
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
File: 3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (raw, json)
Hash identifier: tuXz1WBHQLGtpa6jqBSO+zM+s1veNX1L+r9GJ7yl5zg=
Subject key identifier: D7:0F:08:E6:4F:FB:08:EB:D7:D5:AA:62:9F:C9:EE:CF:EE:75:ED:F0
Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial: 2D84C4BC819F20141DA2A0952687907A94E78372
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
Signing time: Sun 03 May 2026 03:10:32 +0000
ROA not before: Sun 03 May 2026 03:05:32 +0000
ROA not after: Sun 02 May 2027 03:10:32 +0000
asID: 141146
IP address blocks: 103.3.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:84:c4:bc:81:9f:20:14:1d:a2:a0:95:26:87:90:7a:94:e7:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Validity
Not Before: May 3 03:05:32 2026 GMT
Not After : May 2 03:10:32 2027 GMT
Subject: CN=D70F08E64FFB08EBD7D5AA629FC9EECFEE75EDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:a0:46:bc:49:9d:d3:6b:6e:59:3a:2b:f0:
a1:e5:05:15:ce:6d:c0:48:f1:7a:9d:60:25:2d:3d:
8f:96:88:c7:5a:ed:88:28:cf:e4:05:99:22:dc:73:
0e:ad:0b:94:7d:34:4c:a5:d6:38:d1:c2:bf:a7:a2:
f1:7a:10:83:ce:ba:20:45:6f:17:3a:52:b5:90:b2:
05:3c:af:06:bc:d9:34:9d:b9:0c:1c:10:30:ea:64:
69:95:9c:5a:88:03:3e:c9:9c:c3:a5:b4:a4:9e:01:
05:b2:74:25:fc:c9:a0:79:1a:65:af:97:d2:81:ea:
39:22:a9:4c:23:ed:d3:1f:75:bb:a0:b4:9a:67:c0:
f1:37:6a:4c:ef:fd:1e:ec:b0:f1:66:40:27:78:38:
da:66:ca:c4:31:8e:05:13:f1:d7:6d:b9:0e:0a:b2:
cb:54:6b:30:1b:4a:47:30:75:cf:8e:a0:d9:d1:43:
b1:69:2c:c4:87:c5:a1:06:73:72:3d:48:da:05:ce:
b8:83:d7:5d:d5:20:09:6d:5d:ea:be:be:e0:5e:b4:
e6:fb:60:00:66:28:52:6c:83:f5:7e:9f:02:b9:f1:
86:9d:cd:b4:b5:14:32:80:8f:ad:8b:a5:20:74:ca:
f8:7a:c4:10:5e:58:6f:8e:a3:9b:4f:32:39:a7:78:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:08:E6:4F:FB:08:EB:D7:D5:AA:62:9F:C9:EE:CF:EE:75:ED:F0
X509v3 Authority Key Identifier:
keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.214.0/24
Signature Algorithm: sha256WithRSAEncryption
80:70:5e:18:ac:04:22:8a:46:84:f2:1f:d3:5e:90:ba:6c:a9:
9b:42:c7:5d:24:9b:e6:b8:a5:40:87:60:6b:23:33:00:ea:cc:
91:b8:20:a4:e6:cb:1c:9c:1e:43:de:91:3d:9f:bf:67:2b:a4:
4c:f9:85:89:22:f7:13:76:65:9c:95:04:be:5a:1e:31:e0:91:
29:23:05:9e:bf:dc:da:45:cc:50:31:d6:bb:20:df:40:0a:8f:
9f:ab:00:73:1e:f0:39:ad:2f:d8:ce:bd:cc:8c:95:7c:5d:a8:
a2:e3:ed:cc:30:f5:7f:2e:4f:cd:b5:54:e1:34:8a:5d:cf:f4:
ed:f6:04:3c:b8:68:32:d8:be:4d:1f:4e:6c:f1:ff:e7:74:aa:
42:cf:a3:d7:48:ee:9b:43:78:b5:87:fc:de:7f:33:6e:f4:45:
80:96:69:42:73:f3:16:32:ec:31:c8:c2:66:85:71:2a:61:6d:
9b:a9:85:1b:f3:63:fd:da:76:86:05:e7:56:e8:f6:43:4d:1d:
45:54:12:63:71:b3:2c:69:e5:4e:d9:e0:5a:ae:74:44:69:e7:
f6:bf:8b:82:1a:cc:c9:11:4b:93:80:4c:7f:b2:17:0c:95:d7:
bb:4b:1a:93:85:c0:a2:f9:86:83:92:24:62:47:23:48:7e:4f:
ee:62:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:02 2026 by rpki-client