
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa
File: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (raw, json)
Hash identifier: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=
Subject key identifier: 71:2A:B2:DE:DC:EB:5E:11:D2:FF:6B:C4:A1:E9:58:EA:C2:B6:6B:AA
Certificate issuer: /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Certificate serial: 42BEA0C270D7D551FC410F06BFDD20AB8B9097D3
Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa
Signing time: Sun 03 May 2026 02:43:49 +0000
ROA not before: Sun 03 May 2026 02:38:49 +0000
ROA not after: Sun 02 May 2027 02:43:49 +0000
asID: 58383
IP address blocks: 103.246.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:be:a0:c2:70:d7:d5:51:fc:41:0f:06:bf:dd:20:ab:8b:90:97:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Validity
Not Before: May 3 02:38:49 2026 GMT
Not After : May 2 02:43:49 2027 GMT
Subject: CN=712AB2DEDCEB5E11D2FF6BC4A1E958EAC2B66BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:35:64:3d:b6:85:1c:7c:31:05:37:8d:35:
30:cb:ec:06:52:d1:4c:29:62:93:81:6e:e1:d8:c9:
2a:37:f1:d2:8b:34:80:71:3d:f5:7b:97:54:20:5b:
28:6f:3c:7a:e8:24:cb:70:67:83:76:ad:12:f1:d0:
48:77:90:1b:e7:b7:d2:3e:78:66:a8:c1:2a:57:d1:
51:83:0f:2f:c0:a4:07:b8:2b:a9:c3:84:2f:9b:e3:
fe:e4:b9:5a:bd:95:5b:96:fa:80:11:a3:e3:5d:62:
4b:b9:84:9c:b5:63:da:62:cf:49:3e:1f:3b:3b:6c:
78:09:11:fc:7f:35:fa:ee:e2:30:09:ab:5a:8a:e3:
8c:dc:dc:37:59:a5:bb:31:11:7a:be:9a:ac:a9:a0:
db:f3:37:27:fe:dd:4f:8a:70:e9:fc:90:70:e7:b7:
7f:30:5e:b3:46:5d:80:2d:2c:f8:b0:9c:92:7d:d9:
c1:6e:c9:31:b9:81:1f:79:4f:5f:7c:a7:68:e7:03:
c8:37:6d:a5:24:47:4a:ae:2f:67:ad:d1:2d:06:da:
ba:01:2b:d5:78:f3:cf:41:a6:7d:df:5a:9b:38:2c:
1e:f1:e2:b0:30:cd:19:61:62:40:32:c4:7c:f1:c5:
0d:05:9b:15:c6:54:4e:fa:db:29:ed:f4:d4:fd:20:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:B2:DE:DC:EB:5E:11:D2:FF:6B:C4:A1:E9:58:EA:C2:B6:6B:AA
X509v3 Authority Key Identifier:
keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.184.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5a:33:bf:66:19:99:a2:ec:be:0a:a9:b1:d5:23:22:d2:89:
4e:9c:6a:30:32:99:fa:2c:40:87:fb:61:c9:b5:cf:bb:5f:71:
9c:e0:0e:e3:3d:39:80:b1:ce:34:c7:57:e3:46:f7:d6:79:59:
e9:44:98:40:8d:c7:62:5b:f1:e4:29:d7:89:46:eb:39:49:f3:
35:32:69:90:dd:a3:59:ed:c9:44:c6:c7:c4:9f:a3:e1:fd:4d:
b4:29:dc:4c:0d:e3:5c:64:84:79:cb:0d:3d:52:32:29:9c:80:
20:a8:91:6b:4e:16:2e:80:98:a0:c9:f4:14:3e:c3:b1:61:56:
93:19:f8:15:d5:ea:3e:76:6a:57:ab:d9:8a:b7:93:14:03:30:
6d:38:90:e2:d7:29:17:28:3e:ea:7e:85:7d:bc:80:64:c0:c2:
a4:e6:8e:db:99:78:46:87:5d:2c:3e:90:fb:81:72:bf:89:5a:
b8:60:0d:1c:fa:a6:36:54:3b:a4:00:27:81:c5:09:a3:bb:78:
2b:68:26:a8:ce:61:28:4d:02:99:a3:7e:82:a2:14:01:96:a0:
2a:f0:54:c1:6d:ee:20:90:cb:12:0f:db:15:21:28:55:0b:70:
4d:8a:22:b0:04:66:8f:6b:a0:3a:ed:9a:87:be:93:f9:ca:0e:
d4:75:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:51 2026 by rpki-client