
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa
File: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (raw, json)
Hash identifier: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=
Subject key identifier: 30:BD:D4:CC:59:2D:D1:0D:20:63:CF:1E:FC:42:02:01:D1:D6:25:22
Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Certificate serial: 79DCC3D858220CD958CBD37648177732286203C6
Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa
Signing time: Sun 03 May 2026 03:07:32 +0000
ROA not before: Sun 03 May 2026 03:02:32 +0000
ROA not after: Sun 02 May 2027 03:07:32 +0000
asID: 135439
IP address blocks: 103.214.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:dc:c3:d8:58:22:0c:d9:58:cb:d3:76:48:17:77:32:28:62:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Validity
Not Before: May 3 03:02:32 2026 GMT
Not After : May 2 03:07:32 2027 GMT
Subject: CN=30BDD4CC592DD10D2063CF1EFC420201D1D62522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:2c:fa:4f:c9:db:7b:86:83:90:95:56:29:
f3:bd:25:ee:42:4b:d2:09:fc:59:ba:0a:1a:13:7d:
3e:27:7b:64:1b:0f:2a:50:25:df:a7:bc:d8:05:29:
43:51:91:5c:8f:ea:b4:7b:72:4f:f5:75:d0:58:f1:
6c:a7:e4:fe:40:b2:cb:71:c5:33:1d:45:ac:dc:8f:
7e:3c:5a:5a:2d:18:9d:6d:16:26:2e:a8:08:4c:f8:
28:f5:85:ed:8e:6c:60:00:e3:c1:aa:9d:b5:78:ed:
6d:84:ce:43:d2:48:b8:dc:f7:63:d9:0b:61:93:1e:
d5:e6:be:87:d2:19:a8:81:c0:a2:ff:84:c6:77:ff:
5a:97:6d:c1:87:80:39:3f:7d:44:f0:c7:85:db:01:
aa:51:a3:10:c3:cc:be:39:e5:a4:a7:63:70:5e:06:
d5:0c:75:1c:df:13:55:13:87:45:34:8b:4b:10:20:
55:43:d7:63:6f:fd:13:09:65:8b:ae:ae:96:fd:95:
ac:40:59:fb:85:69:47:ef:9f:18:9c:a6:1f:8c:77:
a8:24:37:f2:d6:eb:02:4b:d1:f5:e8:c9:dd:ee:6d:
36:d3:94:b4:27:b6:c7:33:0c:b2:03:4a:a6:c8:71:
a5:6e:c1:d4:7b:07:da:e3:7e:b3:79:43:68:0a:6c:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:D4:CC:59:2D:D1:0D:20:63:CF:1E:FC:42:02:01:D1:D6:25:22
X509v3 Authority Key Identifier:
keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.236.0/22
Signature Algorithm: sha256WithRSAEncryption
02:90:a3:5b:50:70:5c:b1:18:95:af:62:e5:f7:71:ff:52:4a:
4d:aa:70:c9:14:a4:79:73:ba:87:8c:ad:fe:c8:54:b9:bd:ec:
2b:84:28:75:2a:f3:47:6c:43:19:e2:9b:25:8b:90:7a:32:c0:
fc:b3:53:4a:1f:6a:06:97:62:33:d2:e5:78:9d:08:d0:83:8a:
6f:42:ba:c0:ef:fe:10:e0:2d:3b:08:34:89:a4:34:10:64:1e:
4c:bd:b1:54:f3:bd:bf:3c:44:83:64:9a:e9:40:d4:28:64:e7:
e5:21:cf:d1:b3:f5:66:35:03:a2:67:45:e0:b6:0c:bd:32:92:
28:78:0e:d6:8b:9c:32:9f:b6:59:c9:79:a0:4f:fc:be:83:68:
0d:82:2a:b6:35:f3:f3:c0:8e:d8:a2:05:08:0d:fa:f6:aa:b0:
1f:fb:09:74:28:bf:b4:54:9b:41:82:48:28:ac:66:ea:45:23:
03:25:48:53:b3:03:06:92:2a:54:31:65:0a:b3:43:4f:6e:c7:
29:cd:08:a7:76:26:bb:1a:e1:39:c2:18:9e:2f:3d:d7:b7:37:
5a:ca:2f:13:8e:67:84:2b:84:3b:d8:85:e1:b5:c9:69:3f:48:
7e:a2:cd:be:f0:5c:39:2f:e3:bd:b9:60:88:00:83:70:8d:de:
a4:73:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:16 2026 by rpki-client