
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa
File: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (raw, json)
Hash identifier: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=
Subject key identifier: 9C:D9:B2:45:CA:6B:24:4E:35:C4:4D:F5:C3:E4:1C:51:6F:8A:F2:85
Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial: 08B0FFC3B22D11F58904D4B4966118A7DC4AE6AE
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa
Signing time: Sun 03 May 2026 03:11:06 +0000
ROA not before: Sun 03 May 2026 03:06:06 +0000
ROA not after: Sun 02 May 2027 03:11:06 +0000
asID: 138070
IP address blocks: 103.123.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b0:ff:c3:b2:2d:11:f5:89:04:d4:b4:96:61:18:a7:dc:4a:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
Validity
Not Before: May 3 03:06:06 2026 GMT
Not After : May 2 03:11:06 2027 GMT
Subject: CN=9CD9B245CA6B244E35C44DF5C3E41C516F8AF285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:c3:12:2b:c7:50:e1:78:d5:8e:aa:ad:3e:
cf:d7:98:d9:a5:51:df:25:3a:4b:c4:c2:31:a7:7a:
f6:45:bb:76:7e:29:d2:b4:9b:06:54:d8:f7:41:20:
d2:53:88:b0:6b:65:31:e2:33:9e:f1:24:a2:e4:8a:
51:67:da:74:ba:48:93:cc:3b:79:c5:3a:1a:59:e8:
47:34:5b:b8:fd:a3:75:bf:7f:1e:06:01:61:15:f1:
6f:8f:32:54:88:fa:ae:7b:56:ac:c0:37:c5:cb:34:
31:09:4c:4c:ec:dd:c6:91:47:81:e5:14:a3:a4:63:
ad:a6:a1:7e:04:2c:cd:4c:60:35:9a:44:fa:7b:d1:
3a:24:73:67:c7:51:b3:ef:a0:22:91:f2:1d:70:da:
50:6e:26:49:45:24:e4:51:0a:b3:45:4a:91:e1:2b:
7f:1b:8c:32:e6:08:de:3c:c1:74:22:2b:47:49:f0:
77:1e:a6:dd:1d:32:4b:9d:e7:e4:b1:66:f0:48:b6:
70:27:53:47:29:de:00:b8:94:41:7f:09:84:23:55:
91:57:ed:3e:a5:e4:f5:34:5b:1d:f3:9c:89:99:6d:
25:82:8c:68:3a:e0:0b:ba:65:3d:8a:35:0e:c3:26:
64:1b:46:12:32:28:81:6d:18:be:71:ef:c9:27:a0:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:B2:45:CA:6B:24:4E:35:C4:4D:F5:C3:E4:1C:51:6F:8A:F2:85
X509v3 Authority Key Identifier:
keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5e:42:56:02:d0:d7:aa:0b:ba:6f:41:01:1e:74:5b:b6:d8:
af:a6:ff:af:ae:8b:cb:9c:08:3b:d8:d3:04:42:33:51:46:d7:
45:05:d1:90:8d:bf:67:60:1e:1f:12:22:f7:28:30:3a:b4:91:
3b:c7:a0:6c:5d:18:d3:0f:61:fd:ef:e1:d5:af:2a:cb:a9:4f:
9f:a1:90:ca:e3:a9:c0:ab:ba:32:7e:6a:70:f9:dd:5f:73:56:
93:29:f6:2c:eb:5d:2a:b4:e7:73:f3:e5:0a:9b:15:e4:12:89:
03:59:20:0e:7c:37:2d:4b:28:82:10:26:8e:ea:6c:ca:a8:3d:
ec:1e:39:a3:de:a5:37:87:5e:c9:0f:7d:91:7a:23:da:1f:5e:
50:85:47:40:5f:54:54:30:98:d5:4b:98:ed:2e:f9:73:f5:44:
da:dc:90:f7:55:3f:df:83:78:f9:e3:ab:bf:51:ec:81:61:04:
a2:d9:b9:2b:ae:3b:e7:23:0f:ac:15:c5:05:ae:b8:75:a6:73:
9d:81:d0:f3:c9:ff:3d:03:0f:bd:3c:6a:60:81:69:a3:51:ec:
2b:a6:1d:bd:11:3b:27:2d:15:61:47:53:ec:00:96:12:18:a6:
d2:4c:21:9f:3b:45:21:51:44:92:a2:b3:fa:52:0a:3a:40:69:
75:ac:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:15 2026 by rpki-client