
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
File: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (raw, json)
Hash identifier: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=
Subject key identifier: 40:BC:91:C7:11:90:AA:E4:F7:0E:BA:9E:46:99:08:FE:14:96:6E:9D
Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial: 4699E05A7E3CA684021EEA41D0C6B6E220729298
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
Signing time: Sun 03 May 2026 03:02:03 +0000
ROA not before: Sun 03 May 2026 02:57:03 +0000
ROA not after: Sun 02 May 2027 03:02:03 +0000
asID: 149971
IP address blocks: 103.194.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:99:e0:5a:7e:3c:a6:84:02:1e:ea:41:d0:c6:b6:e2:20:72:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Validity
Not Before: May 3 02:57:03 2026 GMT
Not After : May 2 03:02:03 2027 GMT
Subject: CN=40BC91C71190AAE4F70EBA9E469908FE14966E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:19:a2:9f:4c:fa:a0:db:81:11:5a:86:ed:
fb:2d:bb:3f:3f:9c:60:30:fd:59:7f:ca:43:4f:f6:
7c:dc:e5:83:87:35:2d:b9:cc:fa:94:09:48:11:d3:
7b:fd:fb:a3:f8:25:21:98:e8:ca:fa:3e:f1:5b:f7:
c9:7f:6b:5f:f3:51:a4:ac:98:f2:21:a5:24:84:81:
1e:37:77:c2:55:ce:4d:33:47:7e:4e:2c:ac:58:36:
af:3f:ef:0a:59:e2:a7:a9:de:1a:33:ea:f4:e8:4e:
a1:38:c8:d4:3f:62:7a:0d:be:9c:72:e1:2f:de:d4:
59:87:27:29:3e:d6:63:17:f6:ce:63:fa:93:53:9b:
83:5b:e0:78:84:d5:b3:73:d4:f9:a6:d3:c2:1f:d3:
23:f8:ea:84:c7:85:31:2c:e4:95:d5:b8:5e:6b:4e:
d9:fc:15:47:29:a2:bc:96:47:2f:10:f0:c7:6f:e2:
4a:14:ad:86:ea:bc:d3:38:a1:b8:99:6e:3c:cc:6d:
af:69:05:4d:1c:3b:b8:2d:ed:dc:52:44:4b:b0:8c:
66:d4:98:54:6b:5c:d2:8f:cd:5d:41:0f:45:59:88:
e5:8b:f0:04:88:98:5d:82:9c:dd:0d:68:18:84:98:
05:5b:dc:86:b4:a0:43:ff:7c:33:d3:fd:34:f0:d4:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:91:C7:11:90:AA:E4:F7:0E:BA:9E:46:99:08:FE:14:96:6E:9D
X509v3 Authority Key Identifier:
keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.194.46.0/23
Signature Algorithm: sha256WithRSAEncryption
79:01:6d:72:96:b5:ee:45:0b:4a:b7:fc:94:2b:8c:96:4f:22:
e4:54:de:ba:b9:59:4d:7f:62:db:9b:bc:89:6e:68:55:8d:b7:
27:3d:8e:4d:18:b7:38:2a:f1:5e:f3:07:e5:7d:4a:c8:44:1c:
ad:17:f9:fa:04:a6:df:84:d3:7e:d5:fd:9b:0b:85:f6:43:68:
1a:bb:0e:53:e3:64:9f:3d:4f:30:9c:ad:04:0a:d8:f2:d0:fd:
b3:54:5f:e0:49:9f:c0:3e:19:6d:7c:46:51:16:ad:a9:ae:e0:
1e:e1:12:8c:59:75:60:72:d8:da:f3:93:c4:d4:b0:aa:ff:cb:
64:35:e5:ae:17:35:38:ca:64:cc:e7:9f:f1:2a:5f:7d:d1:f6:
f9:7d:56:8f:7d:cf:0d:aa:dd:db:a7:ca:34:6a:61:07:52:9f:
3b:b7:4d:bb:0f:06:67:09:8a:51:d8:e0:48:21:21:96:09:50:
14:27:f8:bb:88:eb:0d:73:18:f9:d4:67:d3:2a:e0:8f:27:50:
68:13:90:97:0f:62:e0:26:58:23:00:47:af:69:64:ed:32:41:
4a:eb:cd:76:cd:74:f8:69:48:c0:7f:07:dd:36:7e:b6:af:3c:
3e:5c:c7:7a:ec:49:46:0a:7b:e8:9e:04:84:23:8e:ef:26:ee:
fd:99:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:12 2026 by rpki-client