
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa
File: 3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (raw, json)
Hash identifier: OSktfcUOEhaPa/dtCu8RSESeObR9iQ/cknxFlh9rYYM=
Subject key identifier: 6A:98:87:A4:77:58:17:67:89:AF:5D:7B:52:98:2D:78:2D:A5:33:04
Certificate issuer: /CN=9C227785E7A190271A628E29FFB9374BECA61154
Certificate serial: 5184FD5EF61E2FB290609790CF49665FCD52ECE8
Authority key identifier: 9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa
Signing time: Sun 03 May 2026 02:54:45 +0000
ROA not before: Sun 03 May 2026 02:49:45 +0000
ROA not after: Sun 02 May 2027 02:54:45 +0000
asID: 138073
IP address blocks: 103.122.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl
rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:84:fd:5e:f6:1e:2f:b2:90:60:97:90:cf:49:66:5f:cd:52:ec:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C227785E7A190271A628E29FFB9374BECA61154
Validity
Not Before: May 3 02:49:45 2026 GMT
Not After : May 2 02:54:45 2027 GMT
Subject: CN=6A9887A47758176789AF5D7B52982D782DA53304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:b3:31:c7:82:93:dd:c3:22:5b:a1:b9:05:
21:6c:22:3b:d3:50:de:d1:3f:01:3a:77:a6:73:07:
ee:ec:3b:55:84:dc:ae:40:3a:51:b5:87:3b:a8:9b:
15:1b:50:28:6f:f9:9c:e5:a5:3d:0d:db:f2:88:ff:
33:30:cd:7f:16:b5:a8:b6:59:60:89:3d:9f:81:98:
d1:4d:95:2d:93:0b:2c:ea:d8:df:b8:88:f4:94:12:
01:6a:40:8f:2b:b6:22:58:7f:5f:1c:2c:61:5c:0f:
39:be:50:02:ae:c1:24:5d:05:57:22:8a:5e:30:41:
7a:29:fe:e3:83:cd:a2:94:40:75:07:40:92:fd:a6:
d5:51:e1:74:91:9c:26:2c:2a:da:a6:d9:39:01:78:
19:d8:92:94:5b:8b:39:79:b1:fb:ae:37:1c:40:51:
0f:9f:cc:d5:1a:84:fa:64:da:6f:26:28:bb:4d:a7:
aa:19:1f:ee:1c:05:82:5b:d0:9f:ad:5c:6d:b7:3a:
9e:37:f4:cc:45:c2:88:bf:74:e3:1d:8a:c4:00:83:
77:6f:79:ab:26:da:c1:9c:38:78:c6:99:21:cf:ec:
b9:b0:f3:bf:4c:d7:fe:1c:15:a4:5e:85:fa:b4:6c:
33:ab:0b:d7:63:49:8e:2b:bc:ed:df:4c:24:d5:36:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:87:A4:77:58:17:67:89:AF:5D:7B:52:98:2D:78:2D:A5:33:04
X509v3 Authority Key Identifier:
keyid:9C:22:77:85:E7:A1:90:27:1A:62:8E:29:FF:B9:37:4B:EC:A6:11:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/9C227785E7A190271A628E29FFB9374BECA61154.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C227785E7A190271A628E29FFB9374BECA61154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:90:90:ca:c9:db:6a:af:fb:52:a7:f1:bc:de:06:e2:e0:5c:
3c:a3:26:e9:29:93:70:2e:4f:26:38:ba:42:af:14:a4:87:ca:
66:d6:0a:7f:58:58:63:b1:71:d4:f8:95:9f:51:4c:c7:3b:ac:
b2:4a:f7:eb:7b:a2:be:ee:1c:cc:48:67:69:26:39:7a:a1:6b:
27:92:18:9f:87:97:d4:15:0f:c9:49:28:6b:96:cb:6c:98:da:
f0:58:2c:e4:bb:59:94:42:d3:42:e7:f7:67:59:aa:8a:56:2a:
78:8b:b7:53:8a:2c:89:ab:cd:d4:a6:aa:a0:92:46:cd:a8:e6:
03:43:d6:03:7a:4b:f8:43:dc:bf:17:70:2e:c3:d6:e0:b0:ea:
f8:bd:bd:93:11:d9:62:17:05:02:5f:72:48:ae:ce:6a:48:17:
dd:00:c0:ba:76:c0:3f:79:0e:6f:32:19:e2:2d:06:4f:92:47:
2b:89:6a:7c:09:f9:ac:ea:75:62:f5:47:e4:ff:08:47:07:5c:
46:33:60:95:ec:df:1f:2c:49:fb:55:c3:df:3e:8d:53:40:30:
06:56:e8:de:27:ed:20:83:f2:31:51:07:6b:f9:e0:48:b3:a8:
68:cc:9e:7f:aa:c6:49:f0:f6:e3:68:f4:7a:44:0d:64:fc:54:
19:0a:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:25 2026 by rpki-client