
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa
File: 3130332e342e322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: oyGonS4+n4k8DOZClwj+a4gB0OSmt8xakE092L3flmM=
Subject key identifier: 17:48:60:36:75:8A:21:50:6E:22:B7:93:EB:4F:95:DA:84:E9:0A:1E
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 02D5299657106D47D8914E414D3D42B0000C92EA
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:55 +0000
ROA not before: Sun 03 May 2026 02:58:55 +0000
ROA not after: Sun 02 May 2027 03:03:55 +0000
asID: 18059
IP address blocks: 103.4.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d5:29:96:57:10:6d:47:d8:91:4e:41:4d:3d:42:b0:00:0c:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:55 2026 GMT
Not After : May 2 03:03:55 2027 GMT
Subject: CN=17486036758A21506E22B793EB4F95DA84E90A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:22:e0:11:fc:31:8b:e6:bf:19:e5:84:8c:
a2:66:db:fe:60:75:b1:08:b2:59:69:79:e3:73:2b:
e7:5e:ed:25:1f:83:f6:32:dc:73:e8:02:ae:50:7f:
f3:75:6d:1a:35:d7:ed:52:2a:6f:5e:ca:53:51:42:
83:cc:40:f8:18:85:b8:50:f7:d9:c8:fe:ca:84:98:
b8:db:02:ac:63:a5:ba:35:e6:14:aa:4a:50:2a:28:
e5:d9:12:d9:e9:f7:85:9c:29:7d:e8:a7:66:cb:54:
9d:c3:f0:57:c3:17:46:b5:61:c0:78:d7:d8:61:fb:
73:e8:d2:a3:9d:0c:2b:21:72:79:0a:ce:63:4c:e7:
0f:6a:0f:40:68:31:6d:a5:cd:ba:ae:04:c4:01:cd:
40:6a:54:bf:83:4d:95:b0:3e:1f:9e:de:4f:8d:11:
bb:6f:d3:c4:72:53:ad:03:87:ea:16:7f:f4:e6:48:
b8:4c:d4:0a:62:66:d9:cd:0b:d8:1b:26:d1:de:65:
02:a3:86:4b:df:c8:dc:17:69:2b:c7:86:4b:86:5a:
2e:36:33:ed:a4:bb:dd:5c:a4:51:de:14:26:c2:11:
bb:96:fd:d0:e3:72:6e:36:ac:66:78:4d:ed:8d:36:
10:ab:13:bb:54:b4:b0:a5:36:43:8b:4e:bd:c9:56:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:60:36:75:8A:21:50:6E:22:B7:93:EB:4F:95:DA:84:E9:0A:1E
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.2.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8d:1c:bf:c2:ab:4a:46:dd:88:78:e8:e8:d3:67:94:e7:38:
5a:40:ca:df:91:ee:fb:30:42:18:69:42:3d:3e:e5:88:f2:b3:
aa:a0:85:24:b6:b3:36:33:90:31:93:44:05:91:68:7a:51:f4:
89:01:81:b8:a7:cd:ed:5f:1c:cd:69:3f:d6:96:08:52:3b:5e:
2c:06:9e:a9:76:f2:26:d7:95:9a:db:bd:98:1e:9f:e1:ab:63:
36:7c:96:33:79:b5:69:77:1a:df:78:d5:20:72:93:1c:a0:2d:
b0:40:10:f2:41:f5:0d:1d:f2:01:99:96:99:fa:cf:bb:7d:64:
13:3b:4f:01:4c:5d:12:98:4d:68:83:66:c2:9b:d1:6d:93:fc:
0d:4a:c2:2f:d7:3b:ea:f5:9b:e8:56:c1:55:45:cc:68:f5:a6:
48:9d:c3:8d:e3:3d:0e:18:99:13:c3:16:30:cf:3c:1c:63:3b:
f7:1d:0f:b7:b8:0d:14:29:08:52:3e:04:1c:7a:5f:d6:1f:ac:
2f:e6:7b:2b:2b:43:02:11:dc:e7:4c:8b:3b:45:63:04:fe:4d:
22:69:6f:88:c4:51:67:d5:7b:13:a5:82:d1:69:e1:70:ba:52:
3a:e4:73:e9:a4:68:c8:f0:a4:30:21:11:bf:00:0e:cc:d2:f4:
05:5d:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:52 2026 by rpki-client