
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa
File: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=
Subject key identifier: C4:86:3A:3F:8D:6B:BB:8B:BB:20:D8:31:10:95:C8:67:41:84:25:FD
Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Certificate serial: 45474D9DD9E5EAB92D697458E3412450031418AE
Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa
Signing time: Sun 03 May 2026 02:49:47 +0000
ROA not before: Sun 03 May 2026 02:44:47 +0000
ROA not after: Sun 02 May 2027 02:49:47 +0000
asID: 140421
IP address blocks: 103.148.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:47:4d:9d:d9:e5:ea:b9:2d:69:74:58:e3:41:24:50:03:14:18:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Validity
Not Before: May 3 02:44:47 2026 GMT
Not After : May 2 02:49:47 2027 GMT
Subject: CN=C4863A3F8D6BBB8BBB20D8311095C867418425FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:7f:ff:86:47:ef:24:65:5f:f1:15:7d:23:
2a:07:48:92:9f:60:f6:80:bc:07:9a:5d:30:55:79:
77:59:2a:08:6a:77:78:69:cb:66:a2:dd:32:7c:53:
60:8d:fb:09:ef:8a:47:93:a2:51:b9:0f:23:c0:71:
f9:e0:00:25:eb:91:01:e7:08:3b:67:b0:f2:7f:f7:
4a:30:9c:e1:80:95:eb:cc:f8:2b:93:b0:61:ab:a5:
fa:ca:e9:ae:c9:68:ec:e4:98:f3:e8:09:dc:1e:62:
91:8f:f0:4b:c6:1b:e1:bf:36:33:32:79:8f:5b:09:
38:d6:48:aa:7b:1b:85:5a:f5:2d:d0:74:23:d7:6a:
3b:0e:33:c0:62:6d:2c:f2:d5:3b:fe:bf:74:e2:d7:
34:67:58:79:79:88:88:aa:c2:49:91:04:41:5f:ff:
a6:d1:d8:39:3e:5f:3c:f4:64:65:a3:b6:55:f6:f2:
a2:ad:a8:97:5b:c2:d6:a7:f2:36:2e:d2:05:fe:01:
63:51:e9:2e:13:2c:ff:95:59:3a:bc:db:61:04:68:
8b:e5:b8:ab:95:0a:45:7c:2a:a0:b3:1d:98:ee:43:
f1:ee:1e:86:0b:77:04:45:e9:f0:52:0a:c1:74:18:
9e:f9:5e:73:c1:27:83:df:66:d1:27:65:dc:86:9f:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:3A:3F:8D:6B:BB:8B:BB:20:D8:31:10:95:C8:67:41:84:25:FD
X509v3 Authority Key Identifier:
keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ab:fd:78:88:22:1d:50:08:b3:15:3b:7c:0e:3f:e7:3d:6b:
a4:bb:b9:7e:c9:e7:c4:52:7c:24:e1:83:04:5a:b1:d6:5f:80:
5e:47:93:c8:f7:4b:9d:89:2b:9b:c2:d5:27:eb:0b:ed:b6:53:
db:ae:c1:3e:1d:86:7c:bf:fb:84:67:2e:66:4c:dd:ac:3d:35:
78:7d:9f:11:9d:2e:b2:b6:a6:91:ac:b5:46:3c:6d:89:2d:31:
f6:e5:6b:9c:ac:58:77:88:81:d8:de:a1:1e:85:fb:8e:cc:80:
60:d7:69:64:45:0a:94:76:7c:2a:aa:de:8d:17:c0:59:1f:c4:
0e:d8:8e:44:2b:65:5a:af:55:18:06:d4:f9:97:98:fa:9d:f9:
3a:30:84:f3:93:a4:0d:b5:a8:7b:a2:bc:1c:a2:b6:54:93:d3:
9b:39:fe:e9:4d:f2:bb:75:13:5f:9d:e6:31:75:ad:d7:91:c1:
e1:17:9e:05:90:39:d5:79:19:7e:e0:9c:18:65:c1:7f:75:40:
21:49:22:d1:a3:cf:b4:1f:89:43:f5:4a:63:21:38:7e:e6:76:
81:d6:f6:a8:bf:84:38:1d:84:a9:a3:12:cb:58:be:85:c9:ef:
ed:8b:f0:cd:2a:e4:b5:11:37:cd:eb:6a:9c:f6:6b:fa:24:cb:
f0:9b:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:17 2026 by rpki-client