
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa
File: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (raw, json)
Hash identifier: H5sSyPFigguVE/vHzW6P4HgP+k0uALrlMtr/Qk6iyOw=
Subject key identifier: 28:30:70:30:23:20:04:6C:BB:FB:BB:07:6F:2C:38:F0:AD:9B:F6:C0
Certificate issuer: /CN=98EC8965126CEAAF07DB20456F30ADDA7E619614
Certificate serial: 3E439BCDC1295C31EB485B7674E45E839D924A7B
Authority key identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa
Signing time: Sun 03 May 2026 03:17:56 +0000
ROA not before: Sun 03 May 2026 03:12:56 +0000
ROA not after: Sun 02 May 2027 03:17:56 +0000
asID: 142381
IP address blocks: 103.172.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl
rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:43:9b:cd:c1:29:5c:31:eb:48:5b:76:74:e4:5e:83:9d:92:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98EC8965126CEAAF07DB20456F30ADDA7E619614
Validity
Not Before: May 3 03:12:56 2026 GMT
Not After : May 2 03:17:56 2027 GMT
Subject: CN=283070302320046CBBFBBB076F2C38F0AD9BF6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:1b:b0:8d:35:f6:93:8d:68:fb:b5:49:03:
de:60:35:1a:e2:69:90:86:3b:18:c0:83:55:3d:7d:
c1:20:f2:36:cd:f1:59:e7:d8:22:02:40:8f:38:6b:
2f:5a:ff:8a:74:1b:61:0e:96:65:ef:6d:f9:5d:54:
ae:bb:69:87:df:e8:26:e1:ff:1c:a6:a4:fc:f8:6f:
bd:ad:33:c6:eb:36:1f:f0:93:94:c7:17:17:97:e2:
99:89:8b:7c:66:23:33:44:17:75:e7:79:e2:cf:0b:
37:40:4d:8f:b1:71:4d:42:b1:71:3a:3f:63:e5:f5:
79:a5:76:e1:c6:8e:9a:ed:bd:13:5f:8f:1c:de:78:
0d:d4:a8:bc:3e:32:66:f9:05:1f:cd:8b:93:0e:e4:
93:94:17:e2:97:30:db:27:a7:7c:08:b5:3a:4a:b5:
52:5b:fd:4b:1f:b2:fd:f8:4e:35:82:67:1e:25:a3:
4b:57:bb:b6:f4:ec:78:b9:3d:9a:38:71:45:27:10:
bb:b9:c8:eb:f4:a8:18:a0:7e:fd:b1:de:92:ab:dc:
c6:5e:f1:6f:f4:5e:4f:c7:10:ae:a8:f4:ac:bb:03:
0f:e6:9c:90:bf:c2:54:66:e1:9b:80:94:cb:6c:31:
e9:dd:96:4b:84:29:60:c8:c1:95:c6:21:15:20:02:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:70:30:23:20:04:6C:BB:FB:BB:07:6F:2C:38:F0:AD:9B:F6:C0
X509v3 Authority Key Identifier:
keyid:98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:cc:72:40:a5:73:d5:2d:c3:68:22:d0:71:8e:26:70:b9:07:
99:36:b1:45:b8:9b:d4:08:be:ad:3e:c6:94:04:86:b5:da:d0:
fd:ac:9f:aa:ed:76:5d:ec:a6:53:e9:9e:0c:9e:fb:c1:90:80:
85:07:ef:fc:79:ff:ff:c2:88:e0:12:d5:ea:58:cb:35:27:4a:
e7:1d:8e:bb:53:ee:16:47:c9:7d:6e:b0:d9:a6:fa:b6:1a:2b:
15:06:af:7d:7d:9b:3e:b9:ef:be:cd:1c:27:74:87:95:6d:db:
ca:97:42:df:61:02:16:ae:9a:8c:03:02:0c:a7:6d:69:27:28:
02:42:3c:ef:32:0d:1f:fb:74:d2:fc:74:52:9a:02:9b:1f:3c:
94:98:15:fb:ed:24:df:dd:ea:1d:a3:8a:0d:0c:fb:75:55:fc:
aa:0c:1d:de:c9:f9:b1:84:d0:54:9d:c2:e6:6a:8a:2b:ac:8b:
f6:5a:07:4f:1f:87:eb:bf:4c:dd:c3:54:d4:00:7d:5a:0f:58:
1b:dd:8e:be:e1:6d:b9:cb:0b:0f:69:8c:5c:9e:f9:cd:26:6e:
a6:ea:ac:b4:71:f6:69:e4:6c:c8:19:6c:dc:90:aa:3f:c3:ef:
0a:8c:a7:ea:08:3a:95:fb:f6:5a:e3:5b:b1:0a:26:c8:4c:1a:
ca:1c:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:34 2026 by rpki-client