
$ rpki-client -vvf rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa
File: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (raw, json)
Hash identifier: mWMxWItQIy6KIu1MttVIKoQEGs+uqMB7va6yxk2ZK/w=
Subject key identifier: C7:E9:99:CB:08:F6:86:4B:48:03:C5:81:5B:4F:CC:23:5A:C3:AF:AB
Certificate issuer: /CN=9AFC93CAEEA98CBFC0481089E308395A3234F158
Certificate serial: 78887D5564A67C6BDE8055FE13273EF276FFE43D
Authority key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa
Signing time: Sun 03 May 2026 02:42:58 +0000
ROA not before: Sun 03 May 2026 02:37:58 +0000
ROA not after: Sun 02 May 2027 02:42:58 +0000
asID: 132643
IP address blocks: 103.21.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl
rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:88:7d:55:64:a6:7c:6b:de:80:55:fe:13:27:3e:f2:76:ff:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158
Validity
Not Before: May 3 02:37:58 2026 GMT
Not After : May 2 02:42:58 2027 GMT
Subject: CN=C7E999CB08F6864B4803C5815B4FCC235AC3AFAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:03:5f:64:60:a4:23:c1:ab:5a:00:5c:03:
37:2d:d9:2c:47:bb:5f:31:1a:69:0f:18:6c:f0:a4:
e7:5f:03:67:ac:ec:29:a0:aa:41:0b:2f:7b:44:7f:
b5:4e:25:68:5c:70:90:7f:00:e3:55:92:d8:f1:dd:
b6:80:2e:0b:0c:1c:58:d0:2e:e9:ab:91:73:ea:2a:
e6:58:36:c9:76:48:e2:87:79:2b:3a:d4:e4:1d:26:
fd:51:ea:42:6a:82:ac:cc:2e:ab:0a:8a:af:ea:f5:
ac:b5:59:32:1e:c2:f7:65:c8:d5:f6:b4:15:23:90:
bc:41:92:32:51:0d:f2:b3:e7:02:90:cd:69:e3:4f:
56:5e:34:15:c2:64:90:c0:7e:6a:d4:6c:e5:81:f0:
8a:bf:16:0e:de:a0:c1:72:f0:4b:9e:6f:86:f2:06:
a1:4a:13:77:6d:5a:07:5b:b6:a9:c7:8b:2d:2e:78:
64:0c:a8:24:fe:11:e5:00:ac:36:d4:9e:09:6a:d9:
00:b9:6c:6e:2e:70:83:c6:61:4e:1c:93:52:75:b5:
33:65:12:26:7d:40:4e:c9:9a:f4:93:7c:89:31:a1:
0d:31:ab:ff:4b:84:bc:ab:dd:d0:cc:a6:0e:5c:11:
29:8a:b3:02:8a:46:7d:82:96:7e:a9:18:52:c0:f7:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:99:CB:08:F6:86:4B:48:03:C5:81:5B:4F:CC:23:5A:C3:AF:AB
X509v3 Authority Key Identifier:
keyid:9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.228.0/24
Signature Algorithm: sha256WithRSAEncryption
73:05:cd:eb:88:93:a9:96:78:ac:bb:4a:4a:9e:df:18:14:20:
a1:47:e3:3a:f0:8b:bc:6d:1f:a1:a2:e4:b4:8c:51:b4:28:3d:
05:78:79:ce:72:ee:89:23:74:51:66:36:ef:d6:a7:7a:76:5f:
3b:09:b0:fd:0d:c3:af:5e:aa:c0:f3:81:8a:33:b5:6f:01:75:
4a:53:24:85:f7:99:92:8a:59:49:da:57:97:d5:38:76:50:3f:
fc:f6:f6:4e:19:2e:71:a7:58:ab:05:1e:97:db:4c:28:f4:ff:
28:4b:a3:68:5d:13:25:b0:76:67:28:45:99:94:98:8c:c5:33:
56:a0:b3:26:a7:7e:59:da:81:57:86:91:e5:94:3d:38:35:74:
ca:73:56:8a:7e:b9:d4:a3:4d:8d:a3:af:a8:e9:9a:2d:d2:94:
1c:17:7e:72:dd:7f:77:34:96:2e:75:f4:1d:58:c3:26:43:27:
9e:ca:c4:53:97:44:47:6d:a5:9f:92:20:f5:8d:b5:0c:ad:19:
7f:60:e9:44:d4:a6:ec:87:3e:22:6c:76:aa:b4:f2:7a:d9:11:
23:c7:80:11:9f:db:33:16:c1:96:d6:55:d7:f1:3f:5f:a0:3d:
9b:82:40:6d:b9:d8:6c:00:ca:ec:ee:24:41:24:de:08:8e:4d:
ae:13:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:42 2026 by rpki-client