
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa
File: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (raw, json)
Hash identifier: JdS3onh/UNwTa6fbUAQVIX7szlwvK4Q8vIPtVeKS+NU=
Subject key identifier: 62:41:E0:D4:F9:C5:80:57:64:A0:11:F4:53:1A:7D:41:60:67:59:8C
Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Certificate serial: 63356BD9B46A53B5CFB62632740FA696925FA6AE
Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa
Signing time: Sun 03 May 2026 03:00:53 +0000
ROA not before: Sun 03 May 2026 02:55:53 +0000
ROA not after: Sun 02 May 2027 03:00:53 +0000
asID: 140028
IP address blocks: 103.146.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:35:6b:d9:b4:6a:53:b5:cf:b6:26:32:74:0f:a6:96:92:5f:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Validity
Not Before: May 3 02:55:53 2026 GMT
Not After : May 2 03:00:53 2027 GMT
Subject: CN=6241E0D4F9C5805764A011F4531A7D416067598C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:e8:55:64:39:93:6c:9a:f7:ea:02:2e:f5:
77:78:fb:4c:06:3c:03:7e:e1:c3:a5:d7:da:f2:ef:
d0:a5:9b:52:91:96:5e:14:f5:2e:0d:65:c1:2c:9d:
e9:77:10:42:87:a5:37:94:3c:58:dc:24:20:26:f2:
ca:cf:a0:a9:74:d9:fd:21:84:3b:d3:8e:4a:97:fd:
09:f2:01:de:0e:b1:cb:9e:bd:04:13:86:e2:ca:3a:
bb:fd:54:6e:aa:5f:fe:58:ea:3e:5b:41:03:da:01:
47:f8:82:91:e6:56:35:dc:36:2b:79:0b:b7:78:32:
ce:22:f1:39:0a:12:03:46:ad:82:02:a0:14:85:7e:
ab:56:08:73:40:03:04:6a:2c:6c:9e:19:26:b7:48:
ca:3f:bd:e3:27:c0:61:b2:b2:05:86:fa:65:82:f8:
fc:44:ac:a2:ff:8d:67:9c:4b:c7:89:f6:cd:36:59:
1a:9a:2d:31:3c:49:29:c3:18:42:29:7e:45:a9:ee:
03:bd:86:1f:db:da:2b:53:18:d4:87:c9:3c:82:56:
8d:be:1a:45:11:95:d3:42:b5:05:32:59:2a:eb:c7:
39:ad:65:00:68:0d:0a:fd:d0:8f:05:11:1d:e5:86:
ce:f3:3a:ba:14:21:7e:82:20:89:0f:4f:a3:6a:65:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:E0:D4:F9:C5:80:57:64:A0:11:F4:53:1A:7D:41:60:67:59:8C
X509v3 Authority Key Identifier:
keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.129.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b3:39:8b:88:57:73:60:2c:e6:f2:5e:e0:20:cf:35:03:88:
c1:38:d8:9c:e5:c2:5f:96:9e:f4:02:6f:39:31:ce:1a:bf:57:
5d:c7:00:4a:0d:c9:3d:05:ec:a2:6b:13:6b:2e:c8:10:59:46:
53:2f:fb:a9:d0:24:ff:03:f9:7f:d8:9e:3c:b1:4e:a3:ac:b7:
ea:b4:2c:d6:e8:cf:03:dd:a8:84:59:62:34:7b:52:44:14:39:
c3:e6:e3:e3:ee:55:22:0e:ed:c4:3c:85:29:7c:eb:43:50:0a:
d9:60:43:dd:59:49:f4:bb:25:85:d9:e9:9a:87:dd:ff:bd:f7:
c6:84:b1:94:d4:50:0a:8c:e2:01:5d:71:00:07:67:b2:5d:78:
aa:ab:a8:e2:c1:f8:8f:9c:7a:00:5e:1a:4a:15:47:db:4c:ad:
c6:41:1f:e4:3f:88:b5:a7:68:2f:71:90:fd:8e:a6:5d:29:13:
22:f5:90:11:af:f2:f8:ad:ee:4c:2d:84:7a:13:8c:05:2a:bd:
19:94:78:24:b0:5c:db:e2:6f:f1:1d:cb:14:11:60:95:95:6d:
b2:fb:16:6f:33:8c:71:61:72:e8:04:d4:cb:e0:c6:26:39:45:
df:88:12:f3:cb:6e:63:b5:85:13:e0:ae:1b:bd:f4:d4:63:e4:
91:e6:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:53 2026 by rpki-client