
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134342e302f32322d3234203d3e203436303530.roa
File: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (raw, json)
Hash identifier: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=
Subject key identifier: 8B:38:12:80:86:A9:1F:0F:A7:5D:F3:0F:28:1E:14:18:72:30:60:1B
Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84
Certificate serial: 755A5E148E3F9C82172529A299A2E6D23A4EBC6C
Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134342e302f32322d3234203d3e203436303530.roa
Signing time: Sun 03 May 2026 03:08:16 +0000
ROA not before: Sun 03 May 2026 03:03:16 +0000
ROA not after: Sun 02 May 2027 03:08:16 +0000
asID: 46050
IP address blocks: 103.30.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl
rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5a:5e:14:8e:3f:9c:82:17:25:29:a2:99:a2:e6:d2:3a:4e:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84
Validity
Not Before: May 3 03:03:16 2026 GMT
Not After : May 2 03:08:16 2027 GMT
Subject: CN=8B38128086A91F0FA75DF30F281E14187230601B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:2d:5b:a0:2c:69:b7:eb:b7:4f:71:1b:bb:
b9:5f:3a:2b:8d:ab:50:97:a9:89:9c:8e:e2:b0:18:
7e:19:9c:31:03:90:1a:84:e2:43:2f:ee:14:88:c2:
ce:ef:3c:cb:ce:2b:1c:ef:fa:53:d4:9e:81:9a:8a:
03:5e:4b:be:37:9a:c2:46:e4:4a:7a:ef:87:26:c4:
8e:29:1a:b0:25:99:90:98:a5:aa:67:9e:ee:86:fd:
af:5f:4d:4c:00:ec:20:64:78:57:71:1d:28:74:aa:
39:2d:50:09:a3:3c:43:7d:ce:4c:3b:f6:bb:13:06:
e9:14:6a:a9:bd:f0:c6:ac:4f:04:2c:ee:c0:04:55:
cf:65:b8:ce:e7:7e:47:fd:3d:8e:c7:bb:cf:da:84:
88:18:87:57:f8:bf:32:2f:f9:31:78:e8:80:7e:5c:
21:ad:71:e7:47:20:42:fd:1f:06:68:0e:d1:f7:bf:
c2:5f:fb:d7:0c:23:8f:37:6e:e4:4d:69:9a:d8:47:
37:25:a2:00:8c:1b:95:db:84:a4:b4:e1:5c:22:08:
08:a2:99:79:44:49:ff:72:57:be:0c:18:a0:88:89:
48:56:9e:99:0d:88:8d:84:4e:06:64:30:01:bb:a6:
9c:50:6b:89:4d:b6:04:3f:e3:cc:2d:75:b5:0e:0f:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:12:80:86:A9:1F:0F:A7:5D:F3:0F:28:1E:14:18:72:30:60:1B
X509v3 Authority Key Identifier:
keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134342e302f32322d3234203d3e203436303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:53:71:50:e7:9b:05:77:57:b6:48:bc:1d:0f:85:a2:24:bc:
a4:18:d4:e4:4f:98:0a:5d:3b:8c:c1:a2:99:62:54:aa:17:a2:
fc:c2:54:5a:ee:00:fb:8a:d6:ae:ff:83:33:8f:59:cb:09:bd:
97:56:4e:2e:36:9b:a5:06:b2:d8:49:ae:99:2e:ab:28:e8:14:
68:e0:0c:08:8a:a0:b9:07:2f:9b:89:80:73:43:91:6f:f2:78:
d7:49:ae:4e:98:13:4d:ca:fa:5b:dd:2f:e0:1d:4a:9c:9a:8d:
91:cd:67:8a:74:92:e9:1a:e7:2e:5e:d2:43:83:ba:6f:e5:0c:
ea:ef:67:6b:22:c6:c7:70:00:6a:21:b5:d5:a9:73:23:b9:52:
d2:61:23:53:08:f9:3f:58:03:a6:9a:61:11:d5:41:2e:ec:d5:
1e:71:6f:a8:75:6c:31:60:12:0b:e3:ac:9d:0c:98:83:2a:b5:
fb:7b:95:2b:52:c0:9e:6c:bd:48:10:3e:e0:b5:76:de:75:43:
61:5a:d4:16:71:44:5d:5a:27:56:c3:a0:1a:b4:6f:80:dd:db:
86:b5:7b:43:b7:c5:ed:9a:0e:dd:26:fd:49:84:cf:94:0e:02:
fa:49:6d:2e:d5:c8:66:c3:e8:60:18:e0:4a:84:59:51:70:3b:
31:8e:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:04 2026 by rpki-client