
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134372e302f32342d3234203d3e203436303530.roa
File: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (raw, json)
Hash identifier: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=
Subject key identifier: 1C:B2:58:D3:E4:0F:8E:45:73:6F:BE:B1:F2:9A:55:54:2C:AF:D8:F5
Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84
Certificate serial: 4CE932AD6A20D4C61871304D45629A4B8B5CEFD7
Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134372e302f32342d3234203d3e203436303530.roa
Signing time: Sun 03 May 2026 03:08:15 +0000
ROA not before: Sun 03 May 2026 03:03:15 +0000
ROA not after: Sun 02 May 2027 03:08:15 +0000
asID: 46050
IP address blocks: 103.30.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl
rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e9:32:ad:6a:20:d4:c6:18:71:30:4d:45:62:9a:4b:8b:5c:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84
Validity
Not Before: May 3 03:03:15 2026 GMT
Not After : May 2 03:08:15 2027 GMT
Subject: CN=1CB258D3E40F8E45736FBEB1F29A55542CAFD8F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:45:c7:1a:3c:7e:a8:f1:c7:c5:ed:6c:c8:
c7:8a:50:6a:4d:b8:5d:ca:78:ed:4d:cd:ed:b6:ec:
a8:c6:b8:29:e2:da:b6:82:2a:cf:7f:14:e8:1f:af:
60:a8:84:5a:f9:aa:6e:1f:81:e3:bf:8b:5c:cf:72:
bd:4d:64:40:85:69:0f:61:31:a3:28:28:82:da:89:
bf:5b:42:a0:69:d2:c3:6f:e9:c4:a3:29:07:9c:11:
5e:2e:c1:49:17:49:81:c9:04:34:40:8c:90:cc:7b:
4a:13:62:1a:bf:fe:52:1f:82:81:3e:18:42:84:fd:
fe:8d:36:6f:ac:d0:56:96:2f:09:a2:31:0b:9c:6d:
31:b7:fc:06:36:bd:d1:96:17:c1:b9:9a:38:6b:b5:
11:94:a5:51:e8:0d:12:b9:04:bf:e1:a6:c5:06:31:
74:a4:10:b2:8e:58:07:41:85:5d:29:d4:de:76:7c:
b3:ea:0c:ba:d2:c0:c8:f5:66:40:dd:0f:a9:f4:f0:
20:a0:c1:8b:2c:e7:84:48:ab:f7:0d:7f:42:5c:82:
a1:92:0c:e9:44:d2:df:b9:7e:23:21:06:15:36:a6:
34:68:5a:3f:75:25:c7:bd:06:c2:2b:d6:78:62:b2:
9e:9f:cd:0c:a7:df:59:8f:28:5b:e9:a9:bb:c8:26:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:58:D3:E4:0F:8E:45:73:6F:BE:B1:F2:9A:55:54:2C:AF:D8:F5
X509v3 Authority Key Identifier:
keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134372e302f32342d3234203d3e203436303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.147.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c8:51:d2:23:97:87:e5:2e:08:30:75:4f:c8:f3:1e:65:a2:
c5:6b:99:47:30:1b:2f:be:72:d0:32:83:9d:5b:91:f3:3b:c5:
c9:bb:19:0f:88:57:e6:dc:6d:d8:5b:aa:85:40:7d:a6:a7:46:
5d:32:a8:29:b6:bd:fe:37:36:96:ae:c1:45:bc:25:7c:9d:7d:
58:dc:d8:e2:fe:54:d1:21:68:16:9f:fc:53:fe:f9:53:a6:51:
1c:ce:26:e5:cf:42:36:67:b2:4d:59:9f:b7:e2:fc:d6:dc:4a:
67:93:36:70:dd:bc:a0:a7:85:a5:f0:db:ec:38:e2:e1:6a:60:
ae:1c:ea:79:94:ec:25:96:46:fd:a2:f1:b9:9b:52:58:16:82:
e9:44:a0:d4:a6:9d:90:ed:80:f3:8f:4c:9c:ec:6d:ac:e4:8c:
5d:91:f4:3a:40:e8:8e:d4:a2:59:96:64:c2:60:fe:ab:b7:c0:
61:6d:35:09:1e:fb:34:bb:11:d4:f4:92:3d:2b:06:01:21:b8:
52:a8:3c:59:da:6c:79:47:a3:ba:d9:eb:1f:75:ab:55:a3:5d:
b6:cc:3a:12:b9:89:aa:25:4d:3e:b2:ec:5b:1a:0c:0d:d0:53:
36:40:14:d6:ec:25:eb:bb:63:88:08:2c:7b:22:f6:c7:2e:5c:
b9:09:2c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:58 2026 by rpki-client