
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa
File: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (raw, json)
Hash identifier: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=
Subject key identifier: 20:31:D8:50:F1:F5:14:24:E9:C2:DC:0F:E6:DB:E7:A2:78:32:FC:AC
Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial: 12B3A74BC8A63E6439E029982491B5F509882EF3
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa
Signing time: Sun 03 May 2026 02:47:35 +0000
ROA not before: Sun 03 May 2026 02:42:35 +0000
ROA not after: Sun 02 May 2027 02:47:35 +0000
asID: 149710
IP address blocks: 103.121.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b3:a7:4b:c8:a6:3e:64:39:e0:29:98:24:91:b5:f5:09:88:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
Validity
Not Before: May 3 02:42:35 2026 GMT
Not After : May 2 02:47:35 2027 GMT
Subject: CN=2031D850F1F51424E9C2DC0FE6DBE7A27832FCAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:89:76:b8:48:91:15:a3:15:54:58:f5:82:
a8:0b:c0:80:73:eb:f9:a3:fc:2a:2a:47:f5:af:85:
77:8b:8b:a3:94:50:46:39:15:ee:b8:d6:66:2d:eb:
64:ad:2d:f1:c1:88:0c:53:f9:e0:38:61:26:a4:08:
02:78:83:be:cf:c1:56:29:76:f1:23:fb:70:4d:09:
f5:d1:16:18:b1:83:ab:ed:3a:0c:75:f6:ab:2e:08:
58:33:d4:9b:7c:07:c8:8c:9b:24:cc:1f:0f:0a:b8:
fa:4b:4d:90:4d:9c:d1:22:2b:74:52:04:07:1c:e3:
78:d8:ef:92:55:d4:22:29:f4:d2:d0:08:34:48:3a:
b4:9b:64:77:bf:a5:dd:51:79:0f:5e:f7:3e:fe:ba:
d0:97:60:f8:58:44:2d:f0:bf:9a:db:23:32:a4:0c:
45:56:73:f1:2b:d1:16:9f:96:88:b9:86:0d:a1:51:
ef:ef:af:bc:8a:bf:8b:ff:3c:4c:39:6c:3c:bc:59:
4d:08:11:59:aa:f0:63:7f:97:21:34:61:36:67:d4:
66:a3:8f:07:ed:1e:ad:44:49:5f:dc:75:09:5d:df:
cf:95:81:1c:2f:a9:4b:f6:ab:b2:18:0b:38:59:2f:
ae:6b:ae:90:3d:e6:25:75:3c:69:ae:5f:44:03:71:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:D8:50:F1:F5:14:24:E9:C2:DC:0F:E6:DB:E7:A2:78:32:FC:AC
X509v3 Authority Key Identifier:
keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.196.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2d:12:1d:81:10:45:e6:bc:50:66:74:d0:d5:7b:df:0b:43:
01:3b:fc:0f:97:9d:81:cd:f8:02:56:71:8a:b6:21:a4:c5:20:
24:2f:21:6c:86:b1:83:72:cf:f7:1b:ce:a5:6c:d2:7e:d6:67:
87:77:cd:80:80:f5:3b:31:4e:3d:6d:8f:f0:1b:dc:cf:89:3a:
42:9d:f2:de:a6:bd:f0:e7:bc:fc:2a:71:90:af:30:81:b9:19:
ad:8c:bc:27:73:9d:c2:1f:d7:27:65:97:32:5b:f5:d1:bb:7c:
34:7a:0d:79:ee:2a:bf:9a:45:1f:da:57:a3:56:a9:05:53:f6:
a4:d2:f9:38:b2:e7:22:c0:ea:86:ed:19:dd:33:e5:19:11:56:
92:11:9a:71:8b:35:de:4b:b7:73:63:f6:8b:ab:b3:fe:df:44:
07:98:2d:72:63:38:6e:83:c1:e9:c8:04:6e:2f:22:d3:99:b0:
bd:08:46:73:db:3d:9a:84:cf:bd:c7:ea:4d:3f:cf:08:e1:44:
c4:3e:41:ab:9b:7e:6b:ce:5e:b5:3e:c7:9b:ae:48:98:43:7f:
27:68:fb:d5:30:67:50:f2:d8:eb:df:5d:4a:c3:ed:14:80:eb:
13:c2:c3:89:37:1f:6a:63:ef:5a:5a:39:84:07:0e:1a:39:38:
fd:62:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:19 2026 by rpki-client