
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa
File: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (raw, json)
Hash identifier: H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=
Subject key identifier: 0A:3E:07:2F:5F:0B:53:02:BA:25:AF:C7:23:9A:38:A0:7E:AB:3E:E2
Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial: 12AA3417195CFE1E2560518C938E6DE91A4A3CA7
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa
Signing time: Sun 03 May 2026 02:57:01 +0000
ROA not before: Sun 03 May 2026 02:52:01 +0000
ROA not after: Sun 02 May 2027 02:57:01 +0000
asID: 132647
IP address blocks: 103.19.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:aa:34:17:19:5c:fe:1e:25:60:51:8c:93:8e:6d:e9:1a:4a:3c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Validity
Not Before: May 3 02:52:01 2026 GMT
Not After : May 2 02:57:01 2027 GMT
Subject: CN=0A3E072F5F0B5302BA25AFC7239A38A07EAB3EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:d7:6d:f9:c8:a4:7d:cd:9f:ab:46:88:1f:
d8:74:ba:3e:df:e8:0a:c1:b5:31:8a:8c:08:df:00:
fb:9c:e5:08:ab:03:73:e0:e6:70:44:a0:25:72:b1:
73:f4:84:cf:9b:93:84:e2:70:39:aa:4f:8b:ee:a1:
57:b8:f2:4d:f2:a3:9d:d4:f7:24:db:58:47:8e:a3:
0e:42:00:a6:d5:9c:97:1c:a0:0f:d2:f4:cd:9e:39:
70:27:ad:94:45:9f:bb:d5:62:a1:56:82:14:a8:af:
37:a9:e3:f6:05:82:44:fa:cf:7b:6f:0b:4f:c2:d2:
22:83:ae:37:e5:db:eb:26:ee:96:14:c8:e4:63:b2:
00:b1:12:50:b6:73:3c:88:f2:15:c7:b6:e7:93:f5:
93:1e:61:49:76:66:7e:dc:e2:81:56:2e:c8:49:ce:
e3:db:df:e9:24:96:ed:9f:31:13:3a:7d:03:c3:29:
ec:50:d8:cb:f6:06:a2:a7:e3:3f:4e:54:d4:3e:0c:
f4:d8:1f:90:07:1d:dc:c0:46:6d:a5:2b:e4:b1:49:
82:bf:a0:b2:26:60:d9:37:4b:74:2d:0e:9e:c0:ca:
aa:48:4f:bb:68:3a:9f:5b:4d:55:83:52:89:ac:62:
99:22:05:91:1c:e8:02:ee:08:9d:11:06:04:30:46:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:07:2F:5F:0B:53:02:BA:25:AF:C7:23:9A:38:A0:7E:AB:3E:E2
X509v3 Authority Key Identifier:
keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.178.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f3:60:f3:f2:52:34:72:97:05:cd:74:93:1c:ed:e6:57:bf:
db:f4:c3:f0:b7:01:a0:29:31:68:74:17:a1:b5:98:db:e8:3d:
af:e1:a1:2b:b0:15:56:39:42:cc:f6:89:bb:d4:b4:c0:c0:b1:
91:a6:8b:36:84:5f:f7:aa:6b:36:d4:25:0c:f7:ae:45:b9:c2:
84:97:ec:b8:9a:d3:c2:46:8b:ea:df:8c:85:bd:95:35:7d:90:
10:cc:c0:a5:e5:4c:00:e7:89:06:3b:d8:c3:6d:58:d0:d6:0c:
7f:61:9c:ac:a4:d8:11:a6:44:73:e9:51:fd:8e:b4:5c:41:8b:
b0:0d:2b:94:f8:70:e6:4e:01:b1:3b:ad:54:63:30:08:cb:98:
6c:cd:23:4b:01:17:9f:08:ad:b4:a1:ff:d2:6b:7a:eb:7d:3e:
c6:88:36:5c:19:c8:ec:9d:23:fe:f9:e9:b4:7a:03:26:7e:c9:
5e:3d:82:1b:75:dd:43:89:ff:4b:6d:3d:6f:f8:b0:2b:51:ec:
9b:ad:00:6a:50:40:f7:66:a0:c1:bf:47:96:41:58:7d:16:35:
88:3a:bd:99:c6:b2:ed:66:aa:48:57:18:e8:53:d2:01:e4:1c:
75:5f:5d:51:70:e9:aa:fe:4d:86:bf:69:ad:6f:fa:1c:9a:a8:
f8:20:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:21 2026 by rpki-client