
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32322d3232203d3e203233363934.roa
File: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (raw, json)
Hash identifier: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=
Subject key identifier: 24:2A:92:61:4B:DD:EC:DE:96:D4:64:BB:70:20:EF:5A:E2:E8:8C:41
Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial: 713C08AB459D1C07D2C21FDBB0A1C995F58352B4
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32322d3232203d3e203233363934.roa
Signing time: Sun 03 May 2026 02:49:36 +0000
ROA not before: Sun 03 May 2026 02:44:36 +0000
ROA not after: Sun 02 May 2027 02:49:36 +0000
asID: 23694
IP address blocks: 103.66.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3c:08:ab:45:9d:1c:07:d2:c2:1f:db:b0:a1:c9:95:f5:83:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Validity
Not Before: May 3 02:44:36 2026 GMT
Not After : May 2 02:49:36 2027 GMT
Subject: CN=242A92614BDDECDE96D464BB7020EF5AE2E88C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:e8:a3:66:d3:90:c6:6f:a9:3c:cd:b5:7e:
e4:61:59:1f:23:6e:b1:60:ae:14:2e:d1:14:66:a5:
b4:5e:52:81:2d:a8:1e:cf:e6:82:80:e3:9a:d5:b9:
d8:e3:c4:20:a3:f9:45:09:d0:cc:1d:f1:a2:19:0f:
90:0e:25:b1:f4:b9:85:c3:9a:cd:1a:12:db:de:06:
96:9d:38:d4:2a:d9:7e:fe:73:f1:a0:0f:43:3d:f4:
28:9d:5d:73:76:9d:6d:a3:60:3b:5e:57:68:90:e2:
70:c3:21:b2:92:fa:85:5a:0e:34:be:9d:c4:93:41:
74:c6:99:4c:2d:7c:96:bc:13:1c:12:03:94:fb:9a:
c5:d5:0c:29:06:1a:af:0a:4d:27:16:da:ab:dc:8a:
8c:62:18:d8:51:3e:a3:b9:3f:60:c5:ca:b1:fa:22:
d6:f7:f3:c3:dc:32:57:e5:f0:51:08:7e:cc:45:ca:
7d:bd:dc:d6:be:44:d4:28:3f:2c:c6:a9:40:2e:f0:
75:1a:8f:06:38:6e:ff:91:da:db:d6:ad:0e:62:59:
07:2d:97:84:34:fe:da:20:3b:36:68:91:da:7a:7c:
92:26:b8:f1:4a:1a:ec:39:e6:6b:30:c2:bf:22:b8:
a3:43:18:53:64:2f:e0:5c:6d:f1:66:73:10:f0:16:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:92:61:4B:DD:EC:DE:96:D4:64:BB:70:20:EF:5A:E2:E8:8C:41
X509v3 Authority Key Identifier:
keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32322d3232203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:4d:06:e4:28:f3:7b:e5:90:8c:d2:3a:5e:d7:bf:26:4e:4e:
30:8e:e4:fb:88:aa:83:72:2e:c0:73:f7:16:ac:43:1f:80:4e:
38:fd:4a:09:3f:b3:0c:16:2b:bc:77:ce:20:26:ee:67:97:e9:
bf:1f:86:12:e1:1f:95:0e:12:93:d1:a8:e1:51:7c:0c:66:45:
cd:0c:e3:61:ad:78:82:c1:ff:a3:34:73:e5:c1:e5:7c:2b:99:
18:b3:61:ff:12:84:8b:3a:23:74:a0:56:a2:61:9e:a0:06:bc:
85:f6:73:58:f3:73:38:3b:b4:ae:cb:6c:16:54:73:f4:e8:08:
ce:8a:0a:81:0e:0d:55:74:04:b0:72:b7:b2:9a:5c:a7:8d:36:
9c:72:b2:b6:ec:0b:bd:22:b2:6a:3e:74:87:a6:52:3a:2f:76:
07:e9:81:7f:31:0a:e9:2c:53:c6:75:31:e1:9f:09:3d:4f:83:
30:0c:c5:4d:83:8c:5f:be:0a:aa:d5:1f:92:f6:59:a9:6b:17:
da:e4:7a:9d:91:3c:e6:d0:2d:63:a1:13:a0:c8:9a:ea:74:ba:
14:bc:8a:c1:ca:28:cf:7f:98:6f:ca:4b:1f:26:99:59:07:7d:
ce:94:73:f8:bb:20:ad:82:5a:8e:6c:7d:8a:bb:4c:63:bf:88:
9b:ae:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:57 2026 by rpki-client