
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa
File: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (raw, json)
Hash identifier: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=
Subject key identifier: 09:2C:D7:10:46:8C:83:DA:FE:1A:26:43:5A:B6:FC:55:8A:6B:84:57
Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A
Certificate serial: 3BD65FD731E67D66961FB6478E8DEF1E86270C87
Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa
Signing time: Sun 03 May 2026 03:18:50 +0000
ROA not before: Sun 03 May 2026 03:13:50 +0000
ROA not after: Sun 02 May 2027 03:18:50 +0000
asID: 150200
IP address blocks: 103.196.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl
rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d6:5f:d7:31:e6:7d:66:96:1f:b6:47:8e:8d:ef:1e:86:27:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A
Validity
Not Before: May 3 03:13:50 2026 GMT
Not After : May 2 03:18:50 2027 GMT
Subject: CN=092CD710468C83DAFE1A26435AB6FC558A6B8457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:eb:e2:62:bf:84:8e:46:60:c6:bf:29:48:
bb:7e:5f:7f:8b:a9:1c:e6:a9:a3:17:3e:1e:04:c3:
d0:a5:2a:cf:79:da:49:73:72:29:10:d8:01:bd:19:
d9:cb:74:9b:b9:60:6c:a1:e1:5c:73:50:6b:56:86:
1c:4e:f7:44:f3:eb:4d:e7:c4:ea:bc:ee:c4:c8:92:
6f:7e:a0:a2:51:d7:2e:e2:5b:d6:7e:d9:be:dc:e9:
25:14:2a:82:c7:39:da:23:68:80:86:8b:35:e8:86:
a4:35:89:cd:3b:6c:35:8d:4d:a8:c5:61:87:e4:db:
1c:09:e8:b9:c5:37:1e:58:a2:6f:b4:b1:3c:77:74:
d3:77:1a:81:c9:b3:76:38:07:f4:9f:8e:19:85:62:
99:97:29:cb:cb:57:6f:2f:6f:71:dd:d7:d6:6f:8a:
34:b5:f5:37:fb:ef:40:33:8e:d7:02:37:5b:ac:79:
4d:b1:07:ae:80:bf:bd:5e:90:23:8e:ca:ed:86:09:
f2:7b:4a:bd:4d:6c:d3:2b:45:11:ec:80:ec:ec:0d:
de:9f:fa:3c:8e:e8:8d:67:b8:a6:48:88:3f:b0:a5:
55:a5:6d:22:b6:12:b5:ef:67:14:1f:e9:65:a3:be:
91:a3:48:1c:4f:cc:b0:37:70:11:24:92:a7:0b:a9:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:D7:10:46:8C:83:DA:FE:1A:26:43:5A:B6:FC:55:8A:6B:84:57
X509v3 Authority Key Identifier:
keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:de:50:23:be:46:2d:a7:80:fe:db:d6:4b:5d:f4:c4:a4:9d:
d7:73:63:87:1f:01:43:8d:2e:a8:dd:9d:ec:c6:d7:36:99:21:
d4:5f:89:e2:19:e2:8f:97:92:97:ba:1f:3c:8c:e4:bd:da:fd:
f0:44:fb:70:96:95:50:e5:4f:3a:6d:bc:6f:1c:b4:fb:27:10:
b3:d7:b2:67:3c:d4:9c:a8:25:9e:35:ac:e5:ff:35:bf:ba:96:
9d:52:a0:8c:49:ad:2f:06:55:47:a2:9d:dc:00:5a:f8:1e:cc:
de:83:eb:9e:20:86:e7:31:4f:03:2b:7e:dc:71:b6:b2:d3:60:
2d:de:54:5f:ed:0b:79:ab:3e:77:3d:a8:85:c4:65:4b:40:88:
1b:c1:79:25:6e:d4:bf:d5:36:50:6a:69:29:35:5e:9c:1f:bd:
00:1f:43:fe:59:ca:2f:c6:1c:e5:09:1c:38:43:0c:1a:41:14:
17:ed:9d:54:5b:82:b8:1c:f3:bd:a8:3a:21:db:2d:8e:5b:c2:
f4:4a:13:64:39:f6:f8:c4:77:81:d1:52:98:db:6c:2a:ca:79:
a9:59:18:61:6c:f5:b9:2b:df:13:2b:b8:00:f0:d7:b3:cd:60:
9e:1f:1a:5c:cb:58:a6:60:6f:98:ca:df:7b:2c:f2:96:a5:fd:
1d:32:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:50 2026 by rpki-client