
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
File: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier: mCuIl3B+Pq3Irur4J3MaaMeyRxcQ7JCNDx31iNrLDkc=
Subject key identifier: 4E:AA:00:6C:7A:01:82:59:FF:6B:8C:F1:2A:BF:61:78:36:D9:E2:39
Certificate issuer: /CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2
Certificate serial: 1CCE5E737D5C2E218EFCF04FD4B852265CD2FAFA
Authority key identifier: C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
Signing time: Sun 03 May 2026 02:15:36 +0000
ROA not before: Sun 03 May 2026 02:10:36 +0000
ROA not after: Sun 02 May 2027 02:15:36 +0000
asID: 17995
IP address blocks: 103.158.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl
rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ce:5e:73:7d:5c:2e:21:8e:fc:f0:4f:d4:b8:52:26:5c:d2:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2
Validity
Not Before: May 3 02:10:36 2026 GMT
Not After : May 2 02:15:36 2027 GMT
Subject: CN=4EAA006C7A018259FF6B8CF12ABF617836D9E239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:92:7a:c9:28:8e:91:41:6f:86:a6:21:cb:
99:d6:b9:83:b0:63:d7:6f:db:06:bb:a2:d2:06:9c:
7c:d2:08:eb:6e:3f:6d:d9:20:0d:1f:ab:64:07:f1:
aa:bf:70:b3:d6:8a:10:f0:6f:50:8a:77:4e:0b:a1:
6e:d8:0a:1d:b8:48:48:67:ba:b7:84:31:5e:79:5d:
be:10:a0:88:16:43:04:b7:df:d0:53:02:51:5b:23:
4c:75:60:26:98:d6:62:10:bc:3d:e7:0c:a0:53:9c:
b0:7b:a4:1c:0c:79:9d:70:be:ed:b7:33:23:97:8f:
35:8e:8c:57:66:ac:38:78:c5:71:f5:1a:51:b7:b2:
be:de:80:b2:7f:bd:f1:61:f7:26:50:04:61:56:61:
a7:0f:8c:b4:82:ff:0c:d1:0f:1d:0d:e8:dd:84:03:
23:91:af:ad:a6:51:8c:0e:3b:4a:d6:f0:1c:7b:10:
4c:cf:a0:14:4d:ff:68:65:52:32:94:4f:0a:21:7b:
83:96:47:b1:8f:0b:3c:c9:24:68:3b:3c:a0:8e:b2:
7b:da:6a:cc:3f:35:57:50:59:2a:ea:cc:67:56:81:
54:d7:ef:43:61:1c:10:3e:dd:69:16:79:0d:12:80:
9a:69:d6:c6:7e:70:de:0a:c4:f3:17:1b:37:e1:b0:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AA:00:6C:7A:01:82:59:FF:6B:8C:F1:2A:BF:61:78:36:D9:E2:39
X509v3 Authority Key Identifier:
keyid:C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:27:c6:79:0c:b5:70:2d:2e:d8:7f:d9:4e:cb:9f:e9:dd:ef:
6d:97:f8:80:b6:05:54:4d:cf:df:fc:eb:15:96:c2:bc:a2:a9:
b2:b1:18:f6:c6:31:cd:c6:35:34:d5:29:59:1e:54:87:7f:62:
25:66:a0:e0:be:e5:a7:b6:fd:6a:a0:c7:e9:09:5b:7e:bd:b4:
91:dc:63:4a:55:77:2f:8e:8a:6f:2a:f6:24:e7:c4:3d:89:4c:
ac:db:29:f0:aa:3b:ea:ce:9f:50:04:08:fe:51:e9:e1:a0:b8:
bb:bd:2a:ae:c2:e7:22:8b:39:a3:01:4a:6e:c0:82:17:c9:74:
cd:9d:06:74:8f:41:03:ae:03:95:da:68:d4:64:7a:81:c1:f2:
4c:e6:07:4c:0c:19:5d:d6:4d:a2:af:e6:01:af:8a:54:9f:e2:
31:6a:e9:1f:16:24:d9:b5:26:62:b3:d2:08:ce:ef:5a:0e:7e:
74:57:03:08:1b:68:e0:e0:be:50:7a:da:2d:5d:f4:3d:50:2c:
22:1f:82:2e:1f:b7:10:8d:0a:51:07:1a:ed:05:59:d1:a9:a9:
e5:e5:1b:1b:fb:19:d5:0d:57:8e:f6:3e:23:4f:5d:7a:40:69:
5c:e1:d0:e8:0d:e3:1f:0e:39:e3:42:6f:ab:04:d9:2d:83:a3:
25:79:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:36:51 2026 by rpki-client