
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa
File: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (raw, json)
Hash identifier: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=
Subject key identifier: F3:B5:9F:D0:14:2E:09:AD:04:B2:B8:93:2F:B8:C0:43:DC:FC:A3:30
Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Certificate serial: 3923480252E11C73B716B71F64C41E63A2BEC4A0
Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa
Signing time: Sun 03 May 2026 03:19:39 +0000
ROA not before: Sun 03 May 2026 03:14:39 +0000
ROA not after: Sun 02 May 2027 03:19:39 +0000
asID: 141970
IP address blocks: 103.167.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:23:48:02:52:e1:1c:73:b7:16:b7:1f:64:c4:1e:63:a2:be:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Validity
Not Before: May 3 03:14:39 2026 GMT
Not After : May 2 03:19:39 2027 GMT
Subject: CN=F3B59FD0142E09AD04B2B8932FB8C043DCFCA330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:8d:7a:e0:aa:aa:d0:16:c3:52:7e:d5:01:
c0:68:b4:d6:84:5a:75:ae:8b:7a:98:12:a5:0c:63:
09:15:b9:17:d3:18:f0:e3:d3:ff:7b:6b:40:3f:6e:
e2:c8:77:f8:00:46:41:a2:35:82:24:7c:9e:34:42:
cf:68:6a:2f:9b:98:33:ae:c9:6a:a7:be:26:1f:ad:
25:d3:3a:e7:c7:e2:50:6d:71:8d:b7:08:68:37:fa:
40:0c:0d:67:c7:ad:4f:6c:c8:6a:74:7a:42:b4:2f:
0f:e4:64:6f:8a:2a:a7:fb:d8:39:a0:79:ef:d9:aa:
2d:ad:35:c8:fc:68:c3:cf:52:ad:20:1a:89:5c:57:
d2:4a:b5:88:7f:75:e0:d8:ed:15:9e:4a:a3:d6:61:
ae:0a:ec:5c:82:71:c0:c1:36:b3:4a:14:aa:30:3c:
f3:65:79:dc:ca:92:3f:77:45:f9:48:17:d7:d2:ba:
b3:10:54:23:c2:be:c4:0b:d8:6d:1b:55:36:0e:de:
26:24:19:f2:e9:31:d8:04:11:e6:8a:d0:f9:a4:b1:
26:e1:a6:cf:76:e2:08:e0:ac:28:46:19:e1:9c:87:
6d:ad:30:59:74:75:de:fd:fb:ee:b0:4e:9b:0e:3c:
fc:ac:57:03:2d:91:07:37:3a:5d:12:46:50:33:49:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B5:9F:D0:14:2E:09:AD:04:B2:B8:93:2F:B8:C0:43:DC:FC:A3:30
X509v3 Authority Key Identifier:
keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.20.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8d:a1:c1:64:de:97:49:7e:d1:54:bb:66:17:ff:5f:59:61:
ec:7f:43:52:39:84:5c:82:43:7b:c6:6f:15:8a:d2:82:04:20:
3e:81:84:6c:11:68:c4:cb:41:f5:00:36:2e:65:a7:9c:4c:f4:
a0:31:12:02:b5:1c:a8:37:b3:1d:5b:b6:dd:8b:18:f2:17:c7:
21:0a:e3:82:e5:c1:1c:7e:46:74:ec:0c:41:45:88:9e:16:11:
80:6c:8d:9d:00:69:fd:57:fb:5f:20:13:fe:65:5c:2e:c3:f1:
7e:ea:28:1f:f2:bd:3b:9a:ba:c5:52:1b:9f:b3:de:8a:4a:d4:
9e:11:29:d3:86:8a:e6:36:af:83:c5:3a:24:47:4d:08:bd:72:
be:c3:08:ca:2b:7e:45:35:7d:e2:99:ab:63:cc:c9:2c:c9:00:
87:ee:96:0a:53:10:91:f6:56:e2:9a:39:81:24:a9:2b:a5:5d:
ab:09:63:9c:31:04:52:37:5b:56:0f:ee:ca:98:ed:bb:09:88:
49:46:f7:66:6c:ea:20:d1:4d:b9:64:93:fe:04:ef:af:f3:93:
f8:f0:96:65:0e:9f:6d:4a:15:90:b9:85:e0:eb:e2:c3:6d:a2:
43:4e:de:70:c9:70:1c:ed:0b:13:c6:68:9e:77:fc:7e:d7:ae:
ff:0b:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:49 2026 by rpki-client