
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa
File: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (raw, json)
Hash identifier: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=
Subject key identifier: 4B:94:F3:79:C6:2F:2A:81:0D:D9:09:AD:56:18:03:43:94:A6:56:A2
Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Certificate serial: 35CF0A54AEC31DB94FF7AF90ED7BFE3BBFAF3309
Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa
Signing time: Sun 03 May 2026 03:16:50 +0000
ROA not before: Sun 03 May 2026 03:11:50 +0000
ROA not after: Sun 02 May 2027 03:16:50 +0000
asID: 134643
IP address blocks: 103.207.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cf:0a:54:ae:c3:1d:b9:4f:f7:af:90:ed:7b:fe:3b:bf:af:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Validity
Not Before: May 3 03:11:50 2026 GMT
Not After : May 2 03:16:50 2027 GMT
Subject: CN=4B94F379C62F2A810DD909AD5618034394A656A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:d6:f4:e2:53:16:07:2c:79:67:48:6e:26:
d3:03:21:5d:c8:d6:37:24:79:e0:77:3c:ad:1a:dd:
c4:27:c8:a5:96:0d:bd:41:85:cf:4a:e0:63:93:ae:
3a:5d:fd:48:62:54:d7:a5:a7:32:0e:77:9c:87:03:
0d:ea:3a:41:07:e0:2c:43:8d:a0:61:8c:93:40:ee:
3d:ef:3f:8c:1f:f2:54:e7:15:67:df:e3:45:86:00:
e1:b3:79:96:f8:70:3e:28:07:02:a9:40:97:b9:bb:
08:6a:18:20:e0:9c:2e:1a:81:f6:e1:6d:8e:42:86:
0c:3e:79:6d:47:d7:71:04:8e:25:4f:8d:be:62:1e:
af:87:8a:f2:26:eb:90:03:ea:21:5d:27:95:39:46:
d8:af:b7:e5:d0:a9:43:cf:ca:a7:1c:4e:78:3e:d1:
c1:5b:7a:36:7e:f5:0f:6a:cd:ff:0c:57:a1:67:03:
d9:e1:ca:99:16:ed:e2:42:a2:b1:84:7d:1e:4d:f0:
01:16:bf:e4:e2:a3:69:7b:f8:bb:27:56:4d:88:00:
ee:88:d5:e5:4d:15:64:f4:98:86:47:28:95:1c:8f:
b0:5b:6c:57:d8:7a:f7:a4:6c:86:07:97:26:2f:ad:
fb:c1:f4:47:a7:bb:94:0f:ce:ac:e2:64:a5:9a:a1:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:F3:79:C6:2F:2A:81:0D:D9:09:AD:56:18:03:43:94:A6:56:A2
X509v3 Authority Key Identifier:
keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.207.96.0/22
Signature Algorithm: sha256WithRSAEncryption
14:0b:c1:9d:82:4d:e1:4e:7c:35:1d:e0:92:a2:2a:4b:06:2f:
27:59:3d:c5:61:36:0b:70:04:06:6b:c7:bd:e9:c0:c3:47:7b:
8d:f3:ee:f3:6d:9a:e4:6a:88:bc:02:3d:cb:33:1c:f6:dd:75:
c1:50:99:02:2f:02:da:d3:11:4f:20:25:03:6c:fc:5e:28:57:
ac:3f:ea:4d:6c:b0:2e:78:33:c8:5e:9b:4a:4a:3d:ab:c9:12:
1f:c2:29:28:24:93:16:32:82:f0:15:29:07:f8:62:a1:66:4a:
e9:c1:7c:aa:10:7a:7d:e5:fa:fb:1f:6b:d7:34:12:72:6e:33:
89:84:df:36:88:46:55:bf:53:c9:7f:b8:1a:b3:fa:71:81:d2:
79:df:9a:7a:95:3a:a7:11:06:ec:c5:2f:b3:83:8a:02:c7:32:
40:e1:6d:3c:1a:93:d5:b3:32:bb:7f:89:8c:3e:a8:05:68:1d:
76:47:e0:ab:c1:f3:d4:92:86:87:bc:16:17:c7:19:07:3d:39:
c3:f5:dc:f2:a8:ce:e7:1b:de:92:7b:d2:e3:34:40:1c:7f:2f:
60:e8:52:5c:f9:5d:b5:53:75:c4:a9:17:14:c6:20:bc:e6:2d:
ca:5f:eb:0e:7d:57:e3:67:88:be:14:db:89:fe:4c:89:a8:ff:
1b:da:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:39 2026 by rpki-client