
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa
File: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier: Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=
Subject key identifier: 8B:F1:A4:3F:89:69:3F:9E:A7:4C:84:23:D2:A5:47:BD:91:39:F3:3C
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 37F9DC908FDA3FE21318B2CE1A19D93838580138
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa
Signing time: Sun 03 May 2026 02:56:15 +0000
ROA not before: Sun 03 May 2026 02:51:15 +0000
ROA not after: Sun 02 May 2027 02:56:15 +0000
asID: 141968
IP address blocks: 103.167.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:dc:90:8f:da:3f:e2:13:18:b2:ce:1a:19:d9:38:38:58:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: May 3 02:51:15 2026 GMT
Not After : May 2 02:56:15 2027 GMT
Subject: CN=8BF1A43F89693F9EA74C8423D2A547BD9139F33C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:4b:ed:50:87:c8:e0:7a:6f:fe:53:4a:3e:
f1:ff:1c:9f:03:b6:70:c7:ca:ae:4a:cc:df:b9:ce:
a2:61:bc:8f:9e:fc:5e:d4:23:b6:e5:08:35:74:4e:
e2:4c:ee:96:01:30:a3:7a:5b:c9:4f:b1:09:57:8c:
a4:a0:4a:e5:67:51:ac:d4:64:c3:e5:eb:0f:5a:4c:
67:db:32:23:f2:2c:ed:8f:0f:49:c4:85:a0:a6:bb:
79:15:f3:7f:51:68:e8:fd:5c:b3:03:00:0d:23:b5:
ee:f6:c6:c8:24:54:8f:e3:78:29:ba:a1:fc:ef:cd:
d0:02:60:5f:ec:7a:9c:75:59:a6:ea:87:64:84:49:
b8:2e:8a:17:01:8a:f9:0c:5d:0b:a2:ff:65:6e:ad:
5e:63:f6:ec:9d:4b:76:b2:9f:4e:e7:70:63:94:4c:
3f:6e:61:fc:4a:ec:f1:84:cf:0d:19:3b:f6:b1:9a:
b8:fb:fb:48:25:0a:c5:f1:fb:a5:12:25:69:73:91:
be:87:d3:da:da:98:c4:4f:18:c2:09:8a:7c:51:40:
5d:ef:05:0e:6b:b2:b0:47:d6:0b:f0:35:d9:e4:0e:
4a:1c:e8:49:b4:62:b1:03:4d:20:59:43:e3:fb:44:
45:03:ad:1b:ef:fa:b2:cf:f8:da:c0:11:35:04:1e:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:A4:3F:89:69:3F:9E:A7:4C:84:23:D2:A5:47:BD:91:39:F3:3C
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:15:64:62:c6:48:a0:53:2c:45:24:b8:a5:4c:f4:af:fe:3d:
ef:ae:40:e1:43:1e:e4:15:2a:32:7b:4e:17:bb:f6:a7:02:7c:
91:73:a9:af:52:9c:86:2d:52:23:36:60:74:f2:01:2d:f2:fb:
07:54:4a:89:61:76:d2:fe:df:86:db:13:e3:0b:13:d3:06:b6:
e8:35:b7:68:6b:1c:31:92:d8:c8:af:06:1f:4a:f1:c1:83:6f:
f2:68:fc:72:ce:6a:11:4e:8f:48:3a:9d:fd:2a:97:f6:b8:33:
b1:ec:f1:be:b2:f4:bb:61:e1:b0:61:58:74:67:86:93:0f:a8:
f3:51:1b:13:f4:5e:38:0f:aa:8a:2f:57:03:36:29:99:5c:52:
3e:77:79:1b:4b:46:6c:0e:9c:b5:33:10:8d:35:aa:85:49:f3:
91:c6:be:70:1c:29:90:e3:e1:b5:9d:0a:14:0c:48:2c:8e:3e:
cb:42:55:76:d0:9e:4f:bb:18:09:59:e8:e8:1e:15:83:e4:fc:
f7:e6:79:6a:c3:fb:7c:0d:0c:d8:be:55:77:0a:b8:25:98:e0:
43:de:78:80:8e:60:41:0f:6d:38:e5:93:a1:94:c5:59:e3:87:
f2:e2:7f:2b:08:19:99:21:f4:48:cd:a8:74:cb:96:ca:bd:e2:
1a:f6:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:54 2026 by rpki-client