
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
File: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (raw, json)
Hash identifier: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=
Subject key identifier: 63:65:F6:4C:71:34:CC:82:71:2B:F4:14:AC:3C:CD:2C:C9:36:D7:6F
Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21
Certificate serial: 7B79F2CABFDEACB9E75375312DAC8FCE813881E7
Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
Signing time: Sun 03 May 2026 02:51:17 +0000
ROA not before: Sun 03 May 2026 02:46:17 +0000
ROA not after: Sun 02 May 2027 02:51:17 +0000
asID: 141636
IP address blocks: 103.162.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl
rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:79:f2:ca:bf:de:ac:b9:e7:53:75:31:2d:ac:8f:ce:81:38:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21
Validity
Not Before: May 3 02:46:17 2026 GMT
Not After : May 2 02:51:17 2027 GMT
Subject: CN=6365F64C7134CC82712BF414AC3CCD2CC936D76F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:e9:9b:73:42:62:43:d3:ff:d7:4d:a7:7f:
7c:a2:48:17:5f:14:76:3f:55:b8:57:20:5d:1d:02:
95:29:f2:d3:24:78:34:5d:61:0f:40:2a:e0:eb:4f:
24:b9:85:c8:9c:7a:26:14:d5:11:34:1a:d5:96:08:
f2:43:5e:57:ab:2c:c7:ec:88:b3:d5:e1:11:13:07:
ae:c4:03:e7:9f:ae:da:1f:bb:01:a1:b9:a0:9e:78:
d1:c2:06:57:55:dc:45:01:42:8a:83:df:06:17:05:
ad:3e:e0:b8:d4:35:6a:8b:0a:62:3a:04:34:ea:df:
bb:68:ad:ed:62:35:9d:b9:ca:e0:dc:b4:d5:83:48:
93:56:64:b1:ee:c8:78:81:2e:d6:4a:e2:bd:f0:17:
fc:20:a9:9c:0e:0e:c8:b4:0d:19:6d:1c:16:f3:48:
d5:14:34:63:6f:bc:28:ad:a7:60:3c:4d:16:b6:d5:
fb:f8:f0:f3:18:21:f1:ec:88:e5:e6:01:63:3f:9c:
10:f8:2b:41:0b:a3:fc:c7:4b:4a:5a:4e:39:39:f2:
78:e9:93:31:bc:ca:0f:20:a0:d8:7e:b1:28:eb:aa:
c0:a0:10:a0:a4:42:2d:61:73:e8:d8:a1:67:db:6f:
6d:ff:da:9e:cf:b5:ad:d4:32:59:5b:42:6d:d9:dc:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:F6:4C:71:34:CC:82:71:2B:F4:14:AC:3C:CD:2C:C9:36:D7:6F
X509v3 Authority Key Identifier:
keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.16.0/23
Signature Algorithm: sha256WithRSAEncryption
47:a6:e9:49:6b:54:13:66:66:75:ad:b9:92:a8:54:7c:94:5f:
d4:ad:0f:5a:f8:be:2a:ff:2a:b8:08:56:cf:58:50:25:c4:3b:
47:05:27:82:73:a4:02:46:09:85:12:9d:a0:85:07:2b:cb:71:
64:bd:8a:b8:10:16:76:fd:8c:a1:9f:c8:ec:70:ab:bb:a5:a3:
8b:45:1f:26:a6:8c:4d:40:07:6d:1c:7a:6d:d9:ca:aa:bc:2e:
49:bb:44:3f:60:4a:96:96:40:3e:95:60:6e:0a:6d:22:bc:2a:
f2:dc:b3:51:d0:c4:88:d4:21:3d:9e:ca:9d:97:ae:08:71:d0:
b7:8c:1d:ec:f4:fb:d4:e4:40:28:66:d5:14:68:e6:ef:8e:53:
38:4c:ad:a7:35:3f:0b:e7:e9:19:e8:65:ec:cf:29:cf:5a:c4:
ce:53:61:08:69:e0:74:00:43:b9:1f:d8:df:5d:51:1c:1d:1d:
96:cc:03:1e:df:db:43:a0:24:cc:7a:bf:35:07:fe:c1:6e:1b:
fb:28:19:9f:e7:24:cc:71:ad:e6:dd:29:13:6f:41:d5:e1:84:
36:00:e0:02:ec:4f:68:0f:24:6e:c5:86:12:29:8c:06:c7:63:
e6:31:72:14:d6:b4:dd:1e:da:fc:a5:0a:5e:03:de:9f:15:90:
fa:e0:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:05 2026 by rpki-client