
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa
File: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (raw, json)
Hash identifier: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=
Subject key identifier: 00:20:09:36:1A:BB:20:2B:C6:6A:E3:1B:5E:AD:EF:80:55:B1:A1:AF
Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A
Certificate serial: 22B04A4BF9E91E7C31EAC201640A0C21A63135F5
Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa
Signing time: Sun 03 May 2026 02:46:11 +0000
ROA not before: Sun 03 May 2026 02:41:11 +0000
ROA not after: Sun 02 May 2027 02:46:11 +0000
asID: 141941
IP address blocks: 103.166.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b0:4a:4b:f9:e9:1e:7c:31:ea:c2:01:64:0a:0c:21:a6:31:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A
Validity
Not Before: May 3 02:41:11 2026 GMT
Not After : May 2 02:46:11 2027 GMT
Subject: CN=002009361ABB202BC66AE31B5EADEF8055B1A1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:79:4b:fa:83:83:13:04:5d:60:7a:a2:cf:
08:ce:78:f4:80:ac:22:6b:25:c6:77:f0:c9:ea:5b:
b4:58:6b:54:8d:f7:65:3a:04:fd:ec:c2:b5:f6:a4:
13:21:27:bf:ad:fd:ff:55:0f:85:40:ad:70:16:7e:
04:13:22:12:19:0a:37:96:b5:ad:90:58:4c:10:db:
67:20:1f:57:90:9c:39:84:83:0d:a2:00:a9:3f:15:
3d:7a:ea:3e:c4:ae:09:9c:e8:47:9e:ec:b4:27:78:
5c:0c:3a:90:3f:90:95:9a:8c:7e:0c:8c:d9:d7:d4:
91:5b:67:86:f0:5f:f5:4f:db:e1:b8:dc:34:9a:09:
87:48:98:af:39:07:5d:76:60:82:1a:61:7c:fd:01:
be:94:e8:7c:6e:02:f2:87:b4:f3:df:ca:53:6f:0e:
c1:bd:06:ba:de:30:61:3a:df:ea:a1:19:b8:34:9a:
b2:7b:e0:82:c0:8b:76:a8:c5:2f:c8:76:c9:a0:99:
82:4b:6f:7b:e7:b0:2e:90:92:26:b0:9b:ad:1d:34:
15:9a:3e:7f:58:39:db:60:65:b2:46:67:35:29:6c:
c9:80:55:2b:a2:97:b6:04:c8:af:17:ba:c9:bc:34:
cc:88:c3:f6:e4:5d:cb:4a:fb:22:bd:fd:a1:7d:5f:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:09:36:1A:BB:20:2B:C6:6A:E3:1B:5E:AD:EF:80:55:B1:A1:AF
X509v3 Authority Key Identifier:
keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.90.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:47:d2:25:6b:57:d8:a5:bb:17:a5:53:85:e3:a5:d4:db:fc:
52:a2:c2:c0:b6:af:93:b9:d4:fe:8c:4a:0c:34:2e:03:19:80:
bd:80:8f:5f:f4:c1:30:8d:66:e1:e6:be:36:75:cb:8a:34:a8:
36:0a:2b:29:ca:e6:06:19:47:61:17:a7:23:ce:e6:70:0d:ee:
72:cd:69:50:7e:a8:1f:99:7b:80:4e:01:25:3a:b9:e4:70:e7:
1e:4e:4f:3c:0b:44:9d:28:83:9d:aa:dd:3b:9f:55:f0:7a:d7:
fb:4c:77:28:5b:e0:4b:cf:45:8f:89:5e:6c:7c:00:89:fd:51:
89:3c:c6:d6:db:1b:99:c0:7e:97:66:7b:37:bb:b4:e3:53:5d:
9e:02:30:50:7a:81:01:ca:4e:1f:f6:41:b1:24:a7:d8:b4:d3:
41:d5:b8:32:97:3d:ed:88:54:66:b2:5a:3c:42:e0:24:94:c9:
ee:3b:5f:d7:c4:77:41:6b:fa:3f:96:95:dd:94:d6:46:66:35:
72:3f:a9:9f:14:62:12:15:bb:93:8c:81:5b:35:1a:fc:93:dc:
b4:3c:b1:15:d9:de:b8:72:3c:96:a5:29:73:0b:e0:77:4a:26:
e7:9e:09:15:84:45:b7:60:e3:63:2b:81:19:ad:fa:d3:59:c0:
37:60:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:51 2026 by rpki-client