
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa
File: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (raw, json)
Hash identifier: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=
Subject key identifier: 4A:E4:59:DA:46:4F:87:FC:0F:0A:14:EB:B0:93:2D:5F:35:1B:09:36
Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A
Certificate serial: 59E69F2CDADAF8997F91D9A3F4A1C9498EF041CB
Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa
Signing time: Sun 03 May 2026 02:51:16 +0000
ROA not before: Sun 03 May 2026 02:46:16 +0000
ROA not after: Sun 02 May 2027 02:51:16 +0000
asID: 139981
IP address blocks: 103.71.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl
rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e6:9f:2c:da:da:f8:99:7f:91:d9:a3:f4:a1:c9:49:8e:f0:41:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A
Validity
Not Before: May 3 02:46:16 2026 GMT
Not After : May 2 02:51:16 2027 GMT
Subject: CN=4AE459DA464F87FC0F0A14EBB0932D5F351B0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:1e:1b:58:24:a4:f8:b0:5a:dd:8e:b7:0c:
14:0a:5c:2f:b9:2c:03:c9:10:c3:af:c8:f3:f0:a5:
fe:9f:72:1a:6c:71:a7:bd:1b:50:df:cb:43:11:27:
c5:89:d0:14:00:0d:8a:80:33:43:1d:76:f1:d6:83:
72:ba:80:8a:86:60:e7:5b:95:8a:33:50:3b:4b:3c:
eb:1f:e5:d3:f9:33:32:22:ca:de:97:36:04:03:91:
8a:94:49:2e:9a:11:b6:2d:f9:0b:a4:06:0d:75:3c:
2a:5b:f4:8c:6e:d1:87:35:f4:47:fa:c3:0d:fc:07:
c4:0a:15:bc:5a:a4:94:bb:ad:12:45:6c:83:b5:bd:
a0:ec:f4:ca:85:4f:d5:48:c9:41:43:5e:69:e2:73:
4c:66:12:56:f8:d1:f4:c6:33:2a:2f:8d:3c:49:1c:
22:ba:57:20:f4:3b:bb:fa:64:56:8b:8c:7b:f8:cf:
c7:1a:6d:b6:86:7e:01:f5:f2:34:b0:f9:c4:a9:04:
f4:50:76:99:4a:26:42:5b:93:48:0d:da:94:e4:99:
38:ba:d8:f0:70:ff:ff:ec:2b:85:81:28:96:bd:a0:
9c:23:82:9f:96:2f:22:8e:d2:4d:52:71:a0:a4:64:
b8:3d:69:98:b9:47:67:cf:7f:f6:39:62:e8:cd:38:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:59:DA:46:4F:87:FC:0F:0A:14:EB:B0:93:2D:5F:35:1B:09:36
X509v3 Authority Key Identifier:
keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:21:03:a8:18:64:c9:9a:e0:6f:36:eb:e6:2b:83:22:e6:39:
d7:af:c8:b7:e8:60:e4:37:6f:1f:45:0d:d2:cb:ed:a5:d4:bd:
e8:b1:a9:a7:23:c7:d0:34:f4:0c:ac:02:60:99:59:77:a8:33:
3f:24:d8:6f:06:47:15:be:e5:91:40:58:f3:9b:91:f3:3d:a4:
56:e2:78:26:13:ff:21:49:65:85:93:87:32:76:e2:84:df:6e:
e1:b7:70:42:d1:68:f8:cb:d5:a3:3d:2f:d0:20:52:14:5e:b7:
8c:dc:ab:2f:f1:e5:56:74:e7:cd:f1:f6:52:8e:47:52:bf:4a:
95:cf:3e:24:83:e5:77:5d:8e:5e:d8:e9:8c:33:4a:63:61:1d:
f3:b6:9a:c7:35:aa:5a:a1:6f:ee:27:dc:cc:db:71:f6:06:ea:
10:98:6e:7f:52:5e:aa:aa:5b:8b:d2:f8:ac:0f:bf:6b:b3:52:
bc:36:ab:70:eb:69:b3:d6:8c:40:1b:3d:62:c0:22:3f:b5:27:
25:16:58:db:91:04:70:e2:8b:c7:a9:85:61:b9:45:87:66:5d:
45:58:ba:52:ab:74:b1:28:9a:1a:55:de:af:eb:b9:7e:d8:e4:
ff:01:7d:d1:1c:3e:a6:b8:78:ca:22:a6:88:08:bc:36:9f:c2:
c2:c8:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:17 2026 by rpki-client