
$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa
File: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=
Subject key identifier: 0C:C3:1B:08:A2:F4:BD:B8:30:B0:24:7A:CC:F3:E7:A1:01:C1:AE:7A
Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial: 62EC174AC334126FAF651D73C8C753ED246D5717
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:51:43 +0000
ROA not before: Sun 03 May 2026 02:46:43 +0000
ROA not after: Sun 02 May 2027 02:51:43 +0000
asID: 23679
IP address blocks: 103.238.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ec:17:4a:c3:34:12:6f:af:65:1d:73:c8:c7:53:ed:24:6d:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Validity
Not Before: May 3 02:46:43 2026 GMT
Not After : May 2 02:51:43 2027 GMT
Subject: CN=0CC31B08A2F4BDB830B0247ACCF3E7A101C1AE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:32:bc:eb:de:9e:2f:2a:83:dd:a8:6c:45:
93:3f:eb:3c:4b:06:94:42:2e:76:42:7b:97:51:85:
dc:c6:06:49:9c:1b:a2:51:43:cf:69:81:34:31:31:
e0:8a:17:6f:78:48:dd:97:7c:82:eb:58:8d:96:bb:
c5:cb:53:1f:98:0f:92:ca:6e:7d:f9:b0:ce:a6:d3:
cf:4b:e6:df:09:97:2d:b3:4c:7e:6f:8b:05:c4:ed:
2c:4a:08:6f:7e:33:d4:ff:e2:03:54:57:8e:72:39:
1b:98:d4:7a:44:11:50:7c:c3:24:d1:1e:22:5d:c8:
5f:7a:33:fe:8e:36:18:19:39:3b:48:ba:62:ba:85:
0a:fa:87:ca:18:6a:2b:03:3a:bb:31:58:70:ef:37:
16:8c:de:c3:6d:b4:0b:19:79:2d:a1:13:09:8c:19:
a7:b1:df:87:85:53:46:f6:58:8e:ae:1e:7a:84:51:
60:82:40:c2:59:ed:08:51:25:95:60:7b:f1:09:90:
95:46:7b:4f:bd:e9:aa:a3:80:37:9a:7c:85:af:01:
83:f8:d3:ac:d5:50:6b:85:c7:b6:51:27:52:1f:c9:
50:2d:fa:dd:f8:52:d3:ee:ed:78:2e:24:4d:81:67:
37:58:10:83:de:f3:b5:4d:5c:aa:81:b6:b2:2d:5b:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:1B:08:A2:F4:BD:B8:30:B0:24:7A:CC:F3:E7:A1:01:C1:AE:7A
X509v3 Authority Key Identifier:
keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a4:18:8f:bf:1e:a2:9b:6d:20:00:c1:2c:c6:67:72:d2:d7:
2e:fc:c2:76:20:85:01:cd:99:54:1e:38:09:68:11:ed:96:8c:
b7:d8:0d:c1:f4:22:d2:b7:35:2c:f1:b2:fe:bc:67:48:28:e9:
72:af:a6:57:e1:e5:ee:b5:48:2d:30:35:b2:da:0e:a5:56:79:
de:2f:17:a0:e8:23:64:64:47:9e:f8:98:44:47:2e:67:18:14:
52:27:c2:e7:b2:b8:e8:2f:9b:b4:0d:66:7f:d5:cd:1b:3e:54:
96:fb:ef:d7:a4:bc:da:d9:a6:8a:9f:7e:5d:05:b8:f9:6c:43:
c6:39:ae:09:ca:52:d3:7b:57:71:bc:7b:3b:74:59:55:b7:e4:
78:1b:5e:ab:4f:3a:7e:c7:22:70:b3:ca:fa:ef:9a:88:b5:69:
80:9a:b1:95:5a:66:00:a2:65:1e:86:18:cc:c7:21:e1:15:e4:
5f:e2:74:41:31:ed:9a:33:f8:a6:bf:2c:4a:74:d0:48:8f:50:
3d:ae:54:57:85:bf:96:df:4c:95:db:2d:2d:6a:9d:0e:5c:57:
20:32:b1:13:24:38:a8:b9:36:39:b5:ce:3b:b5:37:3a:55:6c:
7b:e1:a4:80:87:6f:36:4b:f5:01:c5:3e:ae:32:15:59:28:06:
cd:00:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:25 2026 by rpki-client