
$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa
File: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=
Subject key identifier: 67:1B:81:84:F5:16:AE:AA:F8:A1:51:8C:BA:B9:B9:C0:4D:89:38:84
Certificate issuer: /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Certificate serial: 29AF85988C12DD4E074502221FD95DA769AF0B5A
Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:52:32 +0000
ROA not before: Sun 03 May 2026 02:47:32 +0000
ROA not after: Sun 02 May 2027 02:52:32 +0000
asID: 38320
IP address blocks: 103.159.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:af:85:98:8c:12:dd:4e:07:45:02:22:1f:d9:5d:a7:69:af:0b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Validity
Not Before: May 3 02:47:32 2026 GMT
Not After : May 2 02:52:32 2027 GMT
Subject: CN=671B8184F516AEAAF8A1518CBAB9B9C04D893884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:75:a3:79:99:a8:ef:0f:49:f2:fe:f0:b8:
42:ea:65:05:62:84:ff:b5:27:ec:30:e5:dd:04:ef:
19:08:46:ef:3d:5f:ad:3c:b8:9c:6d:be:88:a2:5a:
d9:9b:f9:e2:94:0a:7a:98:3e:f5:11:41:fc:25:cb:
9b:06:ad:a4:64:80:75:44:c6:f8:6f:89:b2:d8:d3:
86:14:9b:81:98:90:c0:63:7a:a1:31:e5:44:b7:b1:
49:c5:d9:42:3b:ee:31:7a:94:45:a7:da:71:0f:d9:
a6:bd:ab:23:11:81:15:85:0f:65:71:76:5a:3b:54:
18:df:40:83:74:6c:c6:76:31:dc:c7:ff:80:d6:7a:
25:f7:df:53:0b:45:cc:ee:79:46:60:53:7a:54:4e:
eb:8f:6f:55:3d:c1:37:67:73:96:7b:af:88:f2:ff:
8f:0d:87:5e:92:95:ac:c7:31:84:47:c1:77:66:62:
76:d3:ab:71:98:c0:7c:90:c2:e5:c3:1a:48:d1:fc:
40:ec:44:fd:13:aa:25:0a:94:b9:e3:d9:e9:51:a9:
c2:a8:9a:9d:d6:b2:a4:e8:3b:79:49:5f:89:a3:89:
33:75:18:2a:e6:45:d6:1d:9c:01:cd:fd:45:6f:32:
4c:5f:62:97:0d:6b:b5:a1:be:59:ec:8b:3b:8b:a7:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:81:84:F5:16:AE:AA:F8:A1:51:8C:BA:B9:B9:C0:4D:89:38:84
X509v3 Authority Key Identifier:
keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.116.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:91:25:3d:e6:96:cb:0d:f3:1f:5e:33:fb:be:5c:45:f5:bc:
0e:11:67:52:01:40:d2:52:2c:ef:2b:6a:2e:9b:1a:b4:3b:73:
71:70:8f:23:f9:ca:d8:c4:90:cc:c8:a9:0e:c3:c5:40:1f:39:
a1:b7:ad:47:83:93:7c:08:85:3a:b4:9a:d6:d9:48:ed:71:84:
61:9a:8f:27:fa:e4:87:22:43:f3:f2:29:1e:65:fc:56:8a:ac:
dd:86:60:b6:0d:9c:6a:24:15:c8:aa:48:a7:49:fa:48:45:22:
bb:aa:1c:34:78:83:c6:9a:20:40:c5:c5:cb:34:71:67:9f:5c:
18:fd:ce:75:23:c8:c5:fa:fc:a1:1b:fe:79:44:79:82:1e:2e:
f1:36:e3:21:89:d5:27:68:ee:18:ff:a5:d9:83:da:34:68:64:
67:d4:40:40:5d:3f:54:88:b8:5b:ca:be:90:a8:04:55:8f:59:
59:af:30:75:fa:24:fb:e8:68:e4:6d:62:2e:65:d5:85:ff:bd:
cf:c9:af:00:45:b7:2e:18:da:7c:98:4f:aa:8b:d6:95:60:48:
c7:0b:2f:f4:81:b3:fe:6e:66:25:da:2c:8b:78:13:3c:fc:97:
08:c2:5f:32:89:9b:68:9c:71:3f:61:ef:ad:10:40:9b:4c:ff:
85:d6:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:36 2026 by rpki-client