
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
File: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (raw, json)
Hash identifier: qWv000ASHZPLikMYj8Wss1d2EPIqC0119NVLho36do8=
Subject key identifier: 4E:A7:37:42:B9:B6:6C:55:EA:40:0F:B1:61:31:65:69:3E:FE:36:DC
Certificate issuer: /CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA
Certificate serial: 17FA222542BAC9321D0BC068D1DB84F071A48909
Authority key identifier: C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
Signing time: Sun 03 May 2026 02:43:33 +0000
ROA not before: Sun 03 May 2026 02:38:33 +0000
ROA not after: Sun 02 May 2027 02:43:33 +0000
asID: 141984
IP address blocks: 103.167.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl
rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fa:22:25:42:ba:c9:32:1d:0b:c0:68:d1:db:84:f0:71:a4:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA
Validity
Not Before: May 3 02:38:33 2026 GMT
Not After : May 2 02:43:33 2027 GMT
Subject: CN=4EA73742B9B66C55EA400FB1613165693EFE36DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:5e:65:74:0c:80:17:4b:f5:bc:1b:08:88:
2e:89:49:96:dd:36:92:f6:dd:a1:ed:36:df:28:2f:
21:5b:22:af:77:04:e2:c9:bd:2f:df:62:c9:bb:18:
49:43:4b:c5:b1:5b:36:13:b6:b4:ad:72:6a:e5:3f:
cb:f8:3c:af:f3:6e:4e:1a:4b:00:9e:d8:8e:e9:34:
42:e3:df:3a:20:f0:fd:6d:68:79:77:97:4a:32:a2:
50:cd:9f:ba:c1:66:79:af:09:0d:c2:8f:84:09:55:
26:63:72:06:4a:86:a5:aa:f0:51:d4:f2:bd:75:72:
a0:07:3e:b0:01:57:39:51:be:40:97:83:02:a0:e2:
00:7d:42:c5:39:e6:85:c0:44:51:6c:5c:88:fb:b1:
6b:75:8e:75:2d:c1:b5:24:a9:d5:21:86:c9:5f:78:
95:2a:c9:3a:51:36:8d:34:9c:2a:ee:80:10:1a:42:
b8:0c:b1:91:fe:e2:e8:87:20:93:32:88:0f:d9:96:
b2:93:c2:ee:6b:0a:b0:75:94:55:cc:f1:39:58:55:
d4:ee:6b:cb:77:3a:0e:e1:59:6f:4a:e4:22:cb:ef:
12:cd:33:54:f2:9b:22:07:be:f6:22:eb:68:6a:77:
8e:d9:75:12:f5:75:7e:f0:0a:0e:ac:2b:7d:6f:0e:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:37:42:B9:B6:6C:55:EA:40:0F:B1:61:31:65:69:3E:FE:36:DC
X509v3 Authority Key Identifier:
keyid:C9:BA:0F:8C:78:B3:A4:E5:D2:8E:CD:1C:51:7D:C9:84:38:50:87:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BA0F8C78B3A4E5D28ECD1C517DC984385087CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:79:2b:d0:a3:ab:91:51:25:5c:19:d6:57:b0:00:02:cb:c7:
42:6f:5b:6c:c4:82:1b:67:51:5b:a7:8f:45:2a:62:d1:63:61:
87:b5:4a:1d:ac:fe:49:42:01:cf:65:e7:70:06:bf:26:fa:03:
b8:f2:d1:75:5e:5e:6c:19:e4:55:f6:b4:96:eb:36:a4:49:fc:
a8:86:86:8f:59:72:1a:22:54:45:c7:8c:ce:47:d0:c9:62:f1:
f0:f4:35:9e:97:9d:0d:09:7e:8a:69:c1:63:73:75:60:01:44:
96:cd:b8:3c:25:6b:fc:73:8e:06:1b:c8:c8:52:82:9b:3e:99:
99:38:8f:dd:8a:43:57:2a:2f:f7:d1:87:ff:2e:b7:b5:18:69:
ba:f9:28:82:86:73:7f:ae:b9:b9:36:3e:89:26:65:89:ce:eb:
66:0b:76:99:11:45:e2:48:a7:c0:0c:5a:66:52:2e:e7:af:ed:
16:0b:cd:23:c4:02:44:69:7d:5a:9c:fa:d5:8d:ef:9f:5c:02:
e0:b0:de:4a:91:c4:ba:c9:43:76:72:1e:38:65:00:3a:85:7c:
06:4b:3a:8d:b0:e7:b9:19:fe:51:91:05:21:b4:cc:c7:d4:7b:
3a:ed:45:cc:a8:b2:f7:c8:16:6c:27:48:a6:ad:d7:34:ab:1a:
d2:75:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:38 2026 by rpki-client