
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa
File: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (raw, json)
Hash identifier: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=
Subject key identifier: A3:88:20:3A:32:3E:A7:FC:09:F4:7B:55:39:B5:A5:1B:94:79:D3:A1
Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Certificate serial: 6CFBDEBB440F9029CC221770A0C1590FC2AE5436
Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa
Signing time: Sun 03 May 2026 03:09:42 +0000
ROA not before: Sun 03 May 2026 03:04:42 +0000
ROA not after: Sun 02 May 2027 03:09:42 +0000
asID: 149887
IP address blocks: 103.186.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fb:de:bb:44:0f:90:29:cc:22:17:70:a0:c1:59:0f:c2:ae:54:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Validity
Not Before: May 3 03:04:42 2026 GMT
Not After : May 2 03:09:42 2027 GMT
Subject: CN=A388203A323EA7FC09F47B5539B5A51B9479D3A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:ea:1c:c4:e0:8e:b6:b6:86:a9:4b:5b:9f:
29:23:b0:33:f7:e4:9b:61:75:f8:a1:5a:bf:dd:7a:
be:fb:d1:70:26:d5:9c:7b:96:f3:95:11:26:34:48:
74:23:3e:bd:45:50:e8:ae:fd:52:52:81:c1:54:cc:
5f:b8:51:49:85:b4:7a:95:b2:81:e9:e2:d5:09:1f:
89:ed:33:ed:16:64:f5:5e:d0:4d:c8:c3:32:55:cd:
7a:ae:38:e7:3c:a9:50:a6:be:e1:96:9d:f7:d3:c1:
84:b8:31:54:db:5a:9a:1b:39:59:89:29:49:d4:07:
ed:b8:86:90:2e:a9:de:89:e7:20:16:da:25:3d:f9:
e7:b2:9b:ac:7e:48:58:a3:bb:27:2d:91:15:ba:c8:
4e:4b:45:1d:44:83:ed:b7:c7:b2:7a:93:d3:c7:39:
31:e0:bb:3c:51:17:8e:06:f0:63:a8:3f:33:83:ae:
c1:01:a0:8b:79:60:5d:85:f7:b8:e0:5a:cb:de:55:
87:5c:ea:d3:8c:2d:2d:5a:2b:53:18:1a:65:3f:0e:
c6:a8:f5:6b:c8:da:9a:b6:05:58:05:ef:54:f3:1f:
fa:78:68:63:46:c4:77:6a:2f:af:57:b9:6b:c8:55:
3e:a9:16:68:92:ce:f0:46:49:d3:f5:ca:a6:02:84:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:20:3A:32:3E:A7:FC:09:F4:7B:55:39:B5:A5:1B:94:79:D3:A1
X509v3 Authority Key Identifier:
keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a3:e2:be:6b:60:16:4a:66:26:5b:4c:98:01:b1:f4:b7:d8:
16:7f:52:bb:5d:df:4b:52:2c:d6:58:fe:af:6b:93:b4:c2:11:
0d:12:fd:dc:a7:a7:b2:f9:35:e4:b3:a1:50:22:86:41:2c:e0:
61:8e:98:2d:39:62:b9:17:62:cb:9c:3b:6f:e9:8c:eb:fb:70:
75:89:69:0b:60:ea:65:27:3c:54:40:7a:a4:c4:18:bd:63:83:
74:bb:8a:3c:79:41:98:06:42:b6:7f:8f:05:f0:a6:f5:dc:f5:
f9:b0:cc:3d:ca:48:f8:b5:32:c0:b8:96:e4:b9:6a:16:68:f0:
58:c6:82:58:6b:cf:07:25:b4:da:85:db:69:95:47:63:47:ed:
a9:b4:59:ce:bc:2c:19:c4:ef:37:fb:95:a4:d0:ba:a5:33:74:
a3:a4:68:a1:2d:8b:b9:6f:fd:cb:aa:05:2f:25:ad:2a:ab:6e:
c3:72:09:97:3e:5b:9a:f0:51:e4:47:5e:e9:d1:4f:3f:7d:b7:
0e:56:45:c9:5f:76:87:b0:78:20:b6:01:1a:d4:22:77:58:0e:
38:02:84:6b:8d:81:b4:47:1d:01:97:40:4e:3f:2d:b7:d7:ad:
49:c5:f5:03:42:e3:cd:ce:26:ac:11:23:e2:27:60:44:ab:2b:
c0:81:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:12 2026 by rpki-client