
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
File: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (raw, json)
Hash identifier: B5ukxagssxCFfNmL/M+i5ue/1MCU5d6NS/ddZ7eTpIY=
Subject key identifier: 4D:2D:5F:F8:7F:F3:74:A9:96:1C:28:E1:B6:41:AF:00:A2:12:3D:D3
Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2
Certificate serial: 35D847CAF7FE7225C575B38E78A86AF99935979B
Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
Signing time: Sun 03 May 2026 02:53:41 +0000
ROA not before: Sun 03 May 2026 02:48:41 +0000
ROA not after: Sun 02 May 2027 02:53:41 +0000
asID: 138080
IP address blocks: 103.131.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl
rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d8:47:ca:f7:fe:72:25:c5:75:b3:8e:78:a8:6a:f9:99:35:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2
Validity
Not Before: May 3 02:48:41 2026 GMT
Not After : May 2 02:53:41 2027 GMT
Subject: CN=4D2D5FF87FF374A9961C28E1B641AF00A2123DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:48:f8:e2:86:58:88:34:d3:b5:8b:f3:2b:
62:44:c8:e0:72:2a:ff:3a:60:0e:42:5f:b1:68:ad:
df:a0:33:67:2e:1a:99:b4:28:3c:4f:ce:34:77:b8:
00:40:1d:94:c4:cb:5e:86:84:9e:39:ca:26:3d:3d:
70:64:23:64:ee:22:09:79:a7:08:78:a2:5d:f3:70:
01:b2:cc:69:4e:16:c3:49:a7:b5:cb:be:1d:25:57:
33:0d:05:44:73:c9:df:24:d3:7b:9a:0b:88:76:01:
b5:76:b3:49:10:34:ea:82:00:9a:1f:32:4b:e5:87:
ac:7a:3f:14:d2:bc:3a:78:70:fc:37:48:15:ba:63:
0e:3e:f3:27:7e:23:4d:6e:36:88:6f:a2:76:ef:d1:
c0:93:7f:6e:33:0a:fa:5d:8e:ee:30:a4:0f:9a:85:
14:5a:4f:a5:0d:cc:27:27:7e:99:b1:ca:dc:39:7e:
b6:65:ea:f0:99:0b:07:a9:f6:f6:07:34:78:80:1f:
62:25:73:ed:17:e5:e8:05:f7:b3:ce:8b:af:77:3d:
77:cc:85:b7:ca:27:eb:c9:2a:72:bf:60:d5:81:5a:
be:06:38:fb:88:bf:f2:50:82:5d:df:81:03:2b:6a:
8c:f2:2a:bd:c9:97:76:35:7f:85:d2:2b:2d:de:0d:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5F:F8:7F:F3:74:A9:96:1C:28:E1:B6:41:AF:00:A2:12:3D:D3
X509v3 Authority Key Identifier:
keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.16.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fe:da:ed:c9:5d:59:94:92:b4:94:74:24:0d:55:0d:92:cd:
b7:c5:68:69:e9:c8:a9:cf:6c:ea:c3:28:c2:9b:02:75:c0:4d:
05:d0:b9:cb:25:13:b2:2f:25:02:6c:99:87:1b:54:09:a3:69:
26:17:67:76:64:d9:ed:06:66:38:3c:6d:2a:17:82:0a:8b:98:
d5:00:ed:80:be:77:92:95:57:ff:6b:00:c3:79:ab:bf:c9:98:
87:05:5d:17:76:41:ab:d9:14:76:87:63:46:dd:2d:5b:ed:74:
66:8c:f4:ff:7a:72:68:e3:14:0b:6a:0f:e0:4e:ac:d4:42:eb:
f3:d2:97:b2:7e:cd:f9:8f:e4:53:5c:d2:0b:42:63:59:5a:7f:
44:99:05:57:24:62:a6:57:f8:74:f4:fe:da:0d:30:99:66:59:
40:cd:da:e7:4c:b4:7f:48:a4:9e:8b:d2:21:41:e0:02:ec:8c:
d3:f7:7b:34:9c:0e:30:f7:cc:e2:6a:6a:ee:07:07:4d:33:e0:
17:82:51:e1:05:70:26:aa:ea:e2:6b:60:59:41:fc:4e:b4:de:
1f:c4:b1:8b:e9:7d:8a:ba:2b:01:fe:96:ae:d1:ea:e9:a3:f7:
97:48:19:64:b3:13:f5:91:7e:c2:27:ec:74:1b:d2:21:84:54:
42:2e:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:05 2026 by rpki-client