
$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
File: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=
Subject key identifier: D1:34:15:7D:05:A5:0D:7C:DA:FE:61:2C:D2:0D:6A:FD:58:E0:68:68
Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial: 77F0C432D5A3E7D9F8FBA660ADA5FCFABE570928
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:51:41 +0000
ROA not before: Sun 03 May 2026 02:46:41 +0000
ROA not after: Sun 02 May 2027 02:51:41 +0000
asID: 23679
IP address blocks: 103.238.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f0:c4:32:d5:a3:e7:d9:f8:fb:a6:60:ad:a5:fc:fa:be:57:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Validity
Not Before: May 3 02:46:41 2026 GMT
Not After : May 2 02:51:41 2027 GMT
Subject: CN=D134157D05A50D7CDAFE612CD20D6AFD58E06868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:58:1f:37:30:9b:42:57:75:4d:06:fe:c2:54:
93:00:a6:4f:b5:05:f3:e2:ab:b0:e0:42:c3:dd:d6:
a3:31:87:09:58:4f:42:5c:58:bc:48:92:31:13:2a:
de:60:7c:f8:ff:ec:f8:7c:ae:ee:f6:54:3e:6d:e1:
32:59:d2:43:0e:df:b3:89:ce:fd:26:08:17:54:e6:
df:40:f0:bb:b2:c3:66:aa:b3:ad:2c:85:fe:7f:34:
29:9d:04:ff:b9:0f:64:f7:16:43:6e:6c:23:83:b5:
c8:7d:93:27:6b:c6:b0:f4:01:73:0e:21:f2:27:e0:
4d:55:8f:1f:b0:35:95:91:d4:6b:30:b6:e3:bd:84:
e4:16:bc:c7:a0:78:44:70:2b:36:c7:bf:78:5d:28:
53:6b:9a:59:54:3a:a6:e9:e4:f1:8d:41:e7:64:5b:
9f:48:cf:8a:33:55:f2:40:fc:e5:78:41:bd:6b:dc:
bd:7b:c9:3a:05:33:dd:91:b2:98:65:0f:d2:ee:b1:
a8:08:72:1b:3b:fa:c9:06:a2:1a:d4:b9:b4:d2:c0:
8b:da:01:8d:50:f0:5a:2f:70:d3:0d:48:58:7f:63:
8c:40:82:a9:a6:37:67:63:07:da:b7:1b:04:99:ee:
80:88:b8:d7:7d:3f:2c:f6:7e:e8:cb:cc:55:f6:15:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:15:7D:05:A5:0D:7C:DA:FE:61:2C:D2:0D:6A:FD:58:E0:68:68
X509v3 Authority Key Identifier:
keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.202.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d4:c7:2a:cd:b3:ca:c4:75:a2:70:71:74:77:64:3a:34:7e:
c5:29:08:6c:8a:94:3f:ac:b7:c7:af:9c:66:05:ea:03:4e:19:
95:d3:d3:39:cc:49:09:7a:cd:eb:18:67:03:e2:c0:76:86:db:
8e:66:ba:b4:52:64:85:de:c5:30:23:68:ce:31:b1:2f:51:6d:
3a:88:4e:2c:82:d7:47:c2:b5:d7:64:fe:62:14:54:cb:4a:b0:
2a:01:4f:84:7e:ed:62:46:04:66:a9:7e:1f:d8:11:37:ac:cd:
4d:e9:a2:40:8d:19:66:0d:86:09:c2:5f:79:dc:7f:87:0c:37:
8d:b0:65:99:8b:ed:df:33:6b:31:ba:bd:ae:10:1d:0a:b1:ce:
8d:a8:d3:a6:cc:53:64:cc:1d:47:41:31:78:dc:4c:7e:48:56:
5d:2c:89:6c:1e:1e:8c:b7:61:5c:b7:e1:e2:5c:9e:b8:92:b6:
7b:b8:9d:a3:66:e0:c5:23:57:50:bb:fc:63:73:29:1f:b6:83:
f8:0a:43:f4:75:aa:f5:08:8e:dd:a0:8a:9c:85:7d:9a:69:8e:
8d:65:b4:49:9f:4f:4b:2a:f5:b1:ad:0d:97:f0:26:bc:a1:d6:
91:40:36:fb:bc:2a:ef:9d:b9:b4:e5:9a:01:54:54:a6:f5:f1:
fc:5d:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:55 2026 by rpki-client