
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa
File: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=
Subject key identifier: 9A:D3:32:FC:AD:B6:64:A4:2F:CB:3C:D8:63:02:97:FF:90:AD:0F:1C
Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3
Certificate serial: 2CF2D6FD0103F808D4FB633F3079E2474C536CD2
Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa
Signing time: Sun 03 May 2026 02:57:08 +0000
ROA not before: Sun 03 May 2026 02:52:08 +0000
ROA not after: Sun 02 May 2027 02:57:08 +0000
asID: 139952
IP address blocks: 103.160.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl
rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f2:d6:fd:01:03:f8:08:d4:fb:63:3f:30:79:e2:47:4c:53:6c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3
Validity
Not Before: May 3 02:52:08 2026 GMT
Not After : May 2 02:57:08 2027 GMT
Subject: CN=9AD332FCADB664A42FCB3CD8630297FF90AD0F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:c1:a1:88:1e:c0:a4:7d:4d:13:bf:da:3c:
cc:39:ee:0b:eb:bf:3a:5c:36:ec:51:99:61:b3:8f:
e6:f6:27:f4:73:aa:5e:d5:53:91:71:68:5f:3f:0a:
fd:ef:a4:ff:10:7d:24:46:8f:9d:49:46:2b:ef:16:
59:02:ce:8a:ab:17:d9:a2:e3:7e:42:5c:4e:36:e9:
4b:72:5a:d8:18:a5:46:35:0c:2e:25:b4:9a:07:db:
90:b1:ac:71:98:53:79:15:39:fd:04:66:98:d3:dd:
4a:7d:b0:25:72:97:98:9b:db:20:43:14:fa:1e:23:
13:0b:3a:7c:8e:42:bb:28:36:43:a6:db:5c:aa:ad:
64:c3:f5:86:45:69:71:37:2b:4d:75:56:cd:fd:86:
98:3c:a3:e4:a0:1e:43:52:35:b9:8a:e2:7b:c7:db:
84:4a:c6:a6:6c:a7:dc:3c:55:86:2d:bb:eb:fa:0a:
c7:14:f5:8a:57:e5:b1:32:4c:f1:4b:73:89:cd:34:
43:ea:d8:9e:f6:7b:c8:e8:bc:f7:ef:db:bb:10:85:
c5:8e:13:ac:53:9a:30:e4:9b:c8:ad:6d:8f:90:fd:
3e:c4:f8:82:6e:1e:ed:d0:6e:bc:62:8e:1c:78:f1:
6f:08:60:a1:47:4e:4d:1d:83:42:de:0c:df:87:91:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:32:FC:AD:B6:64:A4:2F:CB:3C:D8:63:02:97:FF:90:AD:0F:1C
X509v3 Authority Key Identifier:
keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3f:45:48:15:a0:fa:0c:5f:01:55:78:c8:b4:14:bf:61:cd:
43:40:ab:fb:59:2b:f1:e8:0b:59:64:a5:73:c2:48:a3:81:68:
51:aa:df:a3:1e:c8:03:2b:d1:a9:bd:21:70:e3:24:8d:85:dd:
b2:d7:7f:01:28:b9:be:68:e2:70:ac:16:4a:40:ba:f4:8d:c6:
ac:1b:f6:6d:84:2b:be:bb:91:03:3e:ef:0e:c5:07:48:38:5a:
a6:6e:85:e6:a2:8a:6d:f4:c3:92:7d:c7:8f:0a:d0:7d:b0:1a:
6e:9f:4b:8e:6f:f9:fe:82:19:69:3e:5c:32:2e:19:1b:1a:ef:
c5:70:d2:dd:9c:31:3b:5a:aa:79:8d:b5:c2:cd:0a:36:13:8a:
86:e4:02:bc:bb:0f:60:fc:32:28:77:c9:6b:3c:f0:c1:ff:26:
82:8f:5d:fa:95:61:63:ff:12:31:a5:0f:fa:b5:e2:45:bf:23:
a9:cc:65:ab:ac:5a:82:0b:ec:da:45:cb:c4:32:16:f2:bf:6d:
22:14:c9:ec:31:5d:93:88:9b:de:ca:72:dd:8d:ea:95:c6:67:
3f:82:69:59:47:a5:58:6b:c3:ee:73:5e:37:b7:f2:e0:a4:2f:
d4:a2:c0:0c:ca:6a:5a:ac:83:6b:fa:c0:d3:9a:be:b2:ef:7e:
ab:20:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:32 2026 by rpki-client