
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa
File: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=
Subject key identifier: 3F:2D:52:52:91:CE:D6:3D:2D:16:D9:DC:71:7F:95:CE:92:2F:5D:AF
Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3
Certificate serial: 1433AB7944D12ABE0B8CA8F08028688A07C68E3F
Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa
Signing time: Sun 03 May 2026 02:57:07 +0000
ROA not before: Sun 03 May 2026 02:52:07 +0000
ROA not after: Sun 02 May 2027 02:57:07 +0000
asID: 139952
IP address blocks: 103.160.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl
rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:33:ab:79:44:d1:2a:be:0b:8c:a8:f0:80:28:68:8a:07:c6:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3
Validity
Not Before: May 3 02:52:07 2026 GMT
Not After : May 2 02:57:07 2027 GMT
Subject: CN=3F2D525291CED63D2D16D9DC717F95CE922F5DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:76:a0:f0:a8:31:8d:96:15:dc:b2:b8:c7:
7b:b8:0a:21:dc:64:68:73:af:82:3b:ce:52:97:6d:
a2:90:a1:4e:19:75:42:68:96:15:d5:2d:ef:a2:a3:
58:c2:ae:0c:4f:32:8f:8e:79:51:39:ed:58:d0:b9:
18:ae:12:47:00:27:e8:72:45:be:fb:4c:7b:01:68:
b2:bc:90:6a:c3:65:fc:ef:f9:b2:02:6a:4c:29:1f:
f8:f1:c6:04:19:91:75:d8:c4:29:c5:cb:60:cf:71:
2b:19:8b:a3:26:e3:a7:7d:55:28:ef:14:c0:53:31:
c6:a5:29:af:85:12:c1:65:72:40:ae:17:6b:ce:d9:
5d:2f:c3:f3:e0:84:7e:f9:a8:90:d2:9f:cb:bf:4a:
9c:83:7a:b0:04:f0:91:58:97:3d:19:fb:ce:94:97:
3d:58:3d:2e:be:17:9c:04:e4:9f:01:e1:df:29:60:
77:d7:3b:4d:da:a5:d6:a7:77:ba:af:72:1d:bf:46:
0c:6d:29:3a:2e:d1:16:8f:d2:41:aa:1e:c2:b3:38:
82:04:a6:b3:37:bf:58:f8:06:33:01:ed:cc:2a:43:
3a:cb:cd:10:e2:79:1d:bd:1a:b7:1b:c6:09:e6:a5:
3e:be:25:52:64:8b:bf:0b:af:98:16:31:55:95:52:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:52:52:91:CE:D6:3D:2D:16:D9:DC:71:7F:95:CE:92:2F:5D:AF
X509v3 Authority Key Identifier:
keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.185.0/24
Signature Algorithm: sha256WithRSAEncryption
34:da:a4:82:57:82:7f:aa:57:03:df:e4:5d:8c:45:cb:7e:9d:
3f:8a:2d:ea:33:b7:9f:d3:9a:6f:2c:59:71:ff:b5:33:fb:32:
0e:7c:62:86:a3:e3:a3:00:b8:6a:77:fe:8e:78:f2:4f:6d:60:
e4:39:c9:13:4d:df:ee:c2:58:d6:80:11:e8:9b:49:d3:ed:f7:
16:74:50:e4:d6:5e:e6:dd:44:8b:15:b3:f7:28:d7:24:0a:53:
4e:dd:ba:3c:56:79:2d:3b:d3:db:df:34:b0:bd:9e:b2:85:75:
66:c6:f3:40:69:ad:61:90:a8:6d:0b:cd:bf:2f:fd:65:00:b2:
d8:d5:0b:9a:6d:54:8d:88:db:a2:bd:5f:e4:0e:d1:83:7b:e9:
a3:a9:38:f2:2c:b6:de:20:aa:9a:9e:0c:e0:a6:9c:fc:8b:18:
03:0c:67:8b:6b:60:03:8a:e8:67:aa:a8:8e:aa:97:dd:6b:3e:
57:d0:96:16:af:33:15:46:87:ca:39:c6:23:e4:47:86:b6:4a:
80:d9:99:02:66:03:89:11:f6:80:b5:ee:c4:0a:f5:d4:d0:f5:
2b:b8:71:d2:a4:f4:64:a8:e3:c5:94:ce:ae:a2:74:3e:dc:60:
fe:2f:64:3a:0a:73:cc:b4:b9:a9:89:c2:04:95:f5:9e:ad:b0:
14:2b:ab:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:26 2026 by rpki-client