
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
File: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (raw, json)
Hash identifier: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=
Subject key identifier: A7:27:93:F1:67:2C:F4:45:C7:DF:62:64:4C:B5:5C:B0:AF:2A:EA:C4
Certificate issuer: /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial: 73866D1963226D49315157E18AEA2A9A1C949BEB
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
Signing time: Sun 03 May 2026 03:09:42 +0000
ROA not before: Sun 03 May 2026 03:04:42 +0000
ROA not after: Sun 02 May 2027 03:09:42 +0000
asID: 141910
IP address blocks: 103.164.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:86:6d:19:63:22:6d:49:31:51:57:e1:8a:ea:2a:9a:1c:94:9b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
Validity
Not Before: May 3 03:04:42 2026 GMT
Not After : May 2 03:09:42 2027 GMT
Subject: CN=A72793F1672CF445C7DF62644CB55CB0AF2AEAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:b5:1e:c0:d7:ed:42:3c:2b:0c:cb:8f:44:
19:9b:ab:e7:f5:3d:29:37:61:86:f6:80:13:f9:b4:
30:d7:44:73:71:c9:65:9d:24:4f:8f:88:4d:8e:0c:
49:88:07:94:11:47:6a:57:15:20:01:65:95:b4:01:
1c:38:22:3b:12:7b:81:89:74:4b:8c:76:e7:12:aa:
1b:fb:02:33:16:b8:d7:b6:30:44:0b:ae:03:00:28:
f5:13:84:6d:92:a1:d2:c3:91:1a:e2:16:11:43:49:
12:36:fd:97:38:55:7c:6a:57:81:1c:42:5c:c3:07:
a3:7e:36:c9:3b:3f:2f:91:69:c5:52:c4:bf:14:e9:
06:6c:8c:b9:f1:80:b7:5a:f0:65:3b:bc:73:a4:6d:
04:a6:4a:92:62:9a:e1:6e:45:ae:d4:ae:70:ea:c0:
77:a8:99:84:ad:bb:b5:8a:7f:1e:ee:d2:0f:5a:57:
5e:9e:e7:81:aa:46:4e:b1:55:b0:ff:6a:ca:94:d8:
92:83:ae:b8:e3:31:a7:f1:bc:01:84:fe:68:e5:55:
a5:f6:5b:02:cd:60:a5:1f:34:5a:49:e4:40:ec:28:
dd:81:f1:c1:4d:8f:f7:7d:c3:fb:6a:70:87:9b:00:
81:34:98:21:cc:eb:dd:87:fa:7f:20:69:47:1f:c2:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:93:F1:67:2C:F4:45:C7:DF:62:64:4C:B5:5C:B0:AF:2A:EA:C4
X509v3 Authority Key Identifier:
keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.58.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:39:98:16:ac:2f:db:93:43:84:d6:ae:b3:2d:4a:94:e5:e3:
10:3c:59:ea:47:33:64:a9:90:4d:0e:44:b3:df:a2:9e:b9:13:
d9:25:e0:00:60:7a:82:14:98:e5:c3:76:f2:ec:cd:9b:76:c6:
01:f3:b1:25:20:d7:d8:02:8d:2b:3a:00:45:51:d4:75:7f:46:
35:2f:18:33:76:bf:ec:c5:a7:32:75:ee:48:f9:fd:ea:d8:e3:
5e:e9:be:82:71:26:01:3f:27:57:07:cc:3b:39:b7:3d:2b:8b:
8d:05:7f:21:42:9e:f9:5e:80:2d:68:19:d6:16:2f:d3:36:87:
67:1d:a6:8f:3a:78:12:5e:31:59:15:05:38:9a:4f:cb:35:82:
d1:a1:0d:44:ad:52:10:5a:3c:1a:d0:28:ae:95:7f:02:7a:4e:
e3:a8:ec:b4:75:ea:69:ee:13:75:9f:8a:97:46:65:e1:e1:ec:
4c:5b:c4:98:02:1e:60:54:66:76:84:f3:54:26:5a:0a:45:78:
42:3e:3f:97:40:e5:50:a1:64:d1:3a:56:d8:2e:cf:cc:b5:2d:
5e:87:57:04:30:00:b0:0d:cc:98:97:e9:cf:e7:0c:92:d4:a8:
dc:7c:57:2d:06:20:29:4b:a5:44:e9:b0:f5:32:99:a1:cb:f8:
59:69:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:29 2026 by rpki-client