
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa
File: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (raw, json)
Hash identifier: QTvSNhE992wCS0VNXGZ4QrTW5fEG/UCs6bm/K+0HXAk=
Subject key identifier: 88:42:22:74:97:14:59:FE:74:95:E3:8E:53:B2:ED:77:22:99:43:14
Certificate issuer: /CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B
Certificate serial: 6462E637186DBB3FFF1DC17ABA606B959778EF69
Authority key identifier: AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa
Signing time: Sun 03 May 2026 03:15:16 +0000
ROA not before: Sun 03 May 2026 03:10:16 +0000
ROA not after: Sun 02 May 2027 03:15:16 +0000
asID: 141950
IP address blocks: 103.166.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl
rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:62:e6:37:18:6d:bb:3f:ff:1d:c1:7a:ba:60:6b:95:97:78:ef:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B
Validity
Not Before: May 3 03:10:16 2026 GMT
Not After : May 2 03:15:16 2027 GMT
Subject: CN=88422274971459FE7495E38E53B2ED7722994314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:85:62:c3:8c:cd:dd:22:f4:ab:0e:cf:9f:
2f:65:2f:d1:c4:7d:4b:f3:34:b4:e6:53:9b:79:65:
f3:04:04:1d:51:96:05:c7:40:16:fc:c2:f9:30:ff:
bd:b6:8c:2b:35:56:1a:3e:09:75:76:4e:0e:58:0c:
c8:ef:46:55:97:80:de:7c:86:c9:89:be:5b:5b:f1:
da:d7:01:59:ed:64:0a:a5:c5:80:9d:af:ad:f6:b8:
f8:14:33:c2:a9:b8:72:64:d1:48:05:26:cf:23:b9:
f3:18:49:3a:9d:ea:e8:bb:6f:86:c4:43:db:de:de:
e3:4f:7d:83:3b:d5:41:c0:a1:a5:70:81:fd:4f:1d:
9d:5d:6b:a1:69:15:65:37:ce:af:b0:49:58:1f:a7:
45:4e:73:02:a9:6e:a2:20:c1:fd:81:3f:fa:02:14:
1b:8a:96:8b:53:8f:21:22:d1:a8:e9:82:d6:89:ff:
e4:8d:fe:33:be:1d:df:86:58:93:49:63:62:9f:76:
f0:ce:c0:77:6a:86:1c:71:8e:cb:98:0c:a4:0f:c3:
9a:01:5b:b5:b8:10:a9:e9:6e:f2:52:5e:31:76:28:
16:f3:f5:94:65:5f:b9:f1:e9:bd:97:d9:bf:8e:f8:
ae:b1:73:b1:d4:1a:50:8a:9d:62:bb:dd:38:99:1e:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:22:74:97:14:59:FE:74:95:E3:8E:53:B2:ED:77:22:99:43:14
X509v3 Authority Key Identifier:
keyid:AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.164.0/24
Signature Algorithm: sha256WithRSAEncryption
15:53:5f:6c:27:0e:45:75:1d:8b:3b:75:e1:d8:ec:73:e8:43:
20:50:11:58:57:23:2c:52:ee:d8:2c:7a:e8:ca:2d:9e:b4:de:
85:6d:ce:5a:a5:e4:1d:c7:3d:ff:f5:13:b7:45:78:12:85:f7:
af:4c:39:7e:d8:38:1a:51:9b:bf:ab:88:41:4e:62:cf:93:ca:
14:d1:ef:61:5f:ec:48:8d:2f:1d:ae:b6:8c:d3:50:58:3a:cb:
ff:f1:cf:63:d1:ad:a0:ae:72:8d:6a:a5:27:13:96:12:bc:30:
5a:84:11:b2:c5:f9:b5:77:57:00:70:cd:c1:56:77:83:71:8e:
29:e8:d5:8a:bd:0c:43:97:3a:b9:e4:db:08:22:ed:0f:28:86:
de:99:36:2d:3a:d6:f8:b1:45:12:7d:95:df:1a:b7:00:5e:b4:
c9:46:ef:09:3c:ed:09:d1:1f:c8:b0:d2:e4:4e:6b:48:5b:1b:
50:0b:2d:a2:4c:e1:5d:c8:cb:4f:d1:f8:30:00:7c:e2:b7:92:
9e:29:f3:c1:dd:ab:78:22:1f:bb:f4:9e:f3:1b:1b:5f:00:6e:
cb:18:5d:0c:78:45:29:9e:09:9d:26:81:10:02:aa:81:e2:ca:
02:41:7f:00:4e:79:69:19:9c:98:78:60:46:85:b6:52:7f:02:
6a:cf:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:14 2026 by rpki-client