
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
File: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier: 4HkIjmLq+65ZiJXFH/gsCmpX9OJtzZO2CDLQtviREzo=
Subject key identifier: FA:B9:DA:C6:90:D4:1C:BA:12:55:2F:33:E2:52:57:8B:C9:0C:37:B6
Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial: 4EEFB5105D73E374AF315923E55CC0501FEC78FE
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
Signing time: Sun 03 May 2026 03:10:31 +0000
ROA not before: Sun 03 May 2026 03:05:31 +0000
ROA not after: Sun 02 May 2027 03:10:31 +0000
asID: 38149
IP address blocks: 103.3.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ef:b5:10:5d:73:e3:74:af:31:59:23:e5:5c:c0:50:1f:ec:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Validity
Not Before: May 3 03:05:31 2026 GMT
Not After : May 2 03:10:31 2027 GMT
Subject: CN=FAB9DAC690D41CBA12552F33E252578BC90C37B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:e3:28:89:ab:32:75:e9:dd:73:14:60:7d:
9f:61:9a:92:39:f5:32:f4:86:42:8f:b2:82:6a:39:
b6:69:47:5b:bd:d9:e4:92:fe:44:ec:6f:e3:e5:be:
1f:f8:4e:47:ed:86:d7:13:79:f3:88:d4:da:09:fa:
6c:22:d0:46:f3:dd:83:bd:d6:59:ce:0b:d0:eb:ae:
08:a9:dc:76:a3:f0:5a:9b:13:36:97:27:be:c0:05:
d6:ed:0f:e9:69:ab:e2:dd:bd:d1:d6:52:9a:46:35:
9b:1c:fa:8f:6d:42:a3:72:12:72:96:51:f9:47:ed:
01:9b:c5:71:b8:d8:f9:ce:67:ef:2d:31:f3:60:c9:
78:a5:42:e5:21:b7:c4:c9:da:65:c8:7d:3d:f8:05:
3c:42:92:59:e5:62:a4:e9:05:15:ca:e5:e2:57:6a:
4b:cb:99:d9:f1:1b:28:30:f8:52:6c:1c:9d:70:52:
c3:36:47:25:37:6d:45:9d:8a:17:a1:8b:c0:e0:0c:
7d:32:93:4b:46:55:98:c9:bc:fd:da:6c:c9:29:1a:
30:9c:45:1f:3e:84:26:a9:bb:b5:40:d7:04:f7:d1:
0a:48:7b:db:e0:ed:bf:4c:a5:06:f5:fa:2f:51:b7:
af:13:57:af:09:1c:e8:42:b1:0b:87:93:56:32:7a:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:DA:C6:90:D4:1C:BA:12:55:2F:33:E2:52:57:8B:C9:0C:37:B6
X509v3 Authority Key Identifier:
keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.213.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7a:2b:ae:8d:1b:f8:e0:43:61:dc:c7:d0:67:1b:2c:76:4c:
37:74:aa:3c:d5:de:86:90:bc:71:b0:d7:98:bd:73:d5:b0:1b:
4d:27:46:a2:b2:dc:4a:d2:f2:25:2c:d1:97:d6:e6:f5:24:d9:
45:aa:01:85:dd:c3:1f:c1:da:32:ab:cb:a4:72:48:88:62:93:
43:7e:dc:0f:2c:e4:fd:3d:62:23:cd:67:03:f8:16:db:3f:42:
03:4c:49:9b:4e:70:44:57:83:fc:43:8a:d6:c9:46:7e:50:37:
0b:f5:14:3f:ea:58:6f:f3:fc:0b:31:24:74:bc:e1:52:56:b4:
22:9f:15:8a:94:a1:bf:57:fa:c3:6c:fa:e7:09:21:29:2d:cf:
dc:89:b4:1f:93:ff:a8:4b:79:b6:34:95:a5:3e:aa:45:0f:68:
87:43:82:9c:40:d1:57:d9:84:30:85:b0:41:6f:5f:09:c2:ac:
21:bc:91:df:a8:ad:01:af:d9:79:e0:20:16:c9:73:da:d0:48:
7a:b4:e6:9c:d8:74:10:d5:b5:b0:80:2b:64:b5:33:9e:99:47:
89:83:b8:a0:5b:5e:db:54:48:04:e5:6c:4c:54:08:c8:61:29:
df:ac:86:85:2d:b0:aa:0d:92:92:85:bf:74:c4:83:5f:9b:17:
f7:49:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:57 2026 by rpki-client