
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa
File: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (raw, json)
Hash identifier: 0DaR6EQXz9qNKopRfjWSu/bXijoSdhpj5fJcKyJycxw=
Subject key identifier: 49:E1:91:DB:2B:08:BC:E6:CF:D6:D0:19:C1:AF:F8:CD:AB:EF:BA:37
Certificate issuer: /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial: 3AC8647BA5B6B79F80465E2BE2FFB1FE0B508F8B
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa
Signing time: Sun 03 May 2026 02:54:37 +0000
ROA not before: Sun 03 May 2026 02:49:37 +0000
ROA not after: Sun 02 May 2027 02:54:37 +0000
asID: 132829
IP address blocks: 103.134.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c8:64:7b:a5:b6:b7:9f:80:46:5e:2b:e2:ff:b1:fe:0b:50:8f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Validity
Not Before: May 3 02:49:37 2026 GMT
Not After : May 2 02:54:37 2027 GMT
Subject: CN=49E191DB2B08BCE6CFD6D019C1AFF8CDABEFBA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:48:84:46:69:39:60:2f:2e:fb:08:e2:98:
66:40:51:01:89:e2:64:15:7d:e3:af:e3:67:1e:55:
2c:1c:32:a2:45:3b:94:5a:f7:fe:11:ab:76:66:aa:
3c:7a:3c:62:7b:c0:dd:c6:fa:d1:d1:a2:27:4d:b9:
15:59:0c:6e:21:d1:93:73:5e:79:fa:fa:c5:2e:5e:
74:e6:a3:ab:e5:34:e0:72:99:98:0a:c3:b2:6a:7b:
3a:23:c5:99:67:83:b7:8c:2d:7a:1a:e8:2b:da:ef:
bf:30:7a:13:5f:25:da:09:c3:e4:30:dd:29:8f:54:
00:d6:e2:3a:a5:b1:6a:5d:37:52:98:9b:ad:35:d1:
dc:a0:e6:40:2c:2d:18:e3:c3:53:33:18:26:d5:f7:
d7:93:19:63:1e:8f:fb:06:bd:e4:d5:fc:09:f5:5c:
ae:ef:1d:01:54:77:11:8b:7f:15:40:3d:93:42:d4:
c1:98:d6:c1:28:4d:c7:46:5e:bb:3d:e6:7f:f7:b6:
bd:8c:39:59:c9:14:b1:34:7e:01:6b:2c:22:c2:7f:
7f:c2:2a:76:ac:fa:53:c9:4c:8d:11:81:60:77:db:
58:d5:96:a1:d0:88:b1:78:4c:65:31:1d:6e:be:8e:
34:6d:6b:5d:6b:a5:48:e9:1e:3d:e9:c2:fe:11:05:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:91:DB:2B:08:BC:E6:CF:D6:D0:19:C1:AF:F8:CD:AB:EF:BA:37
X509v3 Authority Key Identifier:
keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.49.0/24
Signature Algorithm: sha256WithRSAEncryption
f7:c0:c6:33:85:35:05:5d:09:ae:ae:9e:39:8c:cd:2b:55:1c:
38:11:e3:5b:de:2a:d8:15:24:70:98:51:18:fd:1a:4e:af:a5:
5a:1a:cf:e7:d6:16:5a:50:59:d0:f5:b5:4c:39:54:e5:5b:16:
46:7f:a7:2e:73:3f:27:3d:34:42:73:44:b8:b7:76:93:df:82:
67:b8:85:a3:48:8f:84:3a:19:5e:93:ff:c9:5c:f8:0c:80:6f:
d3:4c:5b:62:bf:b9:5f:fd:bb:50:1d:0f:bb:a3:cc:f0:5f:f2:
bf:80:15:05:28:ea:12:40:5a:9d:94:7f:7d:f3:d1:6f:f9:8b:
3f:8e:e8:57:ad:c1:a6:0d:52:cb:9c:90:fd:85:9a:84:de:69:
15:e5:91:67:1a:9b:16:cd:d7:29:d2:8e:04:95:28:bc:df:78:
ae:44:5b:1c:03:ca:fa:eb:5f:7b:2d:8c:f0:dd:fe:a9:f5:0a:
ea:e9:95:e2:fe:11:da:11:bc:14:30:5c:d2:69:55:70:80:e2:
99:4b:c4:40:01:2e:5f:05:a7:1f:57:c0:7b:b0:a6:2b:3f:09:
b3:09:06:f2:2c:ea:3c:5c:7e:31:6b:4e:0f:31:0f:42:53:a6:
f6:07:5b:97:28:27:54:43:72:40:16:e3:cf:51:73:e3:4d:b0:
04:ce:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:51 2026 by rpki-client