
$ rpki-client -vvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa
File: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (raw, json)
Hash identifier: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=
Subject key identifier: 6C:3C:28:33:40:DD:9A:23:CB:34:4C:55:79:D6:80:BA:C7:8D:8D:74
Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Certificate serial: 13B39B823E852A6F9415FE2D9ABBCB57D661FB68
Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa
Signing time: Sun 03 May 2026 03:10:56 +0000
ROA not before: Sun 03 May 2026 03:05:56 +0000
ROA not after: Sun 02 May 2027 03:10:56 +0000
asID: 140456
IP address blocks: 103.96.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b3:9b:82:3e:85:2a:6f:94:15:fe:2d:9a:bb:cb:57:d6:61:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Validity
Not Before: May 3 03:05:56 2026 GMT
Not After : May 2 03:10:56 2027 GMT
Subject: CN=6C3C283340DD9A23CB344C5579D680BAC78D8D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:75:ca:63:d8:9e:80:eb:83:84:ff:c1:71:
e5:76:7b:f0:72:39:fa:de:fa:76:0a:93:18:14:cd:
fa:8e:71:1d:8a:e4:af:5b:cf:ad:3a:7d:bb:91:c0:
df:7f:75:c4:e0:99:46:05:c9:95:81:6e:09:2c:da:
46:33:06:b9:c7:99:78:d5:bc:8f:94:7c:d0:bc:80:
df:97:9f:a9:83:c8:1a:02:b1:ba:12:01:bb:1b:8e:
11:20:15:ee:cb:a0:32:57:84:a6:ac:0a:4e:b2:d7:
8e:0c:11:7c:d9:9a:e8:0f:30:3b:d3:e6:57:7b:4b:
2a:1e:d1:3b:2f:44:5c:3b:2f:f9:aa:31:bf:26:f7:
c5:b1:05:38:a1:38:34:9f:94:7e:1b:d6:a4:87:ca:
82:b8:87:51:8c:5c:52:92:ad:60:44:91:95:fc:fe:
27:cc:b2:8b:e1:aa:30:2d:e7:a1:ae:2e:6a:3c:8c:
55:30:9a:79:7a:f3:16:bd:73:66:d2:de:0d:61:4e:
18:fb:6f:ec:6b:67:4c:6f:44:d6:17:44:fd:4b:63:
bf:30:d8:34:bd:aa:41:1d:e9:1c:db:5d:7e:3a:4a:
e4:ef:57:aa:a3:71:99:35:3a:21:a2:66:bf:c5:ae:
21:7f:fc:0d:e4:f5:6f:41:7e:2a:97:76:0d:75:30:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:28:33:40:DD:9A:23:CB:34:4C:55:79:D6:80:BA:C7:8D:8D:74
X509v3 Authority Key Identifier:
keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.147.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8f:24:af:c6:95:03:2c:f6:65:14:9d:a1:a8:14:3e:6b:0e:
e9:10:93:2d:a3:b3:e4:c5:32:a5:bd:f1:f2:77:82:57:db:fb:
b3:65:22:e5:16:54:bb:9c:59:ed:8e:28:9c:92:98:be:c0:78:
f0:b3:15:a7:2b:23:e4:a2:47:6f:ab:b6:6d:01:9f:90:ba:09:
4f:8e:95:82:68:b7:a7:be:2f:a0:f6:90:fe:56:39:50:db:cf:
07:eb:51:e2:aa:41:6a:49:0e:30:64:d5:2b:53:ea:0f:bd:da:
70:5d:9c:53:a9:ff:0a:eb:e6:ff:db:53:6a:39:a6:a9:b9:5f:
14:bb:1c:25:4a:e7:3b:30:60:7e:84:aa:6f:9b:a1:cf:c1:1c:
5e:7a:30:8f:01:2c:9b:fc:14:19:29:c1:37:ba:46:58:55:23:
d8:62:fa:8b:80:18:ff:2d:46:33:df:34:06:56:4a:f8:e6:80:
95:a5:cc:51:4c:3e:41:0f:92:f0:fa:fa:0b:be:70:47:33:bf:
07:f3:3b:7f:35:a8:cb:c0:71:a9:68:2e:87:46:98:74:c6:42:
ad:12:e5:d2:3b:43:56:ef:08:78:b7:dd:fc:0a:59:b1:9f:8b:
8e:91:b3:60:cb:51:9b:ab:c8:80:a4:27:4d:af:7b:67:e5:1d:
ba:15:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:03 2026 by rpki-client