
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa
File: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (raw, json)
Hash identifier: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=
Subject key identifier: 9E:CF:B5:ED:AA:5D:CF:2F:0C:FF:18:28:B4:13:58:22:6B:40:0A:99
Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Certificate serial: 01DCAEE94C6EB5D9872F70EF8998E316A727B646
Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa
Signing time: Sun 03 May 2026 03:06:14 +0000
ROA not before: Sun 03 May 2026 03:01:14 +0000
ROA not after: Sun 02 May 2027 03:06:14 +0000
asID: 149721
IP address blocks: 103.186.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:dc:ae:e9:4c:6e:b5:d9:87:2f:70:ef:89:98:e3:16:a7:27:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Validity
Not Before: May 3 03:01:14 2026 GMT
Not After : May 2 03:06:14 2027 GMT
Subject: CN=9ECFB5EDAA5DCF2F0CFF1828B41358226B400A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:2b:a8:c0:db:3d:fd:df:94:f3:2d:59:83:
a7:67:b6:1a:64:fb:69:26:3e:1e:4d:41:19:9c:15:
9d:fd:df:61:a3:04:2f:d3:92:94:cb:97:45:01:b1:
40:4c:b4:11:fa:5d:ee:9e:30:28:3f:54:54:72:f4:
94:e7:fe:0d:13:ff:04:0f:02:54:fe:c1:d8:17:f2:
fc:3d:3d:d2:ac:d7:b9:8d:e7:11:5e:55:fb:56:44:
0c:54:4f:64:14:5c:eb:c0:02:94:cb:06:b9:94:42:
66:f6:ca:1c:8e:c0:15:88:f1:ca:67:58:d0:ba:1f:
fd:a3:77:42:a9:e3:0c:67:f1:ef:4e:8e:20:95:4f:
93:8a:e0:8e:55:94:dc:84:69:9a:c9:4c:73:ae:40:
93:a9:a7:db:6c:1d:fe:ff:28:c1:dd:b1:53:b2:08:
9f:14:e8:2c:c9:7f:0a:03:a9:fe:12:88:c9:4e:e4:
b8:c3:31:dc:ec:c0:cb:c4:1b:d4:58:11:97:16:f2:
e9:71:8a:8c:73:ff:b7:94:e7:06:5c:5f:6a:29:9b:
f9:2e:97:76:50:fe:9e:fb:21:76:10:b2:ab:76:41:
71:34:cb:63:e2:fe:c6:e2:a6:cf:c3:c7:6d:35:2e:
4c:fd:fd:c2:d5:fd:ee:67:6d:87:a1:dc:c4:76:2e:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:B5:ED:AA:5D:CF:2F:0C:FF:18:28:B4:13:58:22:6B:40:0A:99
X509v3 Authority Key Identifier:
keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3d:2a:65:f5:0e:75:95:b5:f5:da:5c:30:63:c8:a3:a2:56:
9a:dd:ad:82:b0:47:bb:7d:04:1a:5c:cb:b1:8f:5d:06:e5:06:
2c:eb:75:7b:da:1a:cd:ae:d0:3c:26:96:18:26:6c:0b:de:1e:
7a:62:66:1c:ee:f3:7f:7d:49:69:41:88:cc:0b:3b:ed:cb:92:
2d:ee:0c:41:e1:c1:b2:8f:fc:3a:34:18:cb:6a:f5:1d:69:cd:
c8:30:4c:b7:fc:f2:98:e3:98:73:af:de:f8:d3:a3:df:9a:4a:
2c:f0:0b:16:24:2d:bf:27:21:e5:1c:38:fd:4f:f8:7f:2f:28:
ba:07:f0:d6:33:98:11:db:bc:f2:b3:58:7c:3b:1c:19:24:c6:
65:57:3e:d9:fb:91:a1:ef:9d:cf:2b:8b:fc:41:97:0a:49:97:
1a:1f:ea:25:9f:0e:e3:44:35:13:7b:56:05:e6:05:d6:78:ce:
72:5e:f0:6d:c8:05:ca:c3:f3:35:71:68:e6:50:2d:b2:9e:b6:
c0:75:e5:f8:39:db:01:b6:84:f7:fb:73:89:bf:69:5d:6d:98:
e3:9c:6c:50:7a:4e:34:50:ca:17:29:2a:51:38:1d:28:d4:25:
36:b1:f8:b1:8b:cc:6d:ef:0f:8f:c2:1b:0e:20:20:47:ee:af:
8b:dc:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:00 2026 by rpki-client