:f1:98:56:2c:74:
dd:b5:37:6c:b6:40:b8:13:48:d1:0b:eb:8e:d5:af:11:c1:77:
61:e0:73:82:2a:21:2e:52:13:4b:d6:ca:ae:0d:64:6f:30:be:
5a:80:e0:ea:11:1d:4e:6f:bd:7f:6c:3d:2c:e0:27:ce:11:8f:
5f:ba:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:58 2026 by rpki-client