
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36372e302f32342d3234203d3e203435333132.roa
File: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: Rjd2vE2zGKftmY05BM4C0TjHIPA+ii1Rf27f+odCFqc=
Subject key identifier: 43:C8:DD:93:8C:13:00:01:C0:BC:15:DC:7B:58:30:5C:47:D4:C6:CE
Certificate issuer: /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388
Certificate serial: 5D97806CA4ABA4C79D138365C4C0A4F45E68950F
Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36372e302f32342d3234203d3e203435333132.roa
Signing time: Sun 03 May 2026 03:03:04 +0000
ROA not before: Sun 03 May 2026 02:58:04 +0000
ROA not after: Sun 02 May 2027 03:03:04 +0000
asID: 45312
IP address blocks: 103.134.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl
rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:97:80:6c:a4:ab:a4:c7:9d:13:83:65:c4:c0:a4:f4:5e:68:95:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388
Validity
Not Before: May 3 02:58:04 2026 GMT
Not After : May 2 03:03:04 2027 GMT
Subject: CN=43C8DD938C130001C0BC15DC7B58305C47D4C6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:5b:32:0f:b0:a8:e3:4f:97:86:be:4b:83:
c9:1f:16:ba:0b:e7:70:0c:a6:0b:4d:2f:24:ed:8c:
b7:21:bd:c6:2f:b1:8f:c7:b1:74:f1:66:70:62:0e:
56:29:2b:a9:60:a4:4c:f7:30:45:02:de:52:1a:01:
c7:18:d2:ae:29:9f:2b:c0:1c:7b:a8:63:79:8e:a8:
d2:37:34:98:2d:c1:47:85:ab:1d:36:64:de:56:bf:
b1:66:46:16:ec:f7:47:6a:f6:2c:7a:30:93:a5:4d:
5e:b0:92:33:06:67:8f:94:12:bc:10:03:c6:74:ae:
02:54:fc:27:38:dc:9f:79:d8:f0:96:12:4e:e8:6b:
ae:2b:82:b4:7e:12:a7:62:ac:e7:ff:22:cc:d2:53:
d3:06:2d:b5:7a:49:b8:4f:d5:15:53:39:20:8c:78:
f2:32:14:49:7f:9e:98:5a:f5:5d:5d:d4:df:6a:8a:
12:fa:57:e4:30:3c:0f:0e:7f:78:4c:74:23:d6:9e:
e0:20:e7:70:13:c1:b0:67:cb:57:11:8c:5d:78:dc:
44:fa:29:53:4c:a8:60:e1:d1:a9:ee:30:38:f9:06:
fe:c0:39:3f:b7:21:d4:1c:be:cf:75:be:a1:82:66:
86:d1:9a:3a:25:73:0b:b4:49:6e:72:9d:c9:2e:c1:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:DD:93:8C:13:00:01:C0:BC:15:DC:7B:58:30:5C:47:D4:C6:CE
X509v3 Authority Key Identifier:
keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36372e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:64:eb:eb:55:c6:52:df:45:f7:1b:2f:4a:a7:62:27:2b:38:
fd:39:ea:ed:a0:e7:38:2c:06:6e:7a:a0:35:a8:5c:23:13:1b:
b7:b8:3c:ec:36:20:dc:22:b4:fc:5d:5a:9b:cb:f6:6e:60:14:
d8:1d:6f:91:e9:b5:da:fb:57:8e:d4:c4:71:b6:2b:c5:0f:a9:
41:78:82:38:7f:f0:5b:82:ee:16:1a:45:a7:9c:2a:a1:92:d1:
5d:88:04:c1:d5:4d:63:6b:bd:88:60:53:64:a5:d4:44:c2:04:
5a:af:84:2e:aa:da:a3:29:f4:6a:87:81:a3:2a:19:52:28:0b:
7d:c3:b4:15:e2:38:e6:13:05:0c:e1:0e:ff:99:44:cd:58:ea:
0c:f1:fb:77:f4:2b:eb:9f:98:24:a7:7a:79:78:be:02:d4:bf:
0e:a9:f1:f5:dc:5d:ba:83:52:78:cd:f8:d4:f3:ea:78:16:16:
8a:aa:e2:08:19:47:e7:e9:dc:26:e8:2e:ab:95:e8:dc:05:93:
68:b0:36:49:36:de:f9:4b:db:80:90:21:fb:50:3e:fc:7a:eb:
3a:31:3a:af:50:ec:b1:0d:b4:1b:8f:6c:2d:ce:d7:79:1f:62:
2a:8b:e0:9c:06:73:5b:c9:64:27:40:26:cb:5f:73:e4:46:c2:
06:74:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:12 2026 by rpki-client