
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
File: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (raw, json)
Hash identifier: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=
Subject key identifier: 9A:5B:20:0C:C7:A3:43:8F:6B:53:BC:15:B9:58:02:75:59:A4:BA:B6
Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Certificate serial: 2293A6440DD4AC7E9BEFD95E001A63904408E56D
Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
Signing time: Sun 03 May 2026 03:06:15 +0000
ROA not before: Sun 03 May 2026 03:01:15 +0000
ROA not after: Sun 02 May 2027 03:06:15 +0000
asID: 149721
IP address blocks: 103.186.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:93:a6:44:0d:d4:ac:7e:9b:ef:d9:5e:00:1a:63:90:44:08:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Validity
Not Before: May 3 03:01:15 2026 GMT
Not After : May 2 03:06:15 2027 GMT
Subject: CN=9A5B200CC7A3438F6B53BC15B958027559A4BAB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:40:22:22:e9:2e:46:21:9b:41:07:7b:0a:
ef:a8:45:74:02:76:13:8d:97:64:70:fa:e2:26:02:
69:c8:e3:60:8a:71:f9:40:31:1b:04:73:1d:d8:c5:
5a:b4:4e:92:f4:05:9d:44:1e:f8:6b:2d:f8:f2:78:
14:f7:68:19:2f:fa:76:a6:13:3b:f7:72:0c:65:a3:
51:42:05:d7:19:18:bf:ce:78:b1:01:77:d2:b8:9d:
2b:c4:30:f0:d4:8a:54:f0:58:c2:1b:00:5c:51:e2:
b0:e9:59:9b:84:9d:61:62:8b:a6:15:8d:0c:f6:4a:
20:f8:b2:63:ce:8a:5a:e7:df:9f:c0:44:2b:32:38:
be:b8:74:71:55:33:50:85:d5:8d:c7:1d:01:30:d3:
e0:3c:93:1a:43:41:8d:d7:ea:a8:eb:52:c0:44:ce:
07:b2:04:2b:a4:86:40:d6:e3:b5:29:24:ca:46:ec:
8e:bf:72:95:08:15:db:ed:65:01:71:aa:c4:c1:59:
52:da:37:9a:63:06:84:5f:1c:90:fd:f7:f2:b2:3b:
3e:77:19:0d:50:d4:80:5d:e2:43:18:37:7d:c4:aa:
38:22:b0:ab:cc:8f:e2:47:5c:79:54:89:8c:7c:77:
f0:e5:57:ae:79:b8:fc:ad:5c:3e:0b:8e:d0:c3:0d:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:20:0C:C7:A3:43:8F:6B:53:BC:15:B9:58:02:75:59:A4:BA:B6
X509v3 Authority Key Identifier:
keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.201.0/24
Signature Algorithm: sha256WithRSAEncryption
52:52:f9:c7:df:70:eb:ee:38:f5:7e:a1:ff:32:27:e2:50:58:
4d:72:82:77:53:eb:52:56:7f:b0:51:97:05:d2:6e:26:15:65:
f5:ff:16:51:1d:9a:f5:2f:57:4c:29:23:ca:ad:90:67:3b:32:
36:9c:c5:68:59:be:a3:fe:70:db:38:04:b3:71:96:ab:91:f3:
bc:6c:d0:79:ce:8e:3d:a4:ed:89:6a:ae:25:30:96:72:a8:87:
ba:b9:39:9c:cd:50:97:8d:46:d0:0c:0d:fe:e3:da:d4:b5:89:
15:6a:c1:a9:96:18:57:ce:06:9b:c0:ae:d8:47:a5:49:c3:38:
8d:b3:e5:65:cc:44:ec:a4:35:b8:25:b5:60:d4:ab:1c:39:1b:
37:25:d6:a1:16:88:ce:34:a5:2d:15:8f:ff:5b:de:d7:8b:12:
ad:b4:26:94:5e:14:d8:55:a9:c6:d0:8a:c8:6b:4b:29:78:d3:
ce:a1:d3:0e:b7:59:97:96:b5:f6:62:46:a8:88:29:5b:8e:f6:
05:cb:d7:55:c8:c5:a1:00:02:00:11:04:e2:01:1c:01:05:8b:
45:c2:7c:69:8b:62:7e:9b:a9:e4:16:b7:33:fb:91:31:97:3d:
fd:6b:bc:b7:c8:f6:99:4e:3f:95:e1:e6:81:9b:f0:a4:93:7e:
2d:56:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:30 2026 by rpki-client