
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
File: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (raw, json)
Hash identifier: 4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=
Subject key identifier: 47:EC:9E:51:92:0D:D9:F7:B3:48:4D:14:1F:1D:B8:E9:78:0A:FB:6C
Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial: 69AC70FECBEB93D34CBB1ADB62B06B59DEBE179E
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
Signing time: Sun 03 May 2026 02:58:57 +0000
ROA not before: Sun 03 May 2026 02:53:57 +0000
ROA not after: Sun 02 May 2027 02:58:57 +0000
asID: 141926
IP address blocks: 103.165.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ac:70:fe:cb:eb:93:d3:4c:bb:1a:db:62:b0:6b:59:de:be:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Validity
Not Before: May 3 02:53:57 2026 GMT
Not After : May 2 02:58:57 2027 GMT
Subject: CN=47EC9E51920DD9F7B3484D141F1DB8E9780AFB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:bc:42:03:11:a5:67:c6:d6:a2:3c:9d:51:
55:1d:3b:07:83:a3:fb:bc:64:4d:da:4c:62:ec:db:
01:e5:dd:da:e2:97:28:a5:e1:93:29:a7:db:08:09:
49:bc:0d:c7:bf:5c:f8:a8:4b:32:9b:cb:5b:82:86:
b0:34:70:33:d5:0c:9f:d7:2b:d9:1b:91:59:20:f9:
4e:e5:e3:15:a1:b1:a7:fc:fa:e1:ed:9f:13:eb:30:
ca:e6:8d:d9:7a:5e:de:ea:7f:a1:6d:88:13:44:3e:
c7:71:79:08:de:37:ab:4b:6b:d9:2f:0b:04:00:19:
a5:ec:b3:39:c1:51:5f:ae:2b:18:4b:f8:8e:e0:f5:
bc:83:e8:de:db:0b:fe:75:67:6a:54:03:c5:31:12:
00:d0:b7:cf:94:84:6f:a2:50:bd:74:e8:50:7c:85:
d9:cc:93:42:26:68:b7:65:d0:30:f2:f1:03:6c:47:
41:d9:77:18:be:5c:75:db:6c:a6:c2:08:5d:26:55:
70:31:48:2f:d4:9d:94:5e:c8:d2:46:74:fb:79:d0:
16:f7:f2:f1:14:53:05:ef:b8:84:1a:72:37:46:a4:
6a:e2:33:af:e0:09:8d:f4:5a:43:c5:e2:cc:43:51:
72:29:e2:a2:5c:11:cc:e1:b6:bd:ed:9b:c6:3b:99:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:9E:51:92:0D:D9:F7:B3:48:4D:14:1F:1D:B8:E9:78:0A:FB:6C
X509v3 Authority Key Identifier:
keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:c4:0d:ed:ff:b2:d9:b5:9c:92:b6:e3:80:b5:69:b3:46:39:
a7:bf:3c:9c:8c:61:9b:1f:86:0c:fa:a3:b0:4e:69:a9:6c:22:
d8:41:26:34:85:2a:b0:40:2e:ff:f2:b9:b9:96:2f:17:52:8a:
3f:e3:06:a4:c1:fc:7d:b7:97:d2:f1:3c:25:ba:4c:33:8f:2a:
6b:f2:70:0c:d5:78:16:4a:96:14:cf:3c:de:17:37:9c:74:fe:
e2:a5:e2:06:cc:57:6a:9b:55:1d:bd:cf:ec:7b:d0:27:9b:93:
24:18:83:49:fe:36:a5:82:44:a3:af:c5:2c:0c:eb:3e:35:87:
b1:86:39:17:fe:57:13:a0:e5:7d:92:3b:00:88:a7:7a:32:0e:
14:0e:fb:c0:ad:74:07:c7:97:12:fa:53:5e:c2:46:0a:ad:8f:
ef:c9:bb:37:5b:c6:36:f6:a8:53:81:f4:e3:c8:4e:b8:3b:9e:
eb:b1:46:9a:d9:00:7e:ce:21:04:13:56:8f:f7:e9:bf:d5:57:
95:e1:89:7d:b3:e6:6f:c9:c0:c1:74:d0:ce:d3:1c:35:e1:73:
ce:09:2b:78:c9:7d:64:be:33:67:e3:53:9b:00:be:f9:ec:40:
d3:fe:9d:27:1e:4c:ca:c0:5e:e7:cf:51:40:41:64:2f:bd:1d:
9d:ac:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:21 2026 by rpki-client