
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/3130332e3131382e332e302f32342d3234203d3e20313337333732.roa
File: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (raw, json)
Hash identifier: dIbMNlmzPRtmx/pqtJnbGmYAZfEP0PtpQbV8sPyHXmY=
Subject key identifier: D2:BF:90:D8:FC:6A:03:FE:6F:DF:25:39:BC:7C:6F:0A:9B:10:63:55
Certificate issuer: /CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Certificate serial: 7A48D4346597FE8F34A5C9304E01EE92A57EAAE0
Authority key identifier: 4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/3130332e3131382e332e302f32342d3234203d3e20313337333732.roa
Signing time: Sun 03 May 2026 02:50:54 +0000
ROA not before: Sun 03 May 2026 02:45:54 +0000
ROA not after: Sun 02 May 2027 02:50:54 +0000
asID: 137372
IP address blocks: 103.118.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:48:d4:34:65:97:fe:8f:34:a5:c9:30:4e:01:ee:92:a5:7e:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Validity
Not Before: May 3 02:45:54 2026 GMT
Not After : May 2 02:50:54 2027 GMT
Subject: CN=D2BF90D8FC6A03FE6FDF2539BC7C6F0A9B106355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:9b:d8:4e:46:4a:94:81:b8:22:a4:78:ed:
0b:86:1b:ff:4b:14:a6:98:ca:78:5c:93:61:b9:b9:
b6:ae:2c:08:a6:5a:8b:5e:3e:4e:09:58:32:d3:d6:
2c:db:37:4b:72:31:4b:b1:44:6a:35:8e:80:3c:33:
6d:e9:ae:e6:f2:5d:1e:58:d8:78:ef:bd:e5:0f:5c:
d7:f6:85:d8:03:13:22:fe:b9:b9:b1:c2:61:b4:03:
10:ef:04:21:34:f9:a7:b0:b3:92:3a:7e:6f:83:5d:
47:28:a8:c2:90:c4:f0:ab:e6:17:6f:6f:3d:26:31:
c0:8f:58:40:27:00:1b:d6:ee:6e:15:f6:ff:ee:98:
e4:d1:12:42:ce:c9:2a:45:4d:47:2e:45:1f:b2:a4:
dd:c8:cc:a8:84:9c:8e:2f:4f:d7:f5:93:a9:15:34:
72:5d:2e:a8:9c:70:ef:13:8e:6a:cb:cb:2d:a4:14:
68:e9:63:84:d7:55:34:0c:bb:8f:a3:31:2a:ef:7c:
4d:61:29:27:8d:e2:69:a4:03:fa:9c:81:1c:6b:e1:
f0:9f:9d:19:2e:e9:3a:0d:38:74:07:2d:44:8e:ce:
69:0b:b5:7f:bb:41:0f:cb:89:de:e8:4a:c6:74:6e:
d4:09:6b:f1:eb:c7:24:ea:eb:74:66:5a:77:33:64:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BF:90:D8:FC:6A:03:FE:6F:DF:25:39:BC:7C:6F:0A:9B:10:63:55
X509v3 Authority Key Identifier:
keyid:4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/3130332e3131382e332e302f32342d3234203d3e20313337333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6c:ac:30:0c:02:33:1f:fe:c8:12:d9:aa:c7:c3:04:2e:ac:
96:e9:a4:75:39:ba:dd:67:38:d5:96:7e:58:d8:a3:27:f0:05:
00:a8:e1:dc:9b:d0:ad:0b:1f:9f:7f:37:48:6e:fc:75:b9:c7:
60:56:7a:1d:5f:44:21:03:17:f2:e9:43:50:e9:41:52:6c:74:
3e:18:16:0f:f9:1b:46:82:1b:72:21:67:79:f8:b0:8c:c8:a8:
2a:8d:65:ed:dd:3f:31:19:99:f1:f6:48:26:93:75:c9:e4:9f:
05:96:e4:b2:ad:99:d8:19:41:09:9a:15:b3:ba:83:ac:01:fe:
31:72:67:c8:ed:b5:41:79:27:7e:4e:b4:80:7d:ae:ed:46:99:
9a:21:df:cd:d7:72:f8:ad:31:d5:ea:2e:80:e2:56:30:e0:67:
88:cc:42:dd:a8:56:c4:92:a9:79:a5:a8:db:cc:be:5f:ff:a3:
99:f0:bb:63:4b:8a:32:7d:3e:9c:5f:fd:80:90:a9:87:22:b0:
08:ae:09:b0:96:77:01:24:ce:fd:ea:84:a7:ac:b8:1d:3a:87:
bd:aa:4f:5c:e6:86:cd:0f:06:ef:50:8e:26:33:5e:c1:95:54:
59:96:c9:3f:cc:a8:2b:b9:d6:95:41:38:99:1f:42:20:34:16:
d8:6a:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:54 2026 by rpki-client