
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa
File: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (raw, json)
Hash identifier: eSjZGWM1OyV1yhzjQEoayB2vN+fO3mEGbT4lUzAsfwU=
Subject key identifier: BD:7C:EA:D6:6F:1F:BF:3A:84:DA:AE:AF:2F:12:62:36:6B:DB:03:99
Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38
Certificate serial: 0BB0917CAD5F98B8E2038C27FBA63F6DC2C46ABF
Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa
Signing time: Sun 03 May 2026 02:58:49 +0000
ROA not before: Sun 03 May 2026 02:53:49 +0000
ROA not after: Sun 02 May 2027 02:58:49 +0000
asID: 150238
IP address blocks: 103.20.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b0:91:7c:ad:5f:98:b8:e2:03:8c:27:fb:a6:3f:6d:c2:c4:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38
Validity
Not Before: May 3 02:53:49 2026 GMT
Not After : May 2 02:58:49 2027 GMT
Subject: CN=BD7CEAD66F1FBF3A84DAAEAF2F1262366BDB0399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:52:3d:87:d2:ed:cd:2f:3e:75:29:8a:a9:
bf:98:81:6d:f1:02:a1:55:02:0b:05:66:b9:f4:49:
c3:53:91:7a:56:ee:d3:7d:9e:c0:0e:32:42:2f:ae:
c6:31:d8:ff:d5:ec:73:f1:0f:ce:a5:97:f5:8e:54:
d8:1e:c5:fe:aa:d3:66:cb:2b:b8:cb:8a:58:54:76:
54:e2:ad:78:1d:9e:fd:01:ea:07:87:1a:2f:9f:15:
c6:ae:d3:18:35:4e:3d:17:af:f1:d6:e1:1a:53:ae:
cf:80:0b:72:4e:ba:3e:3b:60:9c:02:3f:70:17:fc:
55:fa:6e:48:f6:98:b1:8b:06:b0:54:93:6d:0a:0c:
47:e2:7f:b0:07:72:7e:6f:b0:ac:a2:52:83:1e:26:
4c:e1:bd:ef:2e:d9:97:61:68:b4:bf:d7:77:50:c1:
c1:2b:59:b2:84:fa:47:35:8c:61:95:e0:d3:71:0e:
a4:34:d6:b4:e3:0d:58:34:7a:b9:fc:8e:e9:7f:71:
66:29:5b:e0:7b:75:2c:e4:ed:ab:2c:a0:21:da:96:
70:1c:91:82:fc:9e:b0:d7:69:8b:00:12:19:b3:22:
20:44:51:56:a6:db:aa:c8:72:9a:a9:d7:80:ee:78:
31:f3:5d:b9:f2:f8:09:e7:27:ec:14:9d:d8:16:35:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:EA:D6:6F:1F:BF:3A:84:DA:AE:AF:2F:12:62:36:6B:DB:03:99
X509v3 Authority Key Identifier:
keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:36:10:39:3e:0c:02:e6:44:fb:0d:cb:29:55:76:bc:f1:df:
1b:c3:45:e6:3c:70:09:8b:5c:b1:53:ee:e0:77:8c:21:be:eb:
1d:b0:ee:a9:4a:de:cb:b7:9e:f6:03:fe:6b:3e:72:66:53:db:
60:9c:29:31:1c:bd:3e:47:a2:b1:13:a9:d8:8e:d5:1e:a9:43:
c0:bf:08:7d:ac:42:f9:4d:e9:99:72:6c:09:26:ea:92:b8:8a:
b4:fe:1c:d3:8a:ac:99:4e:cb:9c:a6:f9:2b:aa:c8:11:28:50:
01:8e:98:04:65:c2:ba:ef:21:00:19:e9:3f:ad:a7:80:29:e5:
71:6d:bd:be:31:96:1f:f0:a6:a0:30:9f:7a:4f:e9:18:a5:8b:
cb:ca:e7:4d:d4:39:d5:05:dc:32:6d:e7:78:ee:b8:4f:0d:33:
83:38:16:f3:e1:87:dc:50:fb:e4:ac:f0:1d:72:42:0a:18:2c:
c0:52:d7:6a:2e:a3:87:b6:a8:26:38:a5:ed:32:d6:c0:53:97:
09:14:19:59:47:d6:b5:fb:73:d8:d0:82:75:6e:07:fb:9e:5a:
f0:2b:14:1a:4f:6c:5a:ae:33:4d:00:12:f8:8d:ff:7f:1c:32:
66:64:c1:6d:57:1f:30:93:83:0c:ef:7b:5b:ae:55:d8:35:2d:
99:c5:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:51 2026 by rpki-client