
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa
File: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (raw, json)
Hash identifier: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=
Subject key identifier: 85:18:BD:F3:9E:F9:68:3B:D1:83:C7:BC:61:E9:42:B0:87:13:7F:1F
Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC
Certificate serial: 6F9172E630271E195F6F740C44DD9D38698B4FE9
Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa
Signing time: Sun 03 May 2026 03:19:22 +0000
ROA not before: Sun 03 May 2026 03:14:22 +0000
ROA not after: Sun 02 May 2027 03:19:22 +0000
asID: 138064
IP address blocks: 103.175.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl
rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:91:72:e6:30:27:1e:19:5f:6f:74:0c:44:dd:9d:38:69:8b:4f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC
Validity
Not Before: May 3 03:14:22 2026 GMT
Not After : May 2 03:19:22 2027 GMT
Subject: CN=8518BDF39EF9683BD183C7BC61E942B087137F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:9f:dd:6b:eb:fd:7c:16:2d:96:eb:f0:bd:
c2:04:ab:13:ae:64:ce:13:92:d4:9f:ed:d9:59:f4:
c4:ac:03:9a:6f:9b:7a:b5:33:75:62:73:a5:76:f6:
c9:a0:a3:16:fb:ba:f7:04:a8:31:b7:c0:09:36:e8:
55:23:c3:ee:3d:dd:c2:9f:34:d9:cd:0e:cf:32:87:
80:26:15:1c:78:2d:c1:82:1d:bd:b1:a6:59:fd:cf:
26:94:f3:9b:b0:04:77:a7:95:e9:16:61:d5:13:11:
b0:57:ee:de:35:b3:18:70:22:4d:d7:1d:83:2b:70:
c5:01:f5:f5:b4:27:99:de:67:ea:b6:e8:da:42:84:
0e:02:5c:a4:bf:f8:68:de:f8:57:0b:4d:7d:9b:1b:
63:d1:a0:b5:e1:c9:8c:d2:e7:c7:e2:a5:e4:a7:76:
69:4b:da:34:e2:54:de:bc:95:c4:54:25:4d:1c:b7:
20:65:e4:35:0d:e6:93:00:03:70:ba:6b:c2:0b:48:
2c:4c:8f:03:61:70:d9:99:8b:54:bf:be:d3:1e:5f:
8f:ae:5b:a4:e5:c3:82:46:39:5c:b4:82:7f:18:13:
7f:dc:f4:36:0a:5f:47:32:e6:ee:6d:27:ee:14:b0:
d2:fa:4a:82:bb:3f:7d:06:91:87:02:dc:44:65:a5:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:18:BD:F3:9E:F9:68:3B:D1:83:C7:BC:61:E9:42:B0:87:13:7F:1F
X509v3 Authority Key Identifier:
keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.82.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:46:f7:2e:8b:bd:61:d8:96:23:9f:b1:f7:7b:a2:2a:bf:57:
59:05:50:18:8c:dc:e1:b3:9a:9f:26:d1:7d:63:fc:4c:08:33:
9a:f8:31:0d:96:5f:c8:35:16:b9:c1:bb:4a:16:e9:6f:9f:53:
6c:31:de:f3:63:16:fb:c8:1a:74:b3:18:07:54:3e:bb:65:99:
38:21:a8:bf:f9:28:a6:15:9f:55:f2:fc:79:e4:aa:7d:75:3b:
3e:52:bb:08:61:66:ef:ed:98:5d:26:d6:7b:34:b7:3a:0e:d2:
e3:4c:be:71:d0:d9:af:31:15:35:bd:0f:32:0a:5e:5f:54:a1:
69:76:f9:95:8b:b0:16:1b:bf:27:54:86:86:a2:d3:20:92:3d:
84:0b:af:fa:90:cc:dc:63:cc:e0:10:d6:68:dd:9d:40:77:d9:
e7:41:42:f6:78:dc:96:e1:5a:80:d0:d5:b7:48:4f:27:43:d8:
9f:a4:e8:e5:f9:05:f4:b2:a1:bf:89:b3:af:d6:4c:2c:dd:86:
e9:3b:fd:87:af:90:1f:1d:da:ab:9f:bd:4a:59:f3:a9:d4:0c:
68:65:4c:c4:00:76:21:bb:3c:03:97:4a:99:80:f6:30:a1:d7:
5f:e1:ad:f3:9a:6f:de:f0:b6:d5:41:0b:10:65:00:fc:9d:41:
ce:e2:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:58 2026 by rpki-client