
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa
File: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=
Subject key identifier: 82:B6:85:8A:E5:E1:6E:E8:18:A3:AF:07:45:81:B8:23:5B:5A:16:1B
Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0
Certificate serial: 573236600041666C03A267CFE4DC214456C57B4D
Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa
Signing time: Sun 03 May 2026 03:06:39 +0000
ROA not before: Sun 03 May 2026 03:01:39 +0000
ROA not after: Sun 02 May 2027 03:06:39 +0000
asID: 150265
IP address blocks: 103.90.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl
rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:32:36:60:00:41:66:6c:03:a2:67:cf:e4:dc:21:44:56:c5:7b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0
Validity
Not Before: May 3 03:01:39 2026 GMT
Not After : May 2 03:06:39 2027 GMT
Subject: CN=82B6858AE5E16EE818A3AF074581B8235B5A161B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:74:73:3f:e6:83:b6:5e:d3:07:a6:19:76:
bb:04:21:33:40:4a:88:ff:13:9c:4f:53:86:ed:71:
e5:5d:db:27:52:f0:22:24:39:49:41:f1:23:43:80:
c0:06:e9:16:76:5a:e9:7b:a0:c6:f2:0f:5c:d5:74:
b7:5e:cd:8f:9c:42:16:3a:89:dc:eb:f8:e8:94:fe:
79:18:51:5a:bc:27:20:cd:cf:26:62:67:59:43:18:
f8:60:6a:bd:2d:22:b8:e0:16:db:99:34:f9:9f:1a:
da:90:ac:23:24:02:b5:c3:c6:00:ce:ce:d6:32:b6:
46:49:06:4d:1b:1e:4c:d2:95:43:28:0b:bf:0e:0d:
d9:13:e1:60:69:e8:cf:0c:24:24:59:ba:9b:37:5b:
ac:fd:79:e9:88:00:58:aa:fb:15:af:31:6a:52:c0:
82:a7:28:9f:e4:a4:aa:fe:9c:74:dc:d7:15:4b:ab:
3f:b4:fa:50:97:16:cb:04:1f:a3:82:5b:6d:94:f3:
25:20:b2:bf:78:bd:f5:2a:60:83:8a:4a:c6:8c:a5:
d7:40:a4:d5:a5:9b:51:81:d7:fd:f2:e6:e8:6e:34:
f0:e8:ec:ff:10:19:ce:60:5e:6a:9a:85:f7:c2:f2:
07:ee:0e:f9:81:92:44:5d:6e:5f:5c:74:45:9d:76:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:85:8A:E5:E1:6E:E8:18:A3:AF:07:45:81:B8:23:5B:5A:16:1B
X509v3 Authority Key Identifier:
keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.67.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:25:ed:be:91:79:de:18:ce:98:3b:ae:0c:b2:a5:0e:8c:fe:
6f:04:45:30:92:72:d2:7e:43:4e:e2:5a:c1:7b:55:63:f4:74:
34:87:89:36:23:ca:06:33:eb:3d:00:57:03:e9:7c:01:39:c1:
70:47:19:e5:ef:8b:65:aa:6b:cc:0f:bb:16:c6:d8:6e:11:f7:
43:08:b8:d6:fa:71:f8:3d:ae:72:ca:98:8b:eb:2f:e3:07:4e:
37:b0:02:08:fd:c7:a6:9b:05:58:5a:2f:aa:b7:84:d5:48:37:
5b:5a:d8:39:70:20:5a:5a:2d:af:b3:3d:b5:27:55:fb:27:65:
11:6f:0c:86:db:ce:09:f9:3a:6f:d0:e1:c5:96:ca:21:bd:55:
f0:05:6c:18:61:ae:d8:d1:93:59:39:71:d9:aa:9a:96:e3:e1:
02:da:ee:bd:f8:32:db:5e:df:aa:d3:f5:cd:20:b9:35:63:a8:
f9:07:9c:76:d8:1b:80:47:73:f4:30:2b:56:5c:2f:ee:a2:06:
bd:e1:56:ea:a0:bc:b5:32:1f:22:be:ce:e1:4c:fa:f3:b9:ef:
63:75:3c:e7:c0:df:65:b5:97:50:91:46:09:25:8e:97:08:cd:
8e:ae:8d:ab:95:69:a3:cf:2b:10:08:c4:be:96:b0:5b:93:f2:
99:75:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:22 2026 by rpki-client