
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
File: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=
Subject key identifier: 6A:ED:D6:62:33:95:83:85:60:C5:74:98:83:8F:A8:C4:83:8B:63:2B
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 784B7A0BD7F17CC919AC6FC686F22115EDA004CB
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
Signing time: Sun 03 May 2026 03:18:14 +0000
ROA not before: Sun 03 May 2026 03:13:14 +0000
ROA not after: Sun 02 May 2027 03:18:14 +0000
asID: 38165
IP address blocks: 103.83.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4b:7a:0b:d7:f1:7c:c9:19:ac:6f:c6:86:f2:21:15:ed:a0:04:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: May 3 03:13:14 2026 GMT
Not After : May 2 03:18:14 2027 GMT
Subject: CN=6AEDD6623395838560C57498838FA8C4838B632B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:02:4a:47:12:8c:14:8c:de:d3:bc:72:9b:
d2:2c:da:6d:2b:4f:ed:67:e6:49:16:dc:9b:36:02:
0a:0f:0e:1f:99:d3:91:65:45:de:33:c0:e0:58:89:
13:fd:99:f8:6b:78:a3:17:47:71:a7:f0:60:ac:86:
36:24:dc:f2:cf:5c:42:30:a7:4a:e7:da:85:63:a9:
0e:99:56:fe:f3:5b:5e:21:80:9b:a5:a5:86:a0:e8:
b1:8f:82:17:6e:b2:3a:01:2d:56:27:b0:04:6b:1d:
97:08:b0:58:0f:47:b7:c2:6c:60:a4:ae:0b:27:ae:
f8:b7:44:0d:8e:ea:79:a1:62:e8:ad:12:e7:71:d5:
0f:cf:80:4f:06:14:18:13:c6:81:93:09:81:ee:80:
f4:5f:6c:eb:af:0b:f7:f8:e3:f6:78:ec:b1:85:9c:
12:91:69:bf:99:fc:fa:53:15:00:3c:b9:48:d7:13:
6b:c4:f8:e3:9c:10:1f:75:da:57:66:63:90:fc:1d:
6e:8d:5e:a4:43:9a:5f:12:a4:e1:40:a0:4d:69:74:
a8:3f:59:f2:da:2b:eb:52:05:2f:af:bf:23:1f:7f:
ff:10:ed:50:61:35:68:cc:7d:c1:e1:14:24:6e:bb:
c1:97:3c:15:af:29:59:d7:90:5b:fd:96:17:15:07:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:D6:62:33:95:83:85:60:C5:74:98:83:8F:A8:C4:83:8B:63:2B
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.143.0/24
Signature Algorithm: sha256WithRSAEncryption
03:75:0e:a3:da:8b:8a:df:b9:6b:92:a1:e0:c0:b5:a0:96:29:
b5:cb:5d:af:71:fb:6e:57:67:f1:3d:8b:29:b7:1b:48:7d:1f:
39:cc:6c:e6:0e:6b:34:ce:32:df:3c:43:32:2a:09:50:b7:95:
bc:86:25:d3:c5:24:a4:a4:d6:8e:82:9c:d3:bd:c0:23:45:21:
ca:39:d1:12:57:28:59:3a:59:23:49:5f:0b:cb:27:0d:4c:01:
ae:f7:fc:99:b1:20:f5:30:74:6c:68:65:36:52:a5:f6:7d:ba:
b5:8d:04:66:a0:46:f4:3a:ba:c0:0b:3d:c3:fd:d2:ec:77:bb:
c2:d0:10:27:8c:8d:c1:fe:50:2d:66:5b:0f:3c:9b:ac:70:f7:
26:77:c8:8a:08:6a:3a:cb:89:e9:c3:3f:0d:aa:83:fd:a9:5e:
a8:d2:c4:19:66:35:15:b8:7d:66:66:cf:41:62:87:9b:13:57:
1a:0b:85:87:5f:ca:fc:67:8b:14:d8:88:b7:55:60:53:11:73:
10:23:88:fa:f8:6c:4b:b6:ea:d1:40:e7:87:eb:54:71:8e:b5:
36:86:e3:ea:de:48:b8:41:86:fe:c4:40:1f:cb:3d:1d:ec:f1:
b3:f2:fb:58:7e:fe:80:f6:d9:ec:fa:6b:90:0c:e8:73:01:5f:
73:11:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:40 2026 by rpki-client