
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa
File: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=
Subject key identifier: C3:A8:EC:63:9B:FB:7B:D7:C8:CF:75:50:E3:48:C3:CC:27:7A:52:D8
Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Certificate serial: 2EDFFC2F6FD8543A71FC170A233857638A2563AC
Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa
Signing time: Sun 03 May 2026 03:09:47 +0000
ROA not before: Sun 03 May 2026 03:04:47 +0000
ROA not after: Sun 02 May 2027 03:09:47 +0000
asID: 38758
IP address blocks: 103.131.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:df:fc:2f:6f:d8:54:3a:71:fc:17:0a:23:38:57:63:8a:25:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Validity
Not Before: May 3 03:04:47 2026 GMT
Not After : May 2 03:09:47 2027 GMT
Subject: CN=C3A8EC639BFB7BD7C8CF7550E348C3CC277A52D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:ea:d8:ff:a4:38:f0:7f:f7:b3:f0:48:f2:
91:86:33:5c:12:0e:d6:52:85:8b:bf:f6:e4:6a:44:
35:97:ab:57:2b:4a:ce:1f:9a:2d:41:1f:6f:22:f7:
e7:1e:83:24:6a:eb:99:19:76:66:e8:54:d6:3b:c2:
df:b9:b5:71:c4:ae:2d:6d:d3:17:56:6e:c6:e0:b1:
dd:b1:9e:69:0d:79:48:25:74:83:68:0c:93:64:e8:
cd:36:0e:fe:d0:82:d3:23:c2:08:16:e6:fc:27:31:
58:3c:38:84:28:3a:42:eb:11:b3:85:a7:89:93:3c:
87:a7:c4:e6:4c:01:4a:40:76:a4:c8:c6:b7:a1:52:
e4:de:e5:21:a0:ad:19:a5:98:48:c6:00:00:82:15:
0f:df:81:6e:b7:8f:87:94:5f:80:ce:03:86:0b:0c:
a7:5f:c9:5b:ac:a6:fa:02:c5:51:24:ea:91:70:8d:
77:a2:74:50:5b:df:fb:30:9d:3f:95:e6:c3:91:37:
0a:cc:36:86:8f:74:d6:6e:ee:07:06:e2:91:07:5e:
34:cd:0b:70:0d:94:78:e0:e6:bf:8f:de:9d:1e:aa:
74:24:d0:01:39:29:a7:bc:7d:e6:2d:f0:d7:00:a9:
55:d0:57:4a:06:a7:1c:ff:9d:c8:1d:22:c3:87:fe:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:EC:63:9B:FB:7B:D7:C8:CF:75:50:E3:48:C3:CC:27:7A:52:D8
X509v3 Authority Key Identifier:
keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.217.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3c:74:da:46:1f:9d:60:a5:03:bc:e2:b1:e5:3f:49:a5:b1:
e2:5b:f9:59:a2:dc:da:05:4e:b7:66:3f:25:32:74:8b:cd:e9:
90:cf:a8:3c:c0:0b:f0:78:fe:ff:f0:51:cd:9a:91:9d:24:0d:
dd:e3:6d:c1:73:0d:49:11:6f:a9:8a:78:6f:09:c7:89:35:97:
45:ea:0f:c9:43:69:fc:17:1d:91:76:45:be:63:38:6e:5f:f4:
ce:55:ff:4f:16:a4:86:22:f3:d6:5a:a7:cd:7b:b0:37:1c:34:
9b:d5:ab:c2:6a:03:4c:71:80:12:2e:80:9c:22:c4:47:78:db:
a7:4f:57:f9:53:4c:ea:63:d5:6e:ce:56:ff:8a:88:eb:b1:64:
66:20:e9:0b:51:cb:22:57:7b:db:f5:13:2d:8c:5c:78:35:86:
41:9c:b1:39:f5:50:0c:88:cf:3a:f7:14:27:30:11:01:3a:b3:
77:f2:9b:4e:4e:9a:f7:68:4a:9f:95:ab:4e:53:01:bd:77:49:
e2:24:87:98:ed:a4:42:e9:6a:ed:35:33:9e:4d:ef:3d:d1:cf:
86:98:55:94:f5:6a:c5:02:cd:e6:7b:8b:de:33:4b:a6:fa:59:
4f:43:5f:08:20:2c:c6:f1:74:fc:36:1c:04:12:a2:69:de:40:
f5:86:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:04 2026 by rpki-client