
$ rpki-client -vvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
File: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (raw, json)
Hash identifier: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=
Subject key identifier: 65:4D:B1:85:31:21:00:8B:CC:46:F7:0A:5D:4B:E4:9A:5D:7C:83:B5
Certificate issuer: /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Certificate serial: 5226B136A71E14EC08BE034838B7432F237B7407
Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
Signing time: Sun 03 May 2026 02:47:22 +0000
ROA not before: Sun 03 May 2026 02:42:22 +0000
ROA not after: Sun 02 May 2027 02:47:22 +0000
asID: 142356
IP address blocks: 103.169.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:26:b1:36:a7:1e:14:ec:08:be:03:48:38:b7:43:2f:23:7b:74:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Validity
Not Before: May 3 02:42:22 2026 GMT
Not After : May 2 02:47:22 2027 GMT
Subject: CN=654DB1853121008BCC46F70A5D4BE49A5D7C83B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:33:bd:8f:a1:e2:ea:7d:97:93:b8:e4:00:
3f:08:54:b8:16:fd:f4:5b:00:5e:00:67:b2:f2:83:
b6:87:dd:03:13:06:eb:3d:f2:51:96:df:e2:0b:08:
e0:da:e9:0d:a9:70:42:28:65:ae:e1:22:23:b6:c8:
1c:57:02:21:97:1d:b0:bd:2f:57:ef:4d:9b:b8:aa:
c6:35:96:85:96:b0:ae:ef:ce:f7:e5:eb:e5:ab:b4:
9c:9e:d9:c8:de:7f:52:dc:c0:62:3f:16:40:6d:45:
7c:69:c3:88:2b:22:a6:98:18:43:b2:e1:b8:53:cb:
2b:ef:33:91:24:eb:34:c7:44:c4:5e:94:5e:73:8c:
2a:0a:4c:4c:00:db:2c:49:dd:1d:03:18:63:a4:11:
2c:dd:f6:f2:20:14:33:7e:d9:39:f8:df:f0:81:7a:
7e:1a:8b:95:f8:16:bb:8b:11:68:44:6a:13:99:d9:
19:49:da:66:d4:87:35:37:7f:9a:da:68:92:8d:aa:
10:0b:5d:c9:d6:50:c7:c3:4a:0f:6f:ff:59:b0:d7:
03:a2:a1:af:22:8b:20:1f:a7:73:ac:f6:83:66:c9:
be:13:01:eb:41:58:42:5f:40:bc:5e:85:34:46:8d:
75:cb:3c:21:18:82:fa:c3:f8:0b:a3:f9:72:eb:15:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:B1:85:31:21:00:8B:CC:46:F7:0A:5D:4B:E4:9A:5D:7C:83:B5
X509v3 Authority Key Identifier:
keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:d5:73:e1:54:73:9f:c3:c9:6c:c0:d9:60:ea:10:94:9e:
7b:ca:06:d8:31:b9:0b:2f:86:38:cd:e5:2e:81:9b:dc:83:91:
49:24:a4:6d:13:eb:bd:56:6a:c8:9d:b4:d6:ec:bb:9d:a8:a2:
5d:e2:bc:6c:fe:28:09:b3:f3:6b:40:75:07:84:8e:c2:7e:1b:
36:41:1b:3e:66:ae:4d:60:07:62:bd:a1:32:a9:03:de:75:8e:
8c:21:e7:a9:83:7c:18:bf:a4:69:7f:a3:7f:b8:ba:a1:f1:2f:
2a:df:b7:3a:97:54:f8:33:62:c0:ab:92:f2:6e:8f:db:d3:81:
dd:c4:47:e6:35:61:3a:c3:00:86:8c:9b:85:00:9e:64:cb:f5:
4f:c4:fc:45:6b:6f:05:cc:1a:78:af:ef:18:7e:3f:cb:78:21:
f5:19:96:66:1e:c2:04:36:ea:50:98:ac:72:e9:2c:b4:f7:81:
8f:07:00:7c:e7:0b:a5:f1:25:39:23:6d:e0:e4:a4:13:f7:d7:
09:c5:07:7f:b8:f8:29:aa:1e:d2:c8:e9:99:49:65:69:ac:9d:
7c:2e:f3:95:e9:18:a2:c7:07:e4:b2:21:cc:39:c0:79:db:b0:
38:9e:f9:3a:fe:a0:56:32:3c:b4:f9:a1:0c:9d:a6:73:1a:01:
2b:db:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:05 2026 by rpki-client