
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
File: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (raw, json)
Hash identifier: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=
Subject key identifier: 1F:47:DE:6B:E9:87:DB:81:61:F7:D4:2D:45:61:01:33:0D:36:90:4C
Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Certificate serial: 43C1D86302DCB4B3D03BB9C50847BE3B7B4CFD8D
Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
Signing time: Sun 03 May 2026 02:49:05 +0000
ROA not before: Sun 03 May 2026 02:44:05 +0000
ROA not after: Sun 02 May 2027 02:49:05 +0000
asID: 150552
IP address blocks: 103.86.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c1:d8:63:02:dc:b4:b3:d0:3b:b9:c5:08:47:be:3b:7b:4c:fd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Validity
Not Before: May 3 02:44:05 2026 GMT
Not After : May 2 02:49:05 2027 GMT
Subject: CN=1F47DE6BE987DB8161F7D42D456101330D36904C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:2a:22:78:75:fb:09:a0:c6:31:99:63:93:
04:f8:41:e0:34:e2:0b:40:2e:37:82:5c:09:4a:db:
6d:d5:2a:fe:72:9c:de:4b:81:e9:41:d4:c3:96:75:
22:c5:b3:dd:46:8f:35:cb:fd:ea:e7:c0:f7:9b:53:
45:29:8c:1a:41:30:40:1b:08:e0:98:c1:61:61:a2:
a2:a7:ad:fb:c2:93:6f:08:61:43:6b:46:7c:ec:fa:
95:5b:12:11:68:15:dd:a5:8e:61:a1:21:69:83:2c:
4e:23:08:ad:61:e1:21:44:1e:bf:23:6e:ad:b5:80:
59:1c:90:5d:99:c8:5b:eb:e9:72:b8:e2:9e:77:14:
06:b0:0e:24:b0:6b:db:d8:c7:d6:76:97:88:79:d1:
cf:80:44:6a:e6:02:2b:77:64:9a:17:9d:6c:6f:7f:
15:cd:5e:ae:e7:c6:80:b8:5b:37:b1:02:39:71:c0:
4a:00:3c:e1:65:d9:16:e4:80:8f:b9:00:af:4f:91:
91:b6:b4:70:3b:c2:e6:e2:83:84:28:49:3f:73:71:
80:c9:ca:5e:4c:ab:22:dd:ef:b0:bc:57:6f:da:60:
cf:13:de:63:ba:32:37:35:dd:82:07:b3:45:40:96:
10:19:bd:da:8b:9a:85:e8:97:30:ab:ac:b0:80:7a:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:47:DE:6B:E9:87:DB:81:61:F7:D4:2D:45:61:01:33:0D:36:90:4C
X509v3 Authority Key Identifier:
keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.116.0/23
Signature Algorithm: sha256WithRSAEncryption
33:4a:68:1b:b9:2b:dc:ae:b8:82:88:98:70:dd:98:af:68:e2:
a8:11:87:14:4a:bb:9e:d2:7e:e3:9e:c5:a4:b3:55:ee:b9:dc:
cb:da:31:2c:ea:5e:8d:cb:73:3e:d2:0d:c4:8a:66:bb:71:4e:
ff:4d:58:af:92:f0:34:2f:bf:f6:1f:ed:d0:4c:7c:a6:55:00:
76:d6:a5:4b:85:bb:e2:67:ae:40:2d:27:2b:92:0e:e6:e8:da:
d8:a4:14:db:f3:4d:85:fa:83:4e:cd:2c:dc:98:69:e1:d3:6f:
f9:0c:92:83:89:9b:33:dc:17:8e:f5:7e:15:29:35:5b:0c:96:
fc:7f:ff:da:6f:e1:8a:7b:36:9e:c5:38:0e:b9:d7:27:a0:ff:
ab:05:6d:14:a3:3a:1f:11:21:7e:97:ef:8d:7b:89:9d:24:4e:
e8:1b:31:8a:97:09:c3:80:14:1f:fa:39:25:2a:2e:52:be:60:
b5:54:da:52:58:56:4e:38:30:90:08:c1:5b:1a:58:82:90:5b:
39:be:bb:11:8f:22:f7:fd:fd:04:db:97:54:34:ec:63:36:11:
2a:18:78:b1:36:80:86:7b:2f:5f:bc:f5:b5:8b:cf:bf:1f:ab:
62:c4:22:f8:60:51:3a:a9:e9:fb:30:7d:0b:5c:a3:e0:85:6e:
e0:f3:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:44 2026 by rpki-client