
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa
File: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (raw, json)
Hash identifier: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=
Subject key identifier: 45:B8:AB:89:83:1E:44:2F:95:70:5E:F5:5E:FB:FD:76:F4:B6:D4:19
Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6
Certificate serial: 5E175D08D6367A7C2365737271DFC1E85725EEA9
Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa
Signing time: Sun 03 May 2026 02:49:29 +0000
ROA not before: Sun 03 May 2026 02:44:29 +0000
ROA not after: Sun 02 May 2027 02:49:29 +0000
asID: 142366
IP address blocks: 103.163.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl
rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:17:5d:08:d6:36:7a:7c:23:65:73:72:71:df:c1:e8:57:25:ee:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6
Validity
Not Before: May 3 02:44:29 2026 GMT
Not After : May 2 02:49:29 2027 GMT
Subject: CN=45B8AB89831E442F95705EF55EFBFD76F4B6D419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:76:e5:a7:fa:04:44:0a:87:e9:43:6f:a3:
f3:bd:38:8a:b7:52:e6:cc:74:c5:ae:db:47:f8:e2:
3d:0a:6d:7e:f3:2f:58:c1:28:84:c1:74:15:71:f0:
a7:26:f5:9d:a0:2c:3d:87:93:6e:6f:5f:df:0f:e7:
ab:1f:66:9e:17:c4:ec:bb:c1:c0:b8:38:1a:28:c6:
27:bd:86:9a:f4:bd:16:be:08:e3:bb:d9:70:9f:1d:
ca:31:55:92:90:fb:74:fd:f9:ac:8b:7c:77:4f:f7:
ea:5d:88:15:34:1e:e2:b9:a0:9a:f7:d6:c6:4f:54:
ad:8a:fe:65:99:f7:41:11:bc:5f:60:27:83:2c:10:
c9:e0:93:fe:9e:7a:9d:5f:eb:2c:c9:72:5b:18:91:
d9:3d:01:4c:ab:bd:9e:1d:cf:e9:02:05:6b:eb:67:
b6:d7:02:e9:57:30:da:0a:c8:df:2d:4e:4f:11:82:
bb:dc:12:d3:52:30:ed:2b:5e:85:14:b6:48:a6:3c:
45:53:58:4c:0c:df:c9:7f:69:f0:74:43:ae:bf:f7:
ab:81:d0:f2:2f:22:32:28:a1:6a:30:0d:d2:2d:41:
c0:d1:19:89:fa:ed:4a:c4:53:d5:4e:04:ad:8f:aa:
d6:f0:91:ff:4a:9d:55:3b:2c:1b:90:8c:9e:91:86:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:AB:89:83:1E:44:2F:95:70:5E:F5:5E:FB:FD:76:F4:B6:D4:19
X509v3 Authority Key Identifier:
keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:27:9f:17:a0:93:68:92:cf:68:13:78:db:db:4c:ed:53:d4:
2e:08:e6:2a:0c:b4:c1:ac:0e:6b:1f:62:9c:04:f6:94:4a:ec:
1e:6d:8b:c6:82:e4:51:4d:23:9d:96:f0:be:60:6a:9b:71:6b:
17:16:61:08:3c:41:6d:37:de:1c:9a:a8:39:2a:f2:a8:e5:fe:
35:fd:ab:36:cf:c8:84:fa:c3:69:2e:bf:e7:dd:9b:67:db:33:
bf:c0:15:86:eb:e2:47:58:0b:fd:81:2e:c4:0b:85:08:e7:95:
1e:6b:22:cd:f3:91:99:7b:39:55:ec:8e:c8:58:23:ea:65:da:
0b:09:82:84:27:3d:63:75:76:b4:da:35:c8:5c:60:57:bd:ef:
02:af:08:dc:9c:51:52:e1:03:6d:77:1f:5f:c9:29:f3:48:6b:
e6:48:9a:de:e7:b7:02:4b:5f:66:9b:7a:5b:3c:e8:f7:9d:d5:
51:ab:ea:ff:2e:f1:4c:38:68:48:24:25:d7:1d:d9:bd:db:3a:
a8:1e:bf:6c:26:e8:9d:90:84:40:e6:8d:60:38:5b:ca:72:fa:
13:c2:3e:6d:c8:07:0f:09:74:bb:86:e4:18:37:57:22:86:76:
0a:0e:26:be:52:bb:aa:72:ce:92:d8:bf:ec:e9:cf:c3:c9:d2:
2f:8a:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:50 2026 by rpki-client