
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/3130332e3132322e332e302f32342d3234203d3e20313430333839.roa
File: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=
Subject key identifier: 8D:74:46:5A:31:CF:92:69:D3:52:D6:93:43:18:98:5E:51:A2:5D:CF
Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Certificate serial: 0973E9C5ECCDB337749A2B6582CC6C9F3E89AD7C
Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/3130332e3132322e332e302f32342d3234203d3e20313430333839.roa
Signing time: Sun 03 May 2026 03:00:31 +0000
ROA not before: Sun 03 May 2026 02:55:31 +0000
ROA not after: Sun 02 May 2027 03:00:31 +0000
asID: 140389
IP address blocks: 103.122.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:73:e9:c5:ec:cd:b3:37:74:9a:2b:65:82:cc:6c:9f:3e:89:ad:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Validity
Not Before: May 3 02:55:31 2026 GMT
Not After : May 2 03:00:31 2027 GMT
Subject: CN=8D74465A31CF9269D352D6934318985E51A25DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:8d:3d:5e:62:4e:cc:e3:f0:b9:ac:02:39:
b8:68:3f:f2:40:34:61:96:2e:97:59:57:dc:dc:47:
3f:cc:d8:8e:59:42:dc:97:52:d5:5b:ea:05:03:c7:
6b:b2:48:c7:df:05:0a:11:c7:6d:e6:83:b3:27:e0:
fe:1b:53:d0:79:b9:4a:9d:2f:82:8d:53:99:ff:40:
a5:e2:41:7c:a9:94:97:e8:38:bf:21:27:68:34:cc:
58:fc:c5:e7:68:6a:2d:a6:9d:45:40:e7:dd:51:7c:
e0:a1:92:da:fa:05:31:16:10:4b:81:65:03:a5:cd:
45:8f:e2:ee:dd:0c:b0:93:ae:41:2a:45:19:63:30:
7e:64:b9:c8:0b:0d:d0:14:75:1b:83:de:ea:97:25:
90:29:f8:63:44:c5:49:9d:cb:4d:c6:b5:26:34:61:
12:17:e6:f5:cb:53:8f:57:ac:b0:b4:4d:10:0f:84:
12:dc:49:25:4c:e2:95:29:ba:cc:36:3a:ae:00:19:
32:93:89:41:f4:61:15:e5:8f:f8:83:84:ae:55:fc:
be:ee:ce:ea:40:fd:28:cb:2f:6d:ae:3c:10:08:0c:
d2:95:d5:f5:27:62:e4:39:c8:b9:74:49:ef:f6:33:
f2:d0:40:1a:1e:46:be:5e:04:70:2b:55:08:94:37:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:46:5A:31:CF:92:69:D3:52:D6:93:43:18:98:5E:51:A2:5D:CF
X509v3 Authority Key Identifier:
keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/3130332e3132322e332e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6e:70:69:5c:2f:8a:cc:aa:0d:4e:ab:41:d0:68:d7:aa:bb:
fd:a8:be:ad:43:81:fb:5f:95:d5:04:c9:f3:fa:5b:b8:a3:88:
fb:ee:2a:94:50:eb:33:8a:4c:2b:19:5f:47:3e:71:18:19:f4:
14:28:3a:0b:66:c0:0c:b5:16:e3:f3:d6:ab:80:76:d3:c6:2e:
4a:4c:6b:ad:29:c2:8d:fa:c5:be:21:33:87:92:96:50:f7:eb:
cd:6e:b8:d3:57:ee:07:11:f6:76:65:ca:75:e8:0b:83:86:bc:
08:fe:7f:33:55:c7:e7:8a:44:6a:36:52:b2:3c:34:23:f1:da:
3d:b5:e3:57:47:7c:a7:d7:53:e9:2b:f2:e3:3a:3d:ab:81:5a:
39:0c:14:d5:68:7f:34:b5:02:a9:2b:3c:21:47:da:e3:08:e4:
d2:2e:50:d0:43:dd:28:6c:5e:5a:79:14:a8:98:c0:a7:c8:d8:
c8:1b:07:b1:7d:74:ce:8c:f7:1c:5e:9b:ad:1d:2c:a6:f9:1f:
83:cb:a7:3c:36:27:9d:ca:64:0d:1d:26:a9:91:07:ca:ea:e8:
d8:42:3d:01:10:31:a5:96:c9:93:46:2f:f0:5d:7d:a8:d3:54:
92:5a:f4:c2:65:01:95:13:c6:d9:be:36:1c:23:4e:ab:84:2c:
16:34:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:08 2026 by rpki-client