
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa
File: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (raw, json)
Hash identifier: fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=
Subject key identifier: B0:4D:E1:FC:FC:17:2E:CC:D3:37:CE:3E:EB:54:54:9D:23:38:09:E1
Certificate issuer: /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0
Certificate serial: 47BB751F60956DAE5A5C3E84CAD2A021AD12984C
Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa
Signing time: Sun 03 May 2026 03:17:42 +0000
ROA not before: Sun 03 May 2026 03:12:42 +0000
ROA not after: Sun 02 May 2027 03:17:42 +0000
asID: 141107
IP address blocks: 103.210.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl
rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bb:75:1f:60:95:6d:ae:5a:5c:3e:84:ca:d2:a0:21:ad:12:98:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0
Validity
Not Before: May 3 03:12:42 2026 GMT
Not After : May 2 03:17:42 2027 GMT
Subject: CN=B04DE1FCFC172ECCD337CE3EEB54549D233809E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:ea:48:dc:73:d1:87:ce:57:19:f4:19:bb:
b8:c6:8d:45:f9:99:3f:27:9b:3b:82:8b:b5:a9:32:
81:23:2b:39:17:67:52:38:5a:8a:3d:5f:7c:7e:6b:
83:95:2f:0d:30:d1:bb:16:f9:36:43:e7:35:68:ac:
63:fb:13:42:9c:ce:76:b7:fe:05:c0:d8:db:bd:36:
7a:70:66:0f:b7:e0:46:d4:fe:7f:87:dd:d4:d7:be:
44:48:df:8e:3a:fc:ff:e7:3a:70:00:76:05:fd:92:
2c:6d:5d:2f:3a:45:71:99:ba:5c:b7:be:97:bb:4a:
67:f1:6e:05:32:8d:5f:fd:22:0a:77:d7:c2:be:63:
68:17:36:a1:e7:02:c9:a4:1d:12:02:03:f8:a6:e0:
34:56:18:6a:eb:79:a1:da:04:73:2c:4f:61:6d:12:
66:0d:8a:03:04:b4:e3:15:b0:a2:da:67:18:8a:18:
ce:e9:00:70:c9:f8:c4:c3:82:1b:00:64:95:31:9e:
70:da:09:80:c8:53:be:ef:4a:be:ad:62:f9:0d:9a:
66:4b:46:0f:ae:54:7f:45:d1:1a:41:a1:5c:dc:ec:
81:cf:18:88:3d:91:99:a9:1b:13:07:ba:15:92:92:
05:c0:22:15:7e:27:a2:ec:d4:58:64:0b:96:31:7a:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:E1:FC:FC:17:2E:CC:D3:37:CE:3E:EB:54:54:9D:23:38:09:E1
X509v3 Authority Key Identifier:
keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.68.0/23
Signature Algorithm: sha256WithRSAEncryption
18:1a:92:a4:ce:21:1e:fc:32:ab:c3:67:b8:c5:c3:b4:2b:10:
e1:24:d9:af:5e:41:54:a7:2b:95:98:38:1a:36:f1:6d:54:26:
df:1b:b8:a8:be:76:91:53:73:4d:db:a8:c7:0b:7d:ce:89:33:
53:89:cf:fa:2a:e5:75:25:eb:21:e4:a1:a0:0a:dc:4c:49:83:
6f:29:7b:f0:a5:3e:c7:a1:58:63:dc:fe:bf:3c:de:35:c3:8e:
95:f1:e6:c8:c9:52:4e:dc:9a:9f:50:c4:09:bd:b1:4f:b1:18:
48:42:3a:ee:15:38:e5:89:31:26:89:05:d5:f5:bd:54:ae:34:
3b:8c:7a:36:d9:70:2e:bd:9e:66:82:7e:66:2e:9e:59:fb:d1:
ff:9f:4d:3e:ff:4e:8b:63:e8:c0:78:60:2c:e6:42:22:bd:94:
0f:dc:37:a9:e6:dc:bd:a5:e1:c6:ba:58:5f:95:38:fd:29:a9:
22:20:36:23:97:51:ef:12:94:ed:6b:65:7c:37:dc:ba:37:3e:
54:2a:0a:cc:72:89:72:28:b2:14:cb:82:72:a5:8c:c9:dc:bc:
10:76:b5:97:f4:3f:c5:6d:cf:6e:37:5e:95:68:8e:93:c1:35:
3c:f0:d8:b5:cb:c6:4a:40:bf:c8:3e:86:6d:fc:b0:01:ec:47:
2e:1c:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:44 2026 by rpki-client