
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
File: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=
Subject key identifier: F4:66:8F:F2:2F:67:11:44:BF:E5:76:74:34:2D:D9:DD:91:DD:68:02
Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial: 75CF659BACC105670DA2036C8A0D8E09860BD7BB
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
Signing time: Sun 03 May 2026 02:49:36 +0000
ROA not before: Sun 03 May 2026 02:44:36 +0000
ROA not after: Sun 02 May 2027 02:49:36 +0000
asID: 23694
IP address blocks: 103.66.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:cf:65:9b:ac:c1:05:67:0d:a2:03:6c:8a:0d:8e:09:86:0b:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Validity
Not Before: May 3 02:44:36 2026 GMT
Not After : May 2 02:49:36 2027 GMT
Subject: CN=F4668FF22F671144BFE57674342DD9DD91DD6802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:75:82:c5:b9:fe:c9:0a:d4:6e:ab:e9:c3:
6b:4d:68:0d:dc:30:08:b3:6e:89:5a:cb:f3:cb:71:
70:9e:54:f1:ce:6e:20:55:2a:3c:4f:6c:ef:14:e7:
2f:f6:c7:f2:b8:47:e2:9e:17:16:d0:6b:d0:06:07:
d3:7d:14:ee:30:9c:da:e7:4d:c3:55:ec:f7:9c:e3:
b0:60:ba:c3:1b:60:54:ef:33:b2:d1:4d:40:c4:9a:
03:e1:02:0d:be:73:ea:9d:4a:4d:43:37:1f:b7:2f:
11:fd:e7:32:44:52:5d:a3:da:07:62:14:37:69:65:
df:f1:7b:18:35:36:ed:7c:0f:72:cb:c8:cc:80:1c:
a0:42:11:1f:51:e1:0c:2b:17:18:a4:85:b0:73:5a:
b7:b5:cf:47:16:9c:0f:4d:6d:8b:aa:de:35:86:0f:
3f:3b:e5:70:76:3f:4f:3c:e2:aa:9a:5d:4b:0e:68:
f4:68:11:80:b2:d3:f7:cb:90:eb:ac:4f:32:24:30:
dd:b8:cf:67:43:b1:e8:57:14:37:43:87:0e:ae:c3:
85:59:60:47:3f:02:12:dd:e4:67:a1:86:db:ae:16:
82:c6:e4:e9:e3:21:37:23:9c:26:b1:c0:3c:9c:d4:
67:0a:ce:fa:d8:0e:ab:6b:1f:8d:17:56:4b:54:5d:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:8F:F2:2F:67:11:44:BF:E5:76:74:34:2D:D9:DD:91:DD:68:02
X509v3 Authority Key Identifier:
keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ba:24:4d:23:b5:fe:db:dd:5b:1d:6b:2a:2d:81:1c:a8:e2:
49:d4:da:8e:81:e2:c1:87:52:1c:29:39:f2:75:dc:6a:c5:ae:
01:4e:a9:2c:9c:17:5a:b2:de:dc:a2:30:62:76:93:df:ff:b1:
a7:35:e9:9e:76:9c:3f:69:32:aa:5a:5d:53:38:95:48:94:52:
7a:f5:58:db:76:01:b5:87:72:71:77:26:0f:48:5d:23:4f:3f:
a4:3a:d7:63:8f:8c:4c:20:46:f5:6d:b8:82:07:f8:ff:c9:37:
40:15:a8:6b:1d:a6:a4:f4:09:90:98:05:b0:8c:ad:8e:d1:02:
e7:2c:4d:63:a5:ad:54:e5:43:f1:ac:49:a4:a7:46:dc:af:8f:
39:fc:c7:84:8b:9b:bc:39:1c:a5:1b:86:f7:80:44:a7:db:24:
7d:60:ad:ce:a8:16:63:06:da:e9:af:ed:d1:3c:d1:7f:3f:43:
4e:67:44:aa:4e:04:28:c4:c2:a7:14:4e:8c:57:c6:22:e7:1b:
7d:44:de:f0:d4:b7:20:3e:5b:87:b4:16:80:46:70:0f:e9:16:
2c:ed:3b:5a:fa:34:53:cd:71:6e:db:19:e6:45:06:b1:06:46:
1c:e5:7d:bd:41:4a:15:7b:89:aa:0d:88:c3:b6:47:6f:1f:7d:
b1:10:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:03 2026 by rpki-client