
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
File: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (raw, json)
Hash identifier: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=
Subject key identifier: AD:6B:4E:3A:62:96:AF:C1:9C:77:51:C0:72:4E:F8:12:3A:CF:B8:94
Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F
Certificate serial: 6CAE6FF8047616E5A4407B1D8F8126FAFD30FC07
Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
Signing time: Sun 03 May 2026 03:01:10 +0000
ROA not before: Sun 03 May 2026 02:56:10 +0000
ROA not after: Sun 02 May 2027 03:01:10 +0000
asID: 136854
IP address blocks: 103.102.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl
rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ae:6f:f8:04:76:16:e5:a4:40:7b:1d:8f:81:26:fa:fd:30:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F
Validity
Not Before: May 3 02:56:10 2026 GMT
Not After : May 2 03:01:10 2027 GMT
Subject: CN=AD6B4E3A6296AFC19C7751C0724EF8123ACFB894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:a0:4f:15:be:c3:5e:28:e7:2e:f8:6a:7f:
10:6c:ee:1b:2b:ed:e1:9b:44:f9:8e:28:8a:f1:eb:
49:11:8f:b1:6a:52:b6:49:89:c8:e0:2c:fc:52:c3:
e8:7d:ef:97:aa:5c:63:f9:67:6c:91:06:7f:f5:1a:
07:1a:47:8d:ac:f2:01:e5:8c:cf:1c:03:4a:98:ef:
5b:85:56:91:95:6c:3b:15:85:7a:a7:8e:18:7f:64:
90:7b:fc:a8:d3:1c:f6:62:58:5a:4e:00:61:47:d4:
41:8c:82:41:35:1d:f0:10:c9:dd:b2:95:37:9b:0c:
b1:79:81:70:f6:9e:3f:09:41:ba:cd:8e:ed:05:b8:
5e:c7:d2:59:9d:42:fa:8b:e8:c4:74:35:f4:9f:27:
95:c1:04:1f:57:bb:78:c3:ee:59:a4:c8:51:9e:f8:
78:8b:21:7d:bd:10:7a:30:05:a3:f4:8b:1d:48:fe:
ae:37:16:2e:c9:0f:d4:b1:93:62:94:eb:f1:5b:16:
aa:62:be:e2:76:46:27:bf:bf:21:4e:92:68:41:04:
80:bc:87:c8:29:7c:01:50:91:e4:8e:2c:38:ad:71:
a4:cf:32:16:ae:23:55:14:e4:ce:8e:70:e5:84:19:
48:5f:d1:65:27:2e:d7:ca:fc:b8:78:e7:a8:46:d4:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:4E:3A:62:96:AF:C1:9C:77:51:C0:72:4E:F8:12:3A:CF:B8:94
X509v3 Authority Key Identifier:
keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.140.0/22
Signature Algorithm: sha256WithRSAEncryption
97:8a:a6:c6:04:89:57:2a:93:43:67:b4:6b:32:e1:ed:3b:fd:
b6:e6:42:45:74:c3:1b:51:f9:8f:48:30:1a:dc:62:f9:6f:d3:
7c:60:1b:c1:40:84:93:e8:41:60:09:ce:29:d7:8f:56:53:a5:
78:75:c0:c4:40:73:2e:13:28:81:a8:db:be:fd:d2:a2:86:72:
b3:38:61:84:93:ea:24:13:fc:37:80:93:20:23:6f:a5:78:a5:
af:72:6a:18:70:b4:a2:3e:36:9f:3d:bf:9b:0a:56:c0:d7:43:
8b:48:45:91:a7:a5:09:fc:62:37:38:5e:7c:05:d8:b7:3e:14:
99:6f:67:15:5c:5e:28:6c:cc:2e:4f:40:1b:0d:bd:f1:c2:e0:
51:d3:32:b3:bc:8e:27:65:b7:71:3f:36:1e:14:2a:06:c4:d2:
49:4b:8c:8e:84:f6:c3:e7:4b:85:fc:4e:94:bb:ad:4f:7b:c0:
41:60:19:2f:9b:15:fc:2e:ce:db:33:28:08:96:99:4e:06:6e:
1e:07:ca:4b:a5:f9:87:e2:af:75:24:6a:70:96:3a:5b:18:2d:
ba:6c:41:48:cc:1c:83:02:5f:74:d4:75:12:76:0a:21:16:2d:
c6:1c:68:a3:39:5a:dc:19:8e:4f:82:cb:1c:90:dc:2e:1e:c9:
65:4f:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:15 2026 by rpki-client