
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
File: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (raw, json)
Hash identifier: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=
Subject key identifier: E9:ED:1D:6C:BE:AD:DC:20:1E:C4:91:A8:B1:FB:DB:FC:DF:E9:BC:FE
Certificate issuer: /CN=BE64AB23612B159BE54939807CB20423D340D326
Certificate serial: 57BF30926D29B45A0E1AC6F82E9F7E1BA125E477
Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
Signing time: Sun 03 May 2026 02:43:53 +0000
ROA not before: Sun 03 May 2026 02:38:53 +0000
ROA not after: Sun 02 May 2027 02:43:53 +0000
asID: 152058
IP address blocks: 103.46.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bf:30:92:6d:29:b4:5a:0e:1a:c6:f8:2e:9f:7e:1b:a1:25:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326
Validity
Not Before: May 3 02:38:53 2026 GMT
Not After : May 2 02:43:53 2027 GMT
Subject: CN=E9ED1D6CBEADDC201EC491A8B1FBDBFCDFE9BCFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:7a:c0:22:08:b0:fc:7a:d1:af:cd:9e:7f:
77:fe:55:41:7a:28:5e:fe:77:45:75:df:33:02:53:
2f:af:70:55:b8:d4:24:3f:b9:b3:6b:f7:09:a4:17:
d2:3d:af:da:4c:9b:0f:73:2c:b7:75:66:89:57:f9:
9d:07:be:1b:3d:50:0b:8b:f2:d6:87:09:cc:0c:52:
da:96:ed:71:2a:c0:42:12:0e:22:00:b4:d0:46:7b:
6b:1d:a9:42:aa:7a:18:cb:ef:89:e7:1c:09:a7:5b:
34:81:f9:19:49:51:8f:01:b0:6e:b6:0d:b4:2a:d8:
e5:21:f3:0f:51:da:bd:2d:48:42:e9:5e:fe:58:9c:
d8:fb:fc:34:76:78:f9:cf:a9:20:d0:78:b9:0f:26:
dc:74:64:29:a6:74:9d:41:d5:c3:1f:12:7c:d2:71:
b5:e3:d5:43:d0:a2:41:5e:13:7a:02:89:48:09:c5:
06:cb:8d:98:6d:dd:7b:ee:5b:33:df:46:f8:29:4b:
83:c3:32:30:75:75:b8:4a:c9:5b:c3:18:b1:7d:85:
2b:a5:d3:8b:82:c1:4b:41:d1:68:1e:5b:31:2a:9a:
4b:0e:79:83:6f:15:fa:c4:ea:f0:6f:86:19:7a:1a:
e4:47:bc:c6:e0:0a:bb:c0:d4:fa:aa:50:a0:07:59:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:ED:1D:6C:BE:AD:DC:20:1E:C4:91:A8:B1:FB:DB:FC:DF:E9:BC:FE
X509v3 Authority Key Identifier:
keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.46.8.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c7:6f:0c:c3:57:61:aa:15:15:af:87:4f:8b:c2:fe:c8:68:
e2:6e:51:9e:7e:56:9f:cb:86:96:cd:80:b0:51:a0:69:86:79:
fe:d8:53:37:2d:90:09:9c:4c:fd:8c:e3:28:18:bc:e3:52:2f:
0e:8f:c5:72:28:db:4a:bb:ef:58:42:30:b3:e4:f6:a7:cf:f5:
42:99:0c:46:60:5f:6a:26:6a:9e:87:4c:8b:0b:06:32:27:a7:
1d:a8:d7:2a:48:6d:86:e9:e6:74:36:3c:7f:cd:cd:01:94:be:
ed:4a:3f:de:86:3e:07:08:d3:ae:5f:18:99:be:d9:1a:64:1d:
ff:9f:21:dd:44:c1:ad:77:f3:aa:95:fb:22:aa:ca:ef:ae:d8:
73:ca:50:27:af:20:26:84:72:11:1f:63:fa:6b:3f:75:7f:53:
cc:38:47:ee:ac:8d:f7:35:cc:68:a4:1c:5b:76:be:a4:0e:e8:
61:d4:fb:ad:7c:13:b5:8d:c0:c7:be:e7:39:ae:2a:13:0e:9a:
62:88:81:2d:80:2b:06:53:ac:26:c5:a0:bc:d0:83:5c:7b:fc:
5a:9f:c8:ec:e4:08:13:27:1b:51:9b:fb:4a:f6:f3:09:a6:9d:
a3:14:42:5a:2e:fc:db:98:84:d8:c9:06:91:74:77:17:01:af:
c9:39:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:46 2026 by rpki-client