
$ rpki-client -vvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
File: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (raw, json)
Hash identifier: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=
Subject key identifier: BD:30:EB:DA:BD:C2:09:0B:17:A6:86:28:40:39:17:B9:18:A3:23:B2
Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7
Certificate serial: 1263EECBF556CEC0987271174CF02E9758C86BE8
Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
Signing time: Sun 03 May 2026 02:51:31 +0000
ROA not before: Sun 03 May 2026 02:46:31 +0000
ROA not after: Sun 02 May 2027 02:51:31 +0000
asID: 134640
IP address blocks: 103.22.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl
rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:63:ee:cb:f5:56:ce:c0:98:72:71:17:4c:f0:2e:97:58:c8:6b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7
Validity
Not Before: May 3 02:46:31 2026 GMT
Not After : May 2 02:51:31 2027 GMT
Subject: CN=BD30EBDABDC2090B17A68628403917B918A323B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:08:de:a6:ec:1f:a1:bd:92:90:fa:83:da:
f4:f7:e1:30:35:f8:f5:12:9d:a7:74:07:76:05:ff:
99:4c:d3:94:fb:3e:68:67:ed:5e:04:ad:14:a1:92:
bb:4f:d4:51:11:9d:11:2e:99:11:4e:ac:98:49:71:
3c:3f:d1:44:07:ca:ee:96:53:bc:04:56:2b:77:ba:
2b:1a:41:75:05:7d:75:fd:5b:ce:d9:22:a4:11:f2:
6e:a2:86:74:8c:07:5a:86:dd:69:fd:56:fb:22:fa:
da:22:a7:ac:ff:5c:5d:61:0e:27:c3:b1:3a:a8:79:
a8:0a:5f:d2:e1:01:76:be:2f:19:33:f1:62:9e:a0:
ab:49:06:c9:02:6c:35:cb:80:8a:b9:5a:37:aa:ec:
b6:f9:7b:85:bd:fb:fe:68:19:4f:36:63:f1:7c:a8:
38:5c:91:ef:8a:37:57:fd:62:5f:76:ca:4a:24:f5:
eb:5b:25:29:ea:11:74:e4:f5:8c:2c:9f:63:5a:54:
0c:8e:8e:36:2f:5e:ba:c5:62:67:99:64:0f:7d:06:
58:b5:ae:b6:9e:1a:80:c2:63:ed:8b:57:60:fa:a3:
ef:0e:7f:f5:0d:fe:45:52:7b:d0:a0:8a:a2:89:3d:
78:d0:90:03:b9:d7:55:89:bb:5c:ee:84:86:50:6a:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:EB:DA:BD:C2:09:0B:17:A6:86:28:40:39:17:B9:18:A3:23:B2
X509v3 Authority Key Identifier:
keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:1f:ac:6e:89:e5:08:19:22:98:d1:86:f5:ef:fc:f6:94:92:
36:93:b2:e4:68:22:7f:5d:6e:b4:18:8b:6c:cd:d0:ec:d6:c3:
a3:d5:cb:82:89:53:42:b3:3c:8d:ee:07:1a:31:b7:66:71:98:
09:7f:0f:c6:1e:ac:33:a6:ae:d9:d5:b2:9c:93:64:e6:20:cf:
2a:2e:9b:bf:66:e6:68:bc:7c:1c:48:94:6a:27:20:43:7d:cb:
44:de:10:be:3c:8b:89:2d:b7:ec:22:46:85:fd:d5:31:98:8e:
61:89:2e:aa:cc:1b:77:e6:da:ba:04:cc:d4:af:86:44:bf:7a:
51:78:9a:7b:aa:14:7e:1e:46:4c:f3:eb:04:55:ee:d2:6d:7b:
50:fa:72:e6:95:bd:d2:84:58:d0:fd:64:5b:1e:0f:f2:2a:a4:
34:e4:05:c6:9f:96:6b:75:5b:89:ae:19:fc:50:68:12:94:07:
f1:cf:da:d1:b3:c6:ea:fb:c8:92:d3:55:1f:57:a4:66:40:29:
05:8e:d6:f4:9f:ad:cb:f1:a8:d9:fd:a7:59:01:7d:89:0c:61:
8f:0c:d5:4d:dd:16:20:8e:96:90:b7:c1:c9:ba:90:74:42:ad:
1e:d9:8b:3d:02:6c:b2:e5:dd:c7:d6:7f:e0:7f:fb:87:24:98:
ca:e2:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:19 2026 by rpki-client