
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa
File: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=
Subject key identifier: CA:F6:46:D9:3A:61:AF:1F:62:74:B9:1A:BE:D2:79:6D:61:95:F0:75
Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A
Certificate serial: 1E2EBAA520D1933BF2676ECB0AC0CA61F1F40BA0
Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 03:06:01 +0000
ROA not before: Sun 03 May 2026 03:01:01 +0000
ROA not after: Sun 02 May 2027 03:06:01 +0000
asID: 58369
IP address blocks: 103.167.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl
rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2e:ba:a5:20:d1:93:3b:f2:67:6e:cb:0a:c0:ca:61:f1:f4:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A
Validity
Not Before: May 3 03:01:01 2026 GMT
Not After : May 2 03:06:01 2027 GMT
Subject: CN=CAF646D93A61AF1F6274B91ABED2796D6195F075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:f2:1b:31:55:b9:aa:d6:29:55:35:6a:6d:
59:46:b9:41:d4:cb:bb:ea:f8:2a:36:2a:63:99:69:
dc:e7:db:53:57:fb:dd:3e:84:15:e1:80:f9:e1:d9:
b5:79:46:51:6d:fe:45:d8:18:24:5b:0a:b0:1c:ed:
5a:4c:23:87:f7:7d:58:f2:f5:84:7e:e6:16:d6:79:
1a:86:8a:fc:57:15:06:68:cf:23:a2:8d:b7:11:c3:
df:12:22:1f:18:94:b2:a3:d9:22:50:2c:24:3d:4f:
15:9d:8b:24:e9:ca:26:52:fb:16:a9:d7:fb:ca:a4:
ed:d9:5e:5d:cd:00:ea:ed:bb:eb:95:73:58:bd:db:
5f:36:31:21:e1:c3:09:bc:be:13:f9:47:57:8e:eb:
1e:9a:20:6e:97:21:cd:74:fe:f6:ba:60:b2:9f:26:
f7:7f:09:bd:e5:27:c7:b7:2a:1a:64:25:fc:6f:4a:
b8:f4:1f:68:2b:5e:54:32:da:bd:d5:4d:63:ba:92:
ec:06:02:09:68:40:36:70:52:33:5a:99:43:81:4d:
9c:fe:d6:64:67:e5:8b:49:22:f3:7a:7f:33:96:41:
b3:00:a3:75:cd:92:be:14:a3:1b:b1:9a:48:fa:9f:
7f:8d:71:0a:a3:10:c6:32:39:1f:da:23:eb:02:b1:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:46:D9:3A:61:AF:1F:62:74:B9:1A:BE:D2:79:6D:61:95:F0:75
X509v3 Authority Key Identifier:
keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.107.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2b:b6:a5:57:1f:9c:ee:33:10:56:34:ff:40:e3:63:2f:16:
35:f4:70:95:f1:76:1a:24:10:d6:8d:10:1e:8b:f9:6c:88:da:
65:44:08:ce:44:38:21:5d:69:d8:02:52:3b:4c:3b:88:f7:45:
3d:8e:bf:a4:79:1a:5f:be:3c:1b:a2:49:b3:fe:d8:51:6b:d6:
0f:d7:24:d7:4a:e0:da:b5:92:84:10:15:3f:0c:73:81:3f:19:
d3:4b:d9:85:98:ad:76:67:d3:21:ff:95:47:13:3c:b9:c4:72:
9d:0c:fd:6f:ea:ae:ed:6b:9f:77:91:c3:9e:85:d7:9d:8e:f0:
3e:26:87:5e:3d:3f:c5:94:27:7b:88:3c:de:c2:14:b2:15:75:
65:a6:55:95:f4:30:9b:b5:36:74:05:82:c6:be:42:7b:de:1c:
2e:7e:0f:f2:80:43:21:4e:b4:5e:56:be:5a:34:68:e5:f6:1b:
05:30:61:b8:8b:8d:6c:74:19:2d:1d:27:4c:a6:9f:a3:fb:e4:
8a:9a:90:91:c2:46:e3:b6:d4:1a:7a:12:38:7c:8b:e6:91:bf:
83:65:ec:fb:f7:46:42:0c:94:76:af:3a:cc:03:c6:0a:4b:61:
94:40:ab:00:39:e0:f0:1c:e5:93:f9:b7:07:0b:5a:a9:58:2d:
19:18:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:53 2026 by rpki-client