
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
File: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (raw, json)
Hash identifier: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=
Subject key identifier: B3:65:96:73:DC:97:7D:7E:15:BB:EC:D0:41:56:E3:E5:EE:25:C4:75
Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D
Certificate serial: 21286E19DB4B5B1DE381008DB6DCC4233306DD54
Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
Signing time: Sun 03 May 2026 03:04:40 +0000
ROA not before: Sun 03 May 2026 02:59:40 +0000
ROA not after: Sun 02 May 2027 03:04:40 +0000
asID: 141589
IP address blocks: 103.160.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl
rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:28:6e:19:db:4b:5b:1d:e3:81:00:8d:b6:dc:c4:23:33:06:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D
Validity
Not Before: May 3 02:59:40 2026 GMT
Not After : May 2 03:04:40 2027 GMT
Subject: CN=B3659673DC977D7E15BBECD04156E3E5EE25C475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:1f:ac:5d:4f:23:91:ef:88:cc:38:b8:95:
21:2a:b4:b9:29:6c:7c:93:d7:cf:72:75:58:e7:37:
ae:f5:9f:ad:38:89:f9:56:31:f9:3c:c0:e8:f6:8e:
8f:2c:0d:7b:ca:52:49:39:48:05:fc:cc:7e:dc:11:
d7:6b:99:f2:dd:f7:e6:5d:75:ab:54:79:d8:e7:db:
e3:27:f6:4b:e8:8e:c4:e9:ee:e3:de:7e:ce:7d:b3:
a7:7d:b4:03:85:05:9c:9e:b0:ec:bc:d7:4d:15:06:
14:8b:5d:e1:fe:de:b1:43:6a:22:84:34:4a:e5:28:
ad:49:06:40:9f:40:1b:37:85:16:2b:54:75:40:4b:
4e:eb:13:93:c0:38:4f:46:9b:c7:3c:63:34:ec:44:
9d:c3:6c:8f:82:34:88:8c:87:f1:e1:a3:c0:60:6b:
67:02:d8:d8:ac:97:18:69:d3:86:3a:d3:05:6a:55:
06:f1:5e:11:73:27:93:a7:fa:ff:16:e1:1a:8c:11:
77:64:be:b8:cb:ec:b8:b8:57:97:e0:46:e2:4c:a4:
f7:b2:df:33:6e:01:f4:3c:62:e0:0c:20:f9:6a:3e:
8c:be:c0:3e:6c:d1:0b:bc:05:69:a9:00:33:d8:7b:
66:cc:07:8a:15:cd:d4:89:9f:16:9f:fd:a0:cc:25:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:65:96:73:DC:97:7D:7E:15:BB:EC:D0:41:56:E3:E5:EE:25:C4:75
X509v3 Authority Key Identifier:
keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.119.0/24
Signature Algorithm: sha256WithRSAEncryption
58:47:a9:2b:9d:a0:b5:e9:c8:75:e9:6b:da:61:bd:88:17:92:
e3:61:0b:d1:9a:e6:50:3f:57:bc:fe:60:aa:24:81:99:c8:ef:
01:89:f4:73:17:1b:1e:a9:46:ad:4b:b3:9f:61:72:59:cc:ba:
1c:98:cc:02:2d:18:1e:b4:8e:33:25:ab:e6:52:2c:01:79:55:
33:7b:c0:68:73:cb:9c:47:6a:4f:fd:5f:2f:05:25:9d:7b:5e:
d6:95:ba:43:4d:00:a7:7f:da:35:f6:1c:ea:58:ce:96:e0:b1:
6f:53:17:80:62:65:80:15:2b:3a:95:09:d1:6f:17:33:80:a3:
c0:7d:d7:b4:15:92:3d:56:cb:ac:8a:51:7f:db:7e:43:8d:83:
b4:fa:f1:f6:f5:4d:73:fc:d8:57:10:58:df:cd:f7:48:d1:8c:
97:5c:68:c7:c2:cd:af:b8:12:c9:2a:f5:ad:f4:8e:fd:db:87:
62:49:44:44:49:a9:60:43:be:c0:94:b0:a6:e8:ff:7f:5a:5d:
40:2a:54:98:ab:0e:13:b5:1c:2d:53:a7:a6:99:4d:02:07:f5:
5e:0a:b9:4a:1c:93:57:db:1e:d3:1c:51:1e:96:e7:50:63:32:
0c:f6:d4:71:ed:9a:e8:9d:dc:02:59:e0:1d:d9:cc:28:fc:3d:
23:e5:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:14 2026 by rpki-client