
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
File: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (raw, json)
Hash identifier: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=
Subject key identifier: E2:83:1F:CF:1F:BC:81:93:F6:59:65:0F:12:67:79:9B:22:CB:CB:E4
Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D
Certificate serial: C1D1A5028469C8672902C9C2DEADB5B05FCFBF
Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
Signing time: Sun 03 May 2026 02:55:57 +0000
ROA not before: Sun 03 May 2026 02:50:57 +0000
ROA not after: Sun 02 May 2027 02:55:57 +0000
asID: 141602
IP address blocks: 103.159.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl
rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c1:d1:a5:02:84:69:c8:67:29:02:c9:c2:de:ad:b5:b0:5f:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D
Validity
Not Before: May 3 02:50:57 2026 GMT
Not After : May 2 02:55:57 2027 GMT
Subject: CN=E2831FCF1FBC8193F659650F1267799B22CBCBE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:0b:bc:94:b1:16:7a:23:2c:92:c8:57:96:
f2:13:3e:1f:5e:7c:b1:79:9c:2f:0b:2e:42:b1:f1:
87:e5:74:d5:a3:2f:e5:9f:6e:33:1e:d4:5d:b7:e1:
a7:30:28:48:bd:93:ee:36:2e:b4:e5:46:8f:42:97:
01:fe:3c:ce:8c:a1:8a:76:2c:8b:b1:7f:f3:e4:9e:
9b:b5:c6:47:07:e3:e1:ba:30:ad:bd:5d:91:65:8d:
8d:d1:b6:74:2d:87:99:c0:b1:1e:2d:75:31:25:c8:
c6:8d:d8:18:70:90:f2:95:df:e0:0f:f7:f0:e4:ad:
6d:29:5d:71:6f:8e:f7:a2:a3:76:9d:50:6a:73:19:
3e:3c:4e:45:19:3a:f3:dc:ed:86:27:7f:f4:e1:bd:
4d:46:6b:db:2a:18:b6:57:75:74:f6:1a:90:86:55:
cc:92:7a:27:d8:86:4c:10:89:04:e7:e2:b2:c2:7d:
0e:36:47:6c:79:13:49:f8:c3:73:1d:36:68:ed:36:
f8:93:eb:2e:cc:73:96:51:63:64:c9:09:9d:ea:b5:
69:61:ba:83:26:3b:80:53:eb:5a:ca:9f:90:8e:ed:
cd:e6:64:7c:27:f9:c9:9d:57:e1:58:4b:09:83:d8:
b1:18:89:b4:32:45:8c:5d:36:eb:61:9a:a9:4d:22:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:1F:CF:1F:BC:81:93:F6:59:65:0F:12:67:79:9B:22:CB:CB:E4
X509v3 Authority Key Identifier:
keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.112.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fa:69:bf:6d:74:77:b5:08:24:9a:8a:5b:cb:55:2f:61:f2:
1c:22:f5:87:f9:0f:9d:23:f4:8d:c4:65:a2:2f:5a:7a:9f:d8:
2f:b8:95:60:bb:9d:9c:2a:c9:d5:5e:da:01:42:a0:be:44:87:
28:a9:0e:ad:3d:14:59:76:67:5f:a4:3a:a1:aa:51:da:53:ee:
e7:8a:90:df:e4:63:cc:8e:07:b7:2e:35:5c:6e:88:9b:08:08:
65:82:f0:46:bf:39:96:68:f3:e5:f1:d1:89:74:25:fc:81:f7:
43:9a:92:37:40:7b:bf:62:fa:6f:b4:de:cd:b4:ad:f0:27:16:
27:c8:72:3b:e3:08:a5:6e:47:ec:b8:aa:3a:9e:ce:09:01:4c:
f2:44:c4:fc:8b:77:e9:89:a8:69:07:df:a6:e2:6d:ff:f2:c6:
8c:6f:60:d6:1a:43:ea:a1:7c:05:d6:b3:d5:00:94:b8:07:a1:
92:71:29:7b:a6:dc:14:6b:36:ce:f1:97:f8:ed:ef:da:a4:d9:
cf:b5:a6:8f:15:e1:3b:8b:b4:bd:30:ab:3a:19:6f:14:83:05:
91:4f:11:db:b4:96:a9:91:f1:cc:7a:a8:a2:48:3b:c2:01:f7:
03:30:f7:de:1a:35:02:05:0e:db:2f:18:73:0e:db:fb:e6:93:
f7:1c:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:01 2026 by rpki-client