
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
File: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (raw, json)
Hash identifier: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=
Subject key identifier: FB:45:C7:1B:6D:B6:F7:89:E0:DE:2A:2C:53:C8:F7:E7:B0:F5:70:9F
Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
Certificate serial: 36084E7A30C57758B9686D504617C484DCA70440
Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
Signing time: Sun 03 May 2026 02:43:52 +0000
ROA not before: Sun 03 May 2026 02:38:52 +0000
ROA not after: Sun 02 May 2027 02:43:52 +0000
asID: 56256
IP address blocks: 103.41.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl
rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:08:4e:7a:30:c5:77:58:b9:68:6d:50:46:17:c4:84:dc:a7:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
Validity
Not Before: May 3 02:38:52 2026 GMT
Not After : May 2 02:43:52 2027 GMT
Subject: CN=FB45C71B6DB6F789E0DE2A2C53C8F7E7B0F5709F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:1f:63:a4:e1:28:f0:e2:28:8b:b3:06:15:
e7:fb:5f:1f:d6:e0:41:53:4e:c0:00:a3:94:2e:e8:
ad:76:34:26:a5:91:9e:ce:49:b4:e0:01:bf:60:4d:
6e:96:a0:e8:0c:5b:3b:f6:39:53:56:ec:8e:ea:6c:
da:0a:23:e9:4d:d2:f2:87:87:30:b9:d4:50:78:a0:
88:7c:5e:36:db:21:12:4c:7d:2d:1c:a8:fb:74:23:
be:a2:3b:28:74:15:39:69:ad:da:11:4c:e6:f4:40:
75:10:c6:54:34:34:80:1e:d2:73:af:fa:1e:d2:89:
60:0e:14:6e:60:7c:6f:24:b8:a9:47:30:21:db:f9:
31:8e:ea:68:9d:a2:d0:87:41:f9:3b:61:54:33:66:
05:68:6d:8a:b5:9a:91:8b:4a:60:40:1e:cc:20:09:
3c:91:6d:54:97:56:0a:6e:d0:c7:f4:50:c4:3c:d3:
31:9e:64:10:e7:82:be:ce:2d:0d:7d:6f:19:00:dd:
e1:48:e0:16:b1:3b:56:22:21:ac:61:0d:6e:83:a6:
25:c5:55:60:4c:f5:24:46:62:fc:44:d1:59:e5:99:
36:c5:3b:fc:f2:20:f1:bd:0f:06:16:09:50:1d:4c:
bb:bd:99:ce:fa:33:3c:df:aa:44:3a:9b:5c:e8:89:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:C7:1B:6D:B6:F7:89:E0:DE:2A:2C:53:C8:F7:E7:B0:F5:70:9F
X509v3 Authority Key Identifier:
keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.109.0/24
Signature Algorithm: sha256WithRSAEncryption
85:76:24:91:e7:4f:9a:ff:44:a7:f5:d8:17:68:3f:ac:ae:54:
33:b4:06:48:51:79:d2:12:7e:fc:f7:a9:86:a4:4c:94:2d:52:
8e:9c:6a:89:f7:60:40:e4:b2:f5:d7:d4:44:4a:90:c3:50:2e:
5c:09:37:51:a4:18:36:07:f2:62:4a:82:d5:54:81:5c:3c:ff:
42:bc:93:db:a9:5b:f3:3f:e9:fc:d1:f4:57:68:58:8e:60:c6:
6c:19:05:9f:9f:e4:54:2b:c8:d8:c6:bd:1f:8e:20:c7:23:5a:
5d:6c:d4:d8:7f:da:67:e3:bb:17:b9:a7:7a:94:4e:65:f0:cf:
46:4f:af:d2:65:ee:c2:dc:b8:2a:cf:cf:73:88:eb:ba:0c:f4:
ed:e8:6d:2f:05:8b:9e:9d:d5:10:1b:b6:87:75:61:3d:f3:ac:
ae:8e:c9:cf:5f:bd:42:43:52:d6:e9:a8:52:53:ab:40:81:ee:
c2:9b:a8:93:79:db:52:b6:40:32:88:12:c0:cc:9f:f9:38:dc:
f8:a3:f3:93:61:45:f2:d8:5a:fc:2d:3c:a2:ea:00:3d:3b:00:
5a:22:71:06:c4:ea:34:9b:31:db:21:b1:32:a2:16:9b:7e:33:
27:c3:cb:26:70:4f:21:48:9d:67:b2:61:b4:9c:47:8a:3c:e4:
32:53:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:17 2026 by rpki-client