
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32332d3233203d3e203538383230.roa
File: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (raw, json)
Hash identifier: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=
Subject key identifier: FC:2B:D8:08:96:4D:5A:2B:E6:B9:C2:B5:89:B6:08:1E:20:8E:C1:9D
Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584
Certificate serial: 09031BFC6EC50FEDE9629C06C168DA503CB6A88D
Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32332d3233203d3e203538383230.roa
Signing time: Sun 03 May 2026 02:56:25 +0000
ROA not before: Sun 03 May 2026 02:51:25 +0000
ROA not after: Sun 02 May 2027 02:56:25 +0000
asID: 58820
IP address blocks: 103.97.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl
rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:03:1b:fc:6e:c5:0f:ed:e9:62:9c:06:c1:68:da:50:3c:b6:a8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584
Validity
Not Before: May 3 02:51:25 2026 GMT
Not After : May 2 02:56:25 2027 GMT
Subject: CN=FC2BD808964D5A2BE6B9C2B589B6081E208EC19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:ed:e1:73:1e:0d:5a:ed:6f:e5:d2:8e:ab:
49:f7:33:ff:4c:51:2c:34:de:26:ac:e9:20:ed:2c:
f4:49:29:db:51:89:5b:d3:1a:a2:86:e3:36:dd:8d:
61:71:2b:0e:5a:cb:d7:53:55:27:94:24:65:a7:fc:
d5:ef:40:2c:24:1e:24:46:f5:b3:af:0f:d1:9c:e8:
db:02:e5:70:34:a4:6e:31:f4:83:f6:00:7f:55:c7:
56:1c:71:0d:7d:30:8c:7e:2c:7c:94:02:d2:7c:17:
9c:f0:ff:0d:3c:aa:9b:2f:e4:1e:76:b4:ca:61:71:
63:c4:0f:59:e1:10:67:9f:46:ee:bf:8d:b6:0f:1c:
ec:6f:70:53:b1:86:11:e2:bb:0f:5f:d1:04:d0:7a:
47:00:5b:c2:fe:0b:01:29:70:24:c2:4d:f1:d1:a5:
8a:4d:ce:28:80:ef:64:85:3d:33:51:b4:38:c6:ed:
2c:7f:3d:3b:e9:5f:25:7f:65:86:91:a0:7c:a2:13:
4b:76:2b:00:cd:5c:3a:f3:c5:b3:70:94:ff:e3:e4:
94:b7:c8:29:79:5d:44:52:6b:26:dc:ad:e6:d6:a6:
18:27:b9:f0:59:f6:e6:46:61:77:19:2e:25:59:3d:
ea:c9:06:62:36:02:46:ee:f8:96:a4:be:25:73:0c:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:D8:08:96:4D:5A:2B:E6:B9:C2:B5:89:B6:08:1E:20:8E:C1:9D
X509v3 Authority Key Identifier:
keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32332d3233203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.140.0/23
Signature Algorithm: sha256WithRSAEncryption
19:94:f8:c1:0d:ea:b1:fa:6b:25:2d:ed:1f:44:ae:ac:ec:ff:
ce:43:7f:32:d0:1b:98:85:91:77:07:90:22:bb:2d:92:35:36:
43:25:79:b0:2f:bb:94:07:eb:a8:e1:9c:28:0d:f4:91:ce:2c:
31:3f:db:c6:b2:74:89:4a:fb:31:53:65:50:74:1d:c8:7c:10:
fc:04:00:f5:fd:d5:88:5e:7b:bc:35:e3:04:85:51:93:db:87:
8e:45:e5:b3:26:4b:7c:cd:8e:56:90:33:0e:38:82:60:3b:2f:
78:36:da:02:e3:60:bb:c7:d8:9a:d3:30:80:cf:6b:3e:bb:06:
00:5e:b5:2f:0e:15:6e:46:7b:c5:9b:c5:70:ac:cb:7f:12:c7:
52:36:b1:1e:f8:46:8c:ad:e5:3f:2a:59:10:3b:f6:09:5b:f2:
af:e6:6d:e2:2c:a1:1e:4b:6d:63:f0:75:fa:c7:af:0f:d5:80:
7c:43:98:fe:5d:0e:c0:51:9d:06:ce:5a:ca:1c:74:a4:a9:93:
d2:c3:0e:32:94:a6:e0:11:8e:8a:a0:c4:75:66:d5:6d:0f:14:
18:eb:f4:c2:a1:08:af:2d:b0:26:00:e0:c9:07:5b:aa:1c:e0:
8a:cf:50:56:74:dd:db:06:8f:a9:a8:b3:f0:a9:47:78:4e:80:
aa:2e:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:26 2026 by rpki-client