
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa
File: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (raw, json)
Hash identifier: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=
Subject key identifier: 98:6E:38:5B:56:51:07:6E:94:49:22:55:4D:B3:29:33:7E:E6:38:EE
Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36
Certificate serial: 701F8B50A3023FA9605804D469534908BB2A4739
Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa
Signing time: Sun 03 May 2026 03:18:27 +0000
ROA not before: Sun 03 May 2026 03:13:27 +0000
ROA not after: Sun 02 May 2027 03:18:27 +0000
asID: 135449
IP address blocks: 103.65.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl
rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1f:8b:50:a3:02:3f:a9:60:58:04:d4:69:53:49:08:bb:2a:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36
Validity
Not Before: May 3 03:13:27 2026 GMT
Not After : May 2 03:18:27 2027 GMT
Subject: CN=986E385B5651076E944922554DB329337EE638EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:1d:36:52:77:fe:83:a0:f7:79:56:ce:e9:
69:a2:25:b3:3a:4e:69:49:a0:0e:d0:7c:e0:21:08:
b5:40:a5:00:63:77:0f:ad:ae:ee:d9:2e:e5:de:74:
16:a2:16:ee:16:5b:a9:37:18:fb:a4:d7:09:c8:e6:
4b:e1:e7:ae:8a:e3:aa:b7:b7:6e:e8:91:22:98:33:
c0:aa:76:85:e7:b4:12:59:89:c6:ea:07:86:d4:9f:
91:50:97:de:d0:69:35:79:5d:de:55:8f:32:b0:de:
2e:43:35:c3:36:19:f2:8a:3f:60:70:13:75:59:46:
ea:10:67:42:89:5e:ef:2e:a8:ab:45:b0:bd:e5:fb:
6e:df:01:24:5e:7b:9b:e3:2d:76:12:8a:5b:f8:41:
82:66:c1:43:94:13:af:5d:23:9e:1c:76:f4:51:0a:
99:07:0e:da:dc:2a:90:6f:9b:68:e4:65:ef:1a:b5:
72:66:83:30:26:8a:c5:a3:23:b2:65:f2:ad:7b:75:
4a:a3:c2:7f:6d:ee:f7:d9:ea:10:a7:06:41:8f:10:
9f:5d:5a:61:19:c6:fe:8b:b1:1a:ed:b8:7d:31:52:
7f:eb:ea:70:9f:90:c3:8b:60:87:22:f4:b2:f3:08:
a0:a9:ba:f6:cb:d4:86:c0:4f:81:32:c2:c3:68:e8:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:38:5B:56:51:07:6E:94:49:22:55:4D:B3:29:33:7E:E6:38:EE
X509v3 Authority Key Identifier:
keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.65.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:53:49:ef:f3:31:61:fa:c1:99:82:47:2e:7a:c3:17:17:e3:
ca:b2:b3:22:26:98:08:7c:7f:d4:d6:e5:a8:82:af:5c:27:5b:
14:64:9d:fa:c9:c2:12:1b:06:8e:99:0f:1d:80:b1:33:13:12:
5c:9c:84:2b:82:64:d5:6c:34:1d:4d:3c:6e:b0:69:50:26:81:
e4:d9:b6:ef:cc:f5:55:b4:2d:93:58:ef:eb:06:d8:10:fb:a4:
ef:cd:ae:97:4a:c7:3d:69:70:41:f8:59:df:1b:f8:9b:4c:fd:
4a:cf:b5:2e:8d:7e:51:a9:11:f8:8e:e2:89:6c:6f:3d:4f:39:
00:33:7e:a6:42:56:fd:08:e4:f2:7d:63:0c:e1:fc:5b:16:f4:
f3:76:fb:66:ad:a4:c8:52:ec:ce:75:7c:09:1c:c7:50:42:10:
28:ed:db:17:75:f7:12:e5:af:f4:68:3c:b3:4a:8f:c7:d3:8d:
f2:2f:d6:a6:76:1e:bd:b2:09:b7:dd:70:3f:f0:2d:77:f2:e6:
0f:2f:53:86:56:3c:1f:e4:a6:54:ca:37:e0:e3:24:36:2e:73:
03:6d:ce:92:5b:93:1a:f2:77:9f:e8:23:12:e9:97:a6:07:5e:
b8:5f:bd:37:c4:a4:8e:18:ed:59:85:d0:c5:2b:0b:45:48:61:
15:2b:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:14 2026 by rpki-client