
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa
File: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (raw, json)
Hash identifier: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=
Subject key identifier: C4:51:49:DE:2A:7E:2E:71:F8:FE:27:FF:24:73:08:05:D2:90:10:2D
Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Certificate serial: 75DD7A5CCA83E3CCB8FCF0546B5C13AA3970AAA9
Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa
Signing time: Sun 03 May 2026 03:07:33 +0000
ROA not before: Sun 03 May 2026 03:02:33 +0000
ROA not after: Sun 02 May 2027 03:07:33 +0000
asID: 135439
IP address blocks: 103.214.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:dd:7a:5c:ca:83:e3:cc:b8:fc:f0:54:6b:5c:13:aa:39:70:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Validity
Not Before: May 3 03:02:33 2026 GMT
Not After : May 2 03:07:33 2027 GMT
Subject: CN=C45149DE2A7E2E71F8FE27FF24730805D290102D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:06:ff:e0:7f:00:7e:45:2e:7a:e0:95:b6:
02:e2:18:f2:66:ad:09:46:c2:94:ce:d0:f2:e9:e3:
95:40:03:32:da:cb:5c:87:0c:50:ea:21:a2:f6:1c:
9c:72:97:9a:3d:e6:5a:9a:13:d9:18:48:e2:25:35:
5e:9e:bc:20:18:3a:4e:89:e0:c0:7c:bb:9e:7c:a0:
0c:a5:8b:19:fa:70:1c:39:a0:b6:db:11:99:d3:43:
14:4b:ca:d3:ef:5a:94:93:2d:f8:aa:cd:ba:7a:a9:
e0:3e:19:b3:b0:12:61:23:a7:93:8e:0b:95:81:f3:
6b:7d:59:a3:00:20:e4:4b:c5:3e:1e:71:f0:ee:d0:
3f:d2:38:42:56:16:91:04:fa:af:d1:b6:4d:a9:1f:
e1:49:2a:45:91:ab:f1:36:6b:98:01:9a:5b:74:99:
46:59:61:73:1e:43:d8:00:8c:2c:84:d5:05:36:44:
94:66:f6:74:8f:e0:13:ee:95:d6:a2:64:a6:36:9c:
99:5b:be:91:3c:b1:e3:df:5f:2f:fc:53:9b:61:79:
d8:a2:0d:65:51:ee:1d:f8:f4:17:a4:2f:21:c6:6d:
57:e0:34:98:9e:68:b9:f1:57:1f:4a:00:b0:97:42:
ee:8f:34:e8:1a:9b:00:11:a1:b5:d9:21:e6:bb:8f:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:49:DE:2A:7E:2E:71:F8:FE:27:FF:24:73:08:05:D2:90:10:2D
X509v3 Authority Key Identifier:
keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ca:61:61:61:df:79:a2:9e:90:62:92:f7:3f:20:ef:98:1b:
95:f5:3a:8e:2a:c0:44:6f:ec:a4:18:b5:ea:f7:aa:82:40:4d:
7a:2b:32:2d:c0:a4:7b:53:e0:d4:70:02:d2:79:43:20:32:15:
d7:eb:a7:4b:15:17:7c:c0:86:26:59:80:13:c7:96:7f:7b:85:
e1:78:04:34:21:1a:f1:3e:d1:49:d3:37:9f:23:47:9e:b5:62:
a0:d0:02:a3:d7:84:af:6a:01:e2:9b:aa:5d:44:99:fc:d2:9a:
62:57:8a:57:29:01:9b:45:8e:ae:4d:0c:af:96:8f:15:ff:4c:
9c:39:07:46:c1:ee:a7:9d:cb:2e:70:f2:ce:c7:c6:dd:c6:f0:
48:61:37:82:1a:10:32:b8:a5:3e:6f:7c:5b:cf:a4:4f:a3:76:
11:31:91:3c:be:ae:2b:f0:1e:82:39:b1:96:80:a1:80:e1:35:
58:83:97:7c:de:c7:4a:77:b1:6f:9d:26:0c:18:3e:40:fd:a2:
01:1b:ec:1d:6d:66:ef:6c:a1:a7:4f:07:90:3f:e0:43:b0:83:
27:51:3f:ac:a8:11:33:97:b7:f5:b0:7f:c3:6f:fe:d9:b2:41:
7e:d3:0c:c9:13:c4:81:01:21:93:bf:01:3e:3f:7a:85:17:bd:
a7:5c:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:10 2026 by rpki-client