
$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133312e302f32342d3234203d3e203233363739.roa
File: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=
Subject key identifier: 81:CE:07:F7:CE:B5:90:A7:D7:F8:5B:67:FD:55:50:6B:1D:DE:03:EF
Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial: 684E51CC3F1B5782794F978CBF79B38523FDBD8B
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133312e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:51:42 +0000
ROA not before: Sun 03 May 2026 02:46:42 +0000
ROA not after: Sun 02 May 2027 02:51:42 +0000
asID: 23679
IP address blocks: 43.230.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4e:51:cc:3f:1b:57:82:79:4f:97:8c:bf:79:b3:85:23:fd:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Validity
Not Before: May 3 02:46:42 2026 GMT
Not After : May 2 02:51:42 2027 GMT
Subject: CN=81CE07F7CEB590A7D7F85B67FD55506B1DDE03EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:3d:2c:00:45:e7:f6:17:13:c4:1a:ca:7b:
75:32:19:e2:0c:a4:79:81:72:d7:db:85:9b:91:33:
ab:89:88:3a:7a:dd:c7:2c:11:c2:ba:0e:45:a0:70:
a0:72:81:1c:b5:8c:a1:29:07:bc:4e:02:02:39:78:
49:42:3a:96:28:44:bc:36:b2:b2:c9:3f:8c:65:48:
1f:ec:75:cb:cc:d0:20:b1:9a:e2:c1:e9:c0:42:dd:
9a:74:d4:04:f0:82:e4:ed:a4:85:4b:3b:47:9f:bf:
b5:ba:f1:0a:ea:92:d0:ef:e3:6e:68:aa:3b:45:bf:
d1:8e:4f:16:80:8d:89:12:81:d8:e2:ab:54:ea:a6:
07:ef:16:fe:af:0c:c9:80:ca:2b:cf:1a:bf:b0:f8:
8d:84:cb:38:6e:aa:e3:19:07:00:a2:3f:de:94:df:
b0:8f:71:58:cf:9e:fa:7d:70:80:80:0e:be:79:f4:
8a:a7:a1:db:2d:b3:3c:09:01:82:f1:f5:aa:2e:de:
34:62:7c:74:85:30:f6:d6:ee:2c:74:16:30:53:41:
61:ce:c5:bb:6e:7b:16:bc:0e:8c:c1:ea:3a:9f:a8:
cd:7d:29:a4:50:14:8d:6c:66:77:82:0e:31:20:9d:
13:c8:59:11:4c:05:80:0f:72:15:b1:b7:8b:63:27:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:07:F7:CE:B5:90:A7:D7:F8:5B:67:FD:55:50:6B:1D:DE:03:EF
X509v3 Authority Key Identifier:
keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133312e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.131.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d2:5b:d0:26:33:c4:a2:ed:c8:50:28:9b:2b:be:25:55:39:
cc:f4:e0:6d:65:78:0b:b9:61:1c:b3:f0:eb:c8:52:88:f5:6a:
6c:fc:7f:d4:d5:73:35:4f:4f:4f:6a:62:b4:32:61:51:23:fc:
4d:b9:71:39:97:b7:bd:47:81:8e:fa:d2:b6:f3:52:ec:14:ff:
a7:ac:27:b1:2c:af:7b:6e:5a:33:38:bd:cb:7d:2f:53:c3:a6:
c7:4e:73:89:83:7f:c3:bb:28:a3:77:b4:df:a0:d7:57:04:4b:
2e:6e:5b:b1:81:f8:4e:21:1e:23:83:97:52:62:1e:40:7f:bd:
6f:c2:ff:42:b1:6c:6d:a6:bf:04:80:d6:b4:50:0a:24:5d:3c:
fd:14:24:aa:00:8a:6c:6f:84:e9:fa:5c:6a:8c:dd:85:5f:4e:
74:4e:c4:e3:fa:d7:e6:8d:87:38:c2:c1:fe:ec:af:33:10:89:
da:83:64:fd:65:b2:0d:3f:8f:4c:fb:76:c1:c9:52:3f:44:d7:
30:ae:3e:d2:41:69:d6:50:c8:47:37:d1:0e:12:e5:c3:45:07:
25:e6:c3:08:35:1f:64:52:c4:f9:fa:44:3e:c6:29:92:48:b2:
93:de:70:38:3b:d9:78:b8:d5:64:fd:1d:01:29:3f:f9:f9:46:
35:d4:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:13 2026 by rpki-client