
$ rpki-client -vvf rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa
File: 3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa (raw, json)
Hash identifier: eGFMAqfyfCE+RtLMZU2D/zaIYmB6R1b/zXsZIUuxlEk=
Subject key identifier: CA:C6:0A:5D:8F:5A:52:40:B9:C7:A5:85:34:D1:A6:AB:DC:9C:00:6C
Certificate issuer: /CN=6B06F329693302AA52D4F4E344C4EBD4EE4F04E4
Certificate serial: 482C2C7C3CC655D0CFFBB4173D2963A77EE6BD53
Authority key identifier: 6B:06:F3:29:69:33:02:AA:52:D4:F4:E3:44:C4:EB:D4:EE:4F:04:E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa
Signing time: Sun 03 May 2026 02:47:21 +0000
ROA not before: Sun 03 May 2026 02:42:21 +0000
ROA not after: Sun 02 May 2027 02:47:21 +0000
asID: 149754
IP address blocks: 103.189.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.crl
rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2c:2c:7c:3c:c6:55:d0:cf:fb:b4:17:3d:29:63:a7:7e:e6:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B06F329693302AA52D4F4E344C4EBD4EE4F04E4
Validity
Not Before: May 3 02:42:21 2026 GMT
Not After : May 2 02:47:21 2027 GMT
Subject: CN=CAC60A5D8F5A5240B9C7A58534D1A6ABDC9C006C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:0b:6e:2f:58:95:70:bd:51:14:bd:41:26:
d5:10:f4:8d:ff:0c:3a:d2:27:53:68:e8:6f:63:bc:
f9:15:73:f5:c7:a6:0e:7e:22:63:79:cc:a9:95:bc:
82:6c:dc:64:54:70:77:41:d9:8d:d0:8e:62:f5:5c:
41:dd:72:18:8c:04:bc:83:28:36:47:70:e5:48:da:
16:28:29:82:54:fe:85:5f:b9:5f:dc:a9:6a:4b:36:
73:90:22:f1:0d:3d:27:b4:a0:a2:79:e9:6f:2b:7a:
b0:ca:57:5b:7d:e5:34:b8:1f:d4:e1:ce:e1:05:53:
48:a6:fd:6f:a3:b8:29:25:ea:9e:44:65:51:02:23:
09:db:62:ef:86:22:fc:60:23:cb:2c:26:cd:4e:c2:
e8:46:f5:88:f7:cb:1e:b6:9a:9a:b4:84:31:fe:03:
fb:c2:36:eb:19:2d:db:29:27:8a:53:d1:48:24:4b:
a5:42:31:72:aa:c3:f3:0b:04:9c:d4:8d:5b:69:47:
8a:2f:24:71:7c:04:ef:eb:c4:61:ac:87:b3:3b:26:
04:30:de:f1:17:4b:f0:37:a9:1c:78:ad:10:c8:6d:
b4:e6:35:e0:ad:e3:3d:17:48:b8:00:43:5a:92:2a:
d6:28:19:8f:b0:c0:2e:10:dd:ae:67:68:95:5b:b8:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C6:0A:5D:8F:5A:52:40:B9:C7:A5:85:34:D1:A6:AB:DC:9C:00:6C
X509v3 Authority Key Identifier:
keyid:6B:06:F3:29:69:33:02:AA:52:D4:F4:E3:44:C4:EB:D4:EE:4F:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.165.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7a:42:ec:6f:15:89:fb:21:5c:f2:13:2a:72:41:c7:f4:6b:
ec:f2:e0:93:56:4f:97:f6:cb:d5:67:eb:11:98:5d:bc:05:c6:
1b:b5:bf:9d:66:c1:66:bc:e6:d3:36:77:53:2b:5c:68:50:3d:
c0:d9:af:28:c1:01:e2:6e:98:3d:02:75:cd:2a:b6:1b:34:95:
cc:d4:4a:c7:73:1e:3e:9c:af:21:0e:0f:d9:aa:5d:8b:bc:04:
22:ab:8b:b5:be:8c:21:90:38:db:d8:f8:0b:83:bf:82:6a:27:
33:af:fb:bc:fb:2c:d7:00:70:29:02:d1:3b:51:1f:88:8e:4e:
31:f6:fe:69:1f:f9:9b:80:b1:af:62:86:1c:3b:c3:f3:87:72:
7c:70:e6:5f:ff:3a:6c:40:35:3e:64:9e:02:75:49:b8:84:a5:
eb:cb:73:01:29:a3:cb:11:4e:a5:3b:aa:e6:4d:a4:6d:67:bf:
e9:21:67:cd:6a:24:ce:ea:f7:3a:93:1b:fe:7d:07:11:ee:e9:
3f:c2:0b:1e:99:62:e3:5d:df:76:ae:f2:1a:5d:7c:e3:d4:44:
b6:63:03:a3:a1:76:29:48:0d:ce:6f:eb:5f:16:36:f0:91:85:
46:f5:18:15:2c:15:59:4c:4b:ed:8c:67:ca:f1:53:01:17:32:
63:98:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:26 2026 by rpki-client