
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
File: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (raw, json)
Hash identifier: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=
Subject key identifier: 37:87:8D:B2:9E:41:05:9D:5B:9A:77:B5:7E:1E:B6:A6:57:EA:33:D1
Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27
Certificate serial: 5A32094D39EFB89DB4243BD6B46BCC675F3B8B68
Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
Signing time: Sun 03 May 2026 03:10:42 +0000
ROA not before: Sun 03 May 2026 03:05:42 +0000
ROA not after: Sun 02 May 2027 03:10:42 +0000
asID: 149706
IP address blocks: 103.186.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl
rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:32:09:4d:39:ef:b8:9d:b4:24:3b:d6:b4:6b:cc:67:5f:3b:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27
Validity
Not Before: May 3 03:05:42 2026 GMT
Not After : May 2 03:10:42 2027 GMT
Subject: CN=37878DB29E41059D5B9A77B57E1EB6A657EA33D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:3f:79:a0:ec:e3:ed:8a:63:d6:cd:b8:eb:
5e:fc:48:c9:4a:5d:e6:09:05:0a:cf:09:79:03:d3:
c7:f9:a7:e7:d6:00:8a:77:59:fa:5b:1c:86:8b:01:
0c:bd:d6:04:f3:62:d9:21:79:30:fd:d4:4c:ef:f9:
3b:89:26:ea:3c:5c:fa:57:15:ae:95:1d:1a:85:7e:
a4:7d:07:14:f8:79:8b:2b:e4:da:10:4c:0f:32:e6:
a3:1c:91:e0:af:9e:32:7c:9c:f6:c2:8a:89:4f:21:
f3:a2:d4:70:7d:88:fc:d9:2c:ce:37:aa:d2:d1:66:
27:11:6f:f6:71:95:16:64:84:9f:d2:ae:9c:91:99:
ed:50:65:6e:36:62:7e:6b:ef:b0:42:ab:3b:6d:f7:
27:17:f4:1e:a1:0e:a9:48:d9:41:41:4c:88:94:7f:
fb:d2:fa:57:95:cf:ff:4c:a4:0a:8b:3d:d7:3a:ce:
79:f4:48:07:98:4e:d8:e1:89:66:b0:b6:24:8d:e7:
42:8f:38:68:24:0b:23:11:38:50:d2:fc:32:2f:08:
7a:b1:2d:a9:63:08:43:dd:91:d5:14:e3:9d:77:03:
b0:0f:30:c7:c9:1e:00:d4:a2:b6:df:8b:2a:c8:6d:
cb:44:62:1f:01:9c:d7:a8:00:7a:f3:32:a4:8c:1a:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:8D:B2:9E:41:05:9D:5B:9A:77:B5:7E:1E:B6:A6:57:EA:33:D1
X509v3 Authority Key Identifier:
keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8c:74:01:f5:26:b2:0c:9a:57:8b:06:d7:02:2c:60:12:e8:
d4:4f:6e:65:4a:f1:68:0d:2c:c8:6b:2c:34:cf:6b:1f:29:61:
59:fb:b1:e6:d6:84:28:d5:b7:82:81:43:0a:98:41:f3:0b:0e:
aa:e8:0a:05:d7:a4:3a:f9:4d:94:be:45:e7:ab:93:18:36:eb:
c7:d3:20:fc:d6:7f:e4:71:6a:a8:b3:e6:8d:82:30:26:4a:d2:
41:31:64:49:a7:30:a5:8d:48:18:d3:af:68:6f:13:e3:ae:34:
c9:b6:6e:4d:8f:0e:28:1d:10:ec:15:85:6d:da:15:08:0d:d8:
08:b7:5a:b0:26:20:06:e8:b3:da:41:1c:6c:dd:a4:1a:72:02:
7b:3e:ac:90:aa:1c:3f:98:10:d6:44:65:87:7e:a8:4f:e2:19:
45:3f:f5:f4:eb:e5:28:24:66:78:8f:cc:9c:a4:10:58:ef:d2:
9a:8e:cb:91:76:dc:e4:99:42:de:57:12:3b:ca:51:51:b2:1f:
60:7e:6e:bf:bb:6d:73:5a:71:d4:9e:e3:0f:1c:47:e7:49:f2:
7e:f4:1b:84:e1:4d:0c:70:8d:3d:4b:68:e4:7f:e4:c9:da:31:
5a:d7:d6:96:0f:b5:9c:4c:d3:de:c6:fd:c4:e4:e8:a1:7d:67:
02:7c:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:06 2026 by rpki-client