
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa
File: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: NsGf/NKjXysT0NZWo8Ns+ZYja/LdeVhLVXCJP5P2m74=
Subject key identifier: 0F:0D:67:DD:C8:9E:90:B6:8F:DB:49:E9:F9:4B:5B:F4:3E:3F:76:74
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 05791067FC3498F2F8632CF403C77C0C21ED16C3
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:58:02 +0000
ROA not before: Sun 03 May 2026 02:53:02 +0000
ROA not after: Sun 02 May 2027 02:58:02 +0000
asID: 38320
IP address blocks: 103.29.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:79:10:67:fc:34:98:f2:f8:63:2c:f4:03:c7:7c:0c:21:ed:16:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: May 3 02:53:02 2026 GMT
Not After : May 2 02:58:02 2027 GMT
Subject: CN=0F0D67DDC89E90B68FDB49E9F94B5BF43E3F7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:b1:16:d4:d0:74:71:f8:11:2c:9a:f2:86:
1d:7a:86:23:f2:dc:28:cb:f3:59:10:2c:49:38:68:
67:97:88:e6:fb:3c:e5:88:7d:69:4a:2d:3f:22:c0:
93:6b:22:96:2d:67:00:2d:0c:df:15:16:97:1e:b4:
78:5f:3a:32:a9:a7:7d:8e:77:4a:43:cb:4e:d0:25:
7e:8c:7e:aa:a9:f3:33:4d:08:bb:c7:b8:99:bc:59:
e5:31:6a:93:8d:5b:4e:56:76:98:bf:7a:de:f9:0a:
4b:48:88:9b:22:1b:e3:9c:cb:49:2a:53:52:73:e1:
87:a7:34:0c:a6:a5:cc:44:e6:86:06:0d:f9:c6:e1:
b9:4b:07:45:31:49:3b:25:35:f4:7f:b0:e5:47:66:
cd:b8:ae:a4:39:76:15:80:1d:ce:1a:44:ca:14:0d:
78:74:b6:5d:06:31:cf:5d:6a:3a:db:b3:f9:40:79:
ce:62:1d:79:aa:9f:61:9d:86:c2:ea:83:66:92:2d:
f4:96:94:25:56:46:76:07:6c:77:ac:22:6e:58:0d:
a7:f4:3a:2f:a6:cd:77:f1:a9:31:7b:0b:7d:08:b2:
be:66:8a:92:0c:19:08:89:42:65:7d:e0:57:7b:ed:
c1:8f:a1:2f:51:d6:53:fb:97:d6:0c:62:c2:6d:17:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:67:DD:C8:9E:90:B6:8F:DB:49:E9:F9:4B:5B:F4:3E:3F:76:74
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:33:14:63:a8:72:7d:b5:2b:d1:ad:d7:d4:54:20:53:64:bd:
91:55:4f:59:14:c7:8d:95:20:d9:1a:9d:49:43:dd:94:51:34:
9e:3d:53:81:e7:94:9d:27:95:4e:a8:7c:9f:ad:85:ef:56:65:
c7:34:37:9d:b0:ac:78:88:cb:72:f1:7e:45:a8:b2:d0:0b:27:
56:e3:a5:40:9a:b8:1a:85:d9:c8:76:28:98:64:0f:76:fb:7b:
e8:f8:4b:d4:fc:2f:34:64:a6:15:fb:54:a6:ea:7f:a3:d3:d9:
81:7a:f5:76:51:c1:b7:a9:51:e1:a7:ea:73:7d:40:af:f6:ec:
e8:ee:a1:c6:83:af:8a:7f:25:ff:06:90:66:0a:fb:46:d8:e3:
a3:e3:f7:1d:9f:64:84:02:f1:e6:65:a5:9d:9d:07:87:92:2e:
b7:2b:33:84:6d:8e:eb:c6:29:c6:ce:a3:17:d3:66:c1:7a:8c:
dc:04:4b:28:69:3c:c3:30:f3:6c:b1:e8:9c:af:a9:68:69:a9:
70:36:dc:73:a9:41:88:5c:8c:da:69:ff:ef:28:76:98:5b:df:
9b:2d:67:ef:99:26:18:76:d0:8e:47:e5:ec:03:92:e8:dd:cd:
7d:1b:93:79:b4:0d:76:fc:ef:b8:5d:d2:4f:c6:10:5c:d2:49:
38:35:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:13 2026 by rpki-client