
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa
File: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (raw, json)
Hash identifier: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=
Subject key identifier: 14:F0:C0:0D:30:D7:18:5C:06:B4:CC:32:27:8B:BA:10:DD:30:02:1C
Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial: 4708091E4C31D91A743259734D2AA45A47AF2148
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa
Signing time: Sun 03 May 2026 02:47:39 +0000
ROA not before: Sun 03 May 2026 02:42:39 +0000
ROA not after: Sun 02 May 2027 02:47:39 +0000
asID: 38505
IP address blocks: 103.233.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:08:09:1e:4c:31:d9:1a:74:32:59:73:4d:2a:a4:5a:47:af:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Validity
Not Before: May 3 02:42:39 2026 GMT
Not After : May 2 02:47:39 2027 GMT
Subject: CN=14F0C00D30D7185C06B4CC32278BBA10DD30021C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:6f:ba:99:f3:3d:1d:ef:f7:74:e8:00:4e:
16:7f:4d:1a:eb:46:34:cc:7a:f4:de:e9:a2:99:ea:
32:2e:4f:fd:98:ed:19:89:b7:09:da:77:ce:3e:fd:
b5:92:0e:44:52:03:0f:fb:f1:4d:5e:c5:54:e0:c5:
d4:7f:26:49:ee:12:68:1b:ea:73:1f:93:a1:61:a9:
35:9e:74:4f:ea:4d:0e:34:14:c6:23:9e:d4:9e:b2:
1b:c8:9a:07:03:8e:9a:f7:49:01:bd:59:02:ca:31:
32:32:90:84:85:38:93:71:4e:28:79:85:5c:8d:21:
be:76:cc:1f:3a:bf:0f:0d:2a:ee:47:dd:ed:d8:19:
7c:a0:f2:d9:77:ef:f8:09:36:0d:b6:b7:48:c5:eb:
c9:af:44:ab:89:69:40:b9:30:a3:2a:b0:e9:d8:a3:
20:0d:36:d3:0f:6f:24:da:78:02:b2:0a:0c:df:38:
48:9c:59:af:01:79:86:ad:92:78:ad:60:37:b4:d8:
c3:c4:fa:b2:c2:50:6d:c0:c0:00:6f:f1:c8:d5:85:
a7:ad:da:96:69:dd:fb:aa:c0:82:40:4a:4f:7c:29:
ad:3d:d0:d5:8a:38:ec:58:e2:11:0b:13:f1:54:93:
a2:c5:67:a8:8e:29:ac:c0:74:dd:d6:4b:45:43:80:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:C0:0D:30:D7:18:5C:06:B4:CC:32:27:8B:BA:10:DD:30:02:1C
X509v3 Authority Key Identifier:
keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.142.0/23
Signature Algorithm: sha256WithRSAEncryption
81:35:fe:ec:f7:0b:ba:e4:db:1e:74:f1:76:f8:5d:73:90:07:
cc:b7:9b:62:7c:7a:ec:4b:9f:ca:67:70:62:07:ce:bd:52:81:
a0:02:b7:ec:3c:82:22:9f:75:58:f3:e1:3d:63:bf:54:54:74:
0b:26:cb:b8:29:34:6c:ac:a7:67:d6:13:da:d1:45:01:c4:a5:
e1:b6:d7:f9:95:9a:63:d4:52:f9:97:f2:ac:c8:a8:67:b5:e2:
a1:04:fb:a5:b9:37:dc:6c:3a:ef:51:29:f6:85:bc:1f:d3:dd:
14:e2:d7:49:d6:53:af:f0:0f:8c:56:1e:62:3e:f3:b4:31:97:
37:b4:80:f3:6b:a9:a7:2a:86:d4:f8:1b:7b:33:88:d0:f1:b0:
7a:20:94:2d:7e:a2:39:c1:2e:17:6f:6b:69:02:77:68:9e:8c:
d5:d2:33:db:4e:9a:b8:d7:ea:d4:08:ae:eb:e9:59:4c:05:9f:
81:b7:9c:67:fe:70:26:e2:fa:3b:e5:44:d5:75:bd:75:65:a0:
0c:fa:22:40:ef:db:06:fb:0a:53:96:83:95:50:33:1a:0f:ed:
f5:16:43:69:b8:27:fc:2e:5d:b7:c9:4a:be:fd:4d:26:6c:b3:
88:df:27:35:e4:f8:ad:6e:bc:9f:e1:9e:49:03:44:49:b1:5f:
d3:22:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:37 2026 by rpki-client