
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32322d3234203d3e203138303539.roa
File: 3130332e342e302e302f32322d3234203d3e203138303539.roa (raw, json)
Hash identifier: o9HlOTOJaQKuMBjxRHG6iY4XfBnrv6HGjsNeAAyf0Lo=
Subject key identifier: C5:AA:66:9B:35:86:1B:16:BA:0D:57:CD:DE:C9:55:73:10:55:51:AA
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 2A4758850F7F1A464BB0B664A18A2C9915DD31B9
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32322d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:41 +0000
ROA not before: Sun 03 May 2026 02:58:41 +0000
ROA not after: Sun 02 May 2027 03:03:41 +0000
asID: 18059
IP address blocks: 103.4.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:47:58:85:0f:7f:1a:46:4b:b0:b6:64:a1:8a:2c:99:15:dd:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:41 2026 GMT
Not After : May 2 03:03:41 2027 GMT
Subject: CN=C5AA669B35861B16BA0D57CDDEC95573105551AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:cf:d2:e7:31:fb:92:cf:9c:7a:c9:dc:15:
0e:f0:fb:16:cf:76:cb:8f:0b:a4:70:71:e8:25:75:
1d:9e:70:aa:46:d3:61:17:47:5a:99:e7:f7:a9:9e:
f9:8c:60:f7:40:03:33:ec:0a:b6:eb:99:ed:b0:60:
8a:bd:e3:d9:87:54:93:20:1a:93:d9:a3:32:09:36:
fd:a3:2b:9f:ac:aa:f7:4a:b1:09:d1:c6:cf:1f:41:
f7:2a:1d:72:6b:b8:16:b8:7e:cd:07:b2:e6:12:4f:
08:db:d8:d2:8e:64:7c:d2:bc:ef:c9:68:00:7c:4b:
24:c9:ea:4b:0c:67:df:86:3e:d8:b9:c7:07:ca:06:
b6:29:3d:3e:f0:3f:eb:4d:66:1c:0b:cd:55:92:1a:
7b:91:0c:48:5a:d0:8a:58:de:83:6e:c9:c1:7c:fb:
31:dc:77:30:3e:ff:26:dc:67:19:38:8b:11:fe:30:
bb:9f:c8:6e:12:61:05:74:ca:2f:fc:71:63:5e:57:
a4:74:e1:46:22:b8:2e:44:84:e3:88:e7:10:c7:c6:
ea:1e:10:07:22:53:22:aa:20:3d:73:77:ae:e6:4c:
22:01:f7:21:c9:c1:96:2a:8e:70:62:fa:70:22:61:
c4:0d:f0:bf:a9:e5:f3:5a:39:fc:ea:fe:32:a5:a9:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:66:9B:35:86:1B:16:BA:0D:57:CD:DE:C9:55:73:10:55:51:AA
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32322d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:7d:35:2c:cc:c2:bc:06:32:0b:fb:04:dd:12:4b:e0:9f:60:
79:a9:f3:66:a7:e2:a7:db:f6:7d:2b:d4:ec:39:8b:c1:c9:ed:
01:98:ac:a0:6e:e2:93:bb:23:7c:6c:6a:d2:3a:8f:24:bc:4b:
0c:66:63:59:d8:22:29:74:a4:ef:60:3c:47:46:b3:5d:c0:89:
b8:a8:71:54:61:3f:a0:27:b8:ba:68:3d:50:fe:9c:8f:77:56:
29:95:34:52:6b:ae:f7:af:d3:6a:b2:cb:ce:ff:a8:c1:01:f8:
fc:a7:07:73:b4:27:09:d6:6a:86:e4:6b:c0:a8:07:06:04:ed:
3e:aa:82:0d:22:95:33:08:a2:16:f7:7a:3a:a8:83:0e:7a:f2:
1c:af:f0:f5:00:7d:8b:22:d0:d3:12:33:ff:f1:c8:c9:ed:d8:
a8:58:56:91:e9:40:ae:c7:05:36:49:22:74:08:90:7c:6e:7e:
5d:93:77:d0:08:0a:50:f7:99:2e:0c:06:07:92:db:90:16:e9:
a2:7c:e5:1a:33:cc:c0:aa:b1:4a:78:91:8c:1c:73:3f:0f:5d:
4d:d5:60:b0:aa:ba:b7:1c:e2:aa:06:d8:b1:5a:6d:98:46:33:
49:9a:7e:96:52:25:4f:a7:46:4b:31:c6:b5:79:71:81:fe:8c:
f3:c8:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:50 2026 by rpki-client