
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa
File: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (raw, json)
Hash identifier: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=
Subject key identifier: 4B:4D:D4:A9:96:B2:16:8D:BE:77:9B:D8:05:26:C1:58:71:17:F0:55
Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Certificate serial: 3A8E64B9BDAEFC80CDEA2B77A4C16C65513D115C
Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa
Signing time: Sun 03 May 2026 03:02:06 +0000
ROA not before: Sun 03 May 2026 02:57:06 +0000
ROA not after: Sun 02 May 2027 03:02:06 +0000
asID: 141975
IP address blocks: 103.167.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8e:64:b9:bd:ae:fc:80:cd:ea:2b:77:a4:c1:6c:65:51:3d:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Validity
Not Before: May 3 02:57:06 2026 GMT
Not After : May 2 03:02:06 2027 GMT
Subject: CN=4B4DD4A996B2168DBE779BD80526C1587117F055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:73:3f:ff:58:5f:69:0a:29:a4:60:5a:f7:
53:d2:cf:42:40:ee:70:93:43:82:80:ac:e9:fc:05:
ba:42:a0:c0:cf:b3:ab:6e:b6:24:d6:b3:ae:35:f6:
02:5c:c9:92:c4:c3:0c:ae:d8:3b:be:e3:46:76:61:
c5:48:0a:39:ea:85:0c:b1:43:0b:22:e9:37:8d:cb:
d4:34:58:c7:56:68:fd:02:1f:2d:5b:23:ff:e0:b4:
54:a8:bb:45:44:22:85:98:e2:66:32:2a:1e:1b:e2:
df:9c:cf:7d:c0:c0:1d:04:c4:5d:1e:7f:35:0e:14:
20:70:36:0b:6b:ec:d3:42:8e:f9:84:5f:f6:e9:c3:
90:18:87:43:da:c5:f8:f2:69:f3:87:28:94:a5:46:
92:89:87:1d:eb:0d:bf:72:33:b8:63:81:35:b4:d5:
af:8e:89:7c:7d:6e:bc:cd:bc:d6:ba:78:e2:a8:61:
75:b7:e2:c2:3a:c9:a9:17:63:bc:ec:73:88:e7:b6:
e9:68:9a:23:60:59:aa:07:db:3b:43:20:bd:7a:a0:
09:a0:b3:80:b7:d4:50:c2:9d:85:21:6c:52:a1:22:
04:b8:b6:d4:73:2c:1c:0d:70:a0:9f:57:67:ff:30:
36:eb:cf:f1:b2:f1:02:9b:5e:c6:71:bd:eb:ee:bd:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:D4:A9:96:B2:16:8D:BE:77:9B:D8:05:26:C1:58:71:17:F0:55
X509v3 Authority Key Identifier:
keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.70.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:37:f5:3f:a7:ea:8b:22:bc:a1:99:5f:4c:94:1e:55:8b:ff:
a1:5b:72:3f:53:82:f3:0d:ae:a8:d3:a5:f8:56:38:e0:e9:7b:
46:02:c6:8c:ee:f5:bb:ae:90:01:ff:37:85:57:b6:8e:16:c2:
7a:35:b0:4a:15:28:db:86:6a:c9:fd:15:cb:e6:54:af:1b:cc:
bc:b9:e6:29:cc:34:4b:73:f5:27:35:93:4b:de:ae:dd:30:17:
51:61:d3:5a:c1:5c:d3:0f:3a:55:b7:f7:33:f3:5c:d1:89:c9:
18:63:9b:1a:84:04:8c:49:0d:c6:68:5c:69:a6:dc:78:07:df:
47:c5:23:d3:9c:db:7f:c1:f4:c3:09:63:1a:76:61:8a:e2:cc:
43:77:dc:4b:58:e1:15:60:d8:1c:c0:a0:b4:3a:8c:51:68:71:
d5:19:e3:46:c2:8a:a8:1c:be:22:eb:cb:f3:a9:35:87:fe:7c:
f8:e9:b3:1d:3b:93:02:fe:c1:3f:3a:1d:48:73:63:41:e2:c2:
ee:3a:bf:bb:01:d9:e2:8f:45:7e:08:02:de:69:e8:c6:82:ee:
f7:29:c1:4f:2a:d5:68:58:96:b8:7c:bc:22:5f:65:14:c6:3e:
47:ac:46:f8:b2:fb:fa:2d:ca:fb:41:66:53:e7:c1:01:b0:fd:
9c:40:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:17 2026 by rpki-client