
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32342d3234203d3e203633383237.roa
File: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=
Subject key identifier: 74:0E:AF:3B:7B:A5:9F:77:29:94:E1:5D:03:D8:ED:05:4D:29:EE:92
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 6DED00FEEBA6C7403116689BBAECE61039E689C1
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32342d3234203d3e203633383237.roa
Signing time: Sun 03 May 2026 02:51:58 +0000
ROA not before: Sun 03 May 2026 02:46:58 +0000
ROA not after: Sun 02 May 2027 02:51:58 +0000
asID: 63827
IP address blocks: 103.39.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ed:00:fe:eb:a6:c7:40:31:16:68:9b:ba:ec:e6:10:39:e6:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: May 3 02:46:58 2026 GMT
Not After : May 2 02:51:58 2027 GMT
Subject: CN=740EAF3B7BA59F772994E15D03D8ED054D29EE92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:e2:73:4a:b1:c5:dd:28:7f:a6:f6:14:3c:
93:27:29:4e:96:2a:07:69:a1:c6:27:15:de:ad:74:
18:82:6f:32:63:36:2e:ec:b5:8a:e3:9e:76:ff:90:
08:9c:11:92:ad:a9:ff:49:3a:a5:8d:c9:1c:b0:c5:
f8:3a:5d:ff:a9:f4:12:a4:e2:82:67:81:06:d2:45:
d2:34:d3:b6:1c:5c:f8:82:07:7c:6a:94:b8:76:75:
22:ce:1b:32:ab:33:4f:d2:ce:e2:17:cf:d1:36:25:
44:89:b6:ed:4c:9c:d7:a9:f0:48:ec:15:e3:4c:89:
fc:e4:0a:4d:4c:3b:5b:bb:3c:2f:9e:18:8d:95:0d:
e7:15:87:51:8c:94:64:e5:1b:85:e2:cf:94:e2:54:
de:83:3e:29:1d:21:bb:3f:89:06:5c:78:0b:d7:65:
ea:4b:25:b0:50:5f:5b:c2:aa:e6:95:91:42:b6:94:
1c:6e:33:06:76:1d:00:e3:4e:fe:6a:78:08:57:71:
3d:3b:19:32:09:48:4e:da:5b:4f:82:a4:92:3d:b1:
31:fa:88:c2:c3:39:6c:1e:57:6f:3f:8a:36:e8:e1:
a1:92:16:4f:07:54:26:67:0a:d4:c2:5d:c8:5c:17:
04:b9:65:04:b2:51:21:49:6a:df:8d:89:36:51:ce:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:AF:3B:7B:A5:9F:77:29:94:E1:5D:03:D8:ED:05:4D:29:EE:92
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:97:96:ab:9f:5d:47:c9:f5:89:22:09:00:20:3c:05:89:16:
44:4c:27:9c:b9:c3:27:ac:5f:90:b2:fb:2a:1c:92:45:3c:da:
02:42:e4:7f:9b:09:2e:52:b5:f3:36:86:f7:23:8d:34:f2:ab:
7d:d8:03:32:c3:bc:51:98:64:af:81:b0:ca:a5:30:10:27:aa:
e6:d6:a7:85:e0:d1:9d:58:6c:50:ea:06:79:b6:c1:24:38:18:
e0:21:05:c3:50:17:84:d5:34:c1:4f:9b:ed:7a:10:48:e8:2b:
f0:db:c6:b6:ef:c6:db:b3:1e:75:de:8c:ad:32:17:c7:88:66:
73:d4:50:32:d6:db:2f:78:80:51:50:0e:9d:bb:16:e7:20:20:
6e:02:b2:f6:84:ce:b9:a8:ef:34:6b:c9:db:0b:54:10:7c:61:
b8:d4:2b:62:50:34:e6:5d:5c:64:2a:e6:ce:3a:6c:52:1c:d5:
a3:6f:d5:95:28:1e:8c:f6:4c:b1:ff:16:3e:f6:50:8a:9e:2f:
3a:be:2d:3c:0b:8d:91:0f:0e:51:b8:f5:f9:c7:85:f8:0f:2c:
f0:fa:b1:60:9e:76:18:9a:6b:e3:e8:a1:33:23:68:f0:1c:94:
15:a9:f4:e6:48:ec:0c:8f:2f:f9:ea:b4:c0:62:71:7e:33:02:
0b:dd:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:30 2026 by rpki-client