
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
File: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (raw, json)
Hash identifier: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=
Subject key identifier: 91:29:4F:E5:E5:AB:9F:8D:59:FF:3A:41:43:37:6D:EE:01:1A:66:8A
Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Certificate serial: 598AA8CB13591B95D03868C006C95CE625D9C76E
Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
Signing time: Sun 03 May 2026 02:55:59 +0000
ROA not before: Sun 03 May 2026 02:50:59 +0000
ROA not after: Sun 02 May 2027 02:55:59 +0000
asID: 141642
IP address blocks: 103.162.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8a:a8:cb:13:59:1b:95:d0:38:68:c0:06:c9:5c:e6:25:d9:c7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Validity
Not Before: May 3 02:50:59 2026 GMT
Not After : May 2 02:55:59 2027 GMT
Subject: CN=91294FE5E5AB9F8D59FF3A4143376DEE011A668A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:44:c3:df:e3:95:8d:e4:c7:4f:1a:37:93:
16:9e:81:45:89:2e:99:06:d4:be:48:32:1c:65:b4:
12:f6:4f:de:30:d1:13:e7:eb:8f:b6:d0:0e:45:45:
3c:db:82:1b:65:f8:1b:85:57:71:aa:5b:89:aa:4f:
34:d1:cf:11:48:e6:a5:60:f8:51:18:14:31:b8:09:
8c:38:a5:42:fe:0f:ff:da:91:34:74:3e:47:5d:3d:
09:31:1f:46:2b:b4:7b:db:5d:ab:3c:db:11:4c:0e:
ed:1b:cd:f7:a5:69:f6:e8:b9:98:95:5a:d7:5d:a5:
a5:6a:1d:50:3c:ff:04:79:a6:5d:b5:fd:95:c1:e1:
31:34:ed:91:dd:5f:28:9a:e6:99:a8:d8:7a:fd:21:
75:77:05:a7:80:52:87:94:ac:69:e2:ea:2c:0c:77:
f7:ef:a5:ae:1e:64:92:88:61:10:86:a7:9f:da:5d:
8b:37:d3:5a:7f:b1:6a:87:87:f8:df:e2:1e:42:24:
10:7c:03:40:ca:35:13:75:76:90:59:b4:20:c9:16:
41:b5:e0:c8:9c:b2:14:57:89:42:ff:72:45:0e:43:
c7:5a:ff:28:65:4c:c0:33:38:84:5e:6a:9d:33:8c:
ad:33:59:3c:ee:96:e8:3c:27:6a:0c:11:fb:d4:7e:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:4F:E5:E5:AB:9F:8D:59:FF:3A:41:43:37:6D:EE:01:1A:66:8A
X509v3 Authority Key Identifier:
keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.62.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:6a:3e:31:84:59:2b:4e:43:b1:a7:e5:a8:8e:75:b4:79:21:
62:93:04:57:a8:85:66:2f:60:3a:e1:21:d5:e2:5f:64:2a:6c:
b5:93:38:ce:ce:26:92:0e:a9:14:e0:e7:17:a2:93:4b:f9:23:
63:de:5c:ab:f8:6a:b6:b1:eb:89:33:d9:fc:3b:76:ef:38:c6:
3c:be:f4:c7:7e:85:aa:23:7f:5b:5a:5a:3e:65:6d:76:b6:2b:
55:ae:3e:08:c1:99:3c:a5:1f:59:ac:fa:ef:43:57:c2:30:fb:
0a:0a:41:5a:c7:7c:ce:65:5b:96:3a:78:48:0c:7d:28:be:c8:
ed:61:3e:8f:7c:33:c0:72:17:e7:79:c9:b1:81:ff:0e:35:b1:
d9:f2:64:f3:3c:44:d9:cf:e7:14:a6:ed:cd:e7:4a:ad:aa:73:
9d:9c:e6:ff:5f:97:e9:b2:41:58:85:3d:de:50:ec:a4:24:17:
ab:13:fa:e9:9f:16:33:ae:8b:bc:a8:9c:8f:7d:49:ce:0a:73:
96:7e:96:8c:1a:49:a0:7b:b2:7a:d4:0b:74:8f:b9:73:4b:29:
de:3b:bd:fc:b0:a0:66:eb:c3:ac:f2:22:bd:02:e3:5b:78:13:
ae:2d:bd:e9:c9:9f:1a:a3:42:f2:3b:dc:0f:52:bd:33:ea:54:
2e:3d:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:12 2026 by rpki-client