
$ rpki-client -vvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130332e3234362e302e302f32322d3234203d3e2039343232.roa
File: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (raw, json)
Hash identifier: Y0BQZtsB87a9/5oaZfRO5KllrRmXSjrLR0zXbqGB394=
Subject key identifier: 4C:4E:54:53:80:4C:42:2F:EC:38:B2:9F:B9:2F:7E:2A:DD:91:02:62
Certificate issuer: /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial: 0B3F9B3E27B556955F4995B8136FAC4C2174E017
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130332e3234362e302e302f32322d3234203d3e2039343232.roa
Signing time: Sun 03 May 2026 02:16:23 +0000
ROA not before: Sun 03 May 2026 02:11:23 +0000
ROA not after: Sun 02 May 2027 02:16:23 +0000
asID: 9422
IP address blocks: 103.246.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 16:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3f:9b:3e:27:b5:56:95:5f:49:95:b8:13:6f:ac:4c:21:74:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
Validity
Not Before: May 3 02:11:23 2026 GMT
Not After : May 2 02:16:23 2027 GMT
Subject: CN=4C4E5453804C422FEC38B29FB92F7E2ADD910262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:d5:68:95:ab:c2:5d:90:b3:78:f6:6d:bd:
32:9c:65:ee:59:e7:e2:dd:8a:fb:79:8a:7b:f0:45:
4a:01:7a:b1:c3:ff:a7:01:7c:fd:14:c0:82:91:fe:
a0:61:47:12:e5:cb:25:b9:92:d4:ff:5f:9d:67:4e:
d6:18:3a:e1:63:35:4c:a0:21:a5:84:4a:00:3a:23:
2e:41:09:31:5b:3a:3c:af:21:82:79:01:98:37:a3:
5e:51:99:8a:99:e6:8d:06:c4:4b:0c:00:07:bd:d8:
07:32:56:a3:ec:f3:09:80:8d:cc:08:62:ef:7b:2a:
ea:5e:c8:1f:fc:b8:d7:f8:58:aa:d0:34:a5:b8:e5:
83:88:5f:61:2a:e1:8b:a1:16:41:7a:fa:a7:9e:af:
7b:60:a5:71:65:50:53:e1:59:11:c1:61:a2:10:f7:
d0:47:5c:2e:a6:e6:ee:e5:fd:94:a8:9d:88:66:e7:
ad:d3:53:0a:b6:53:09:da:31:bf:3a:a8:17:99:1c:
2d:55:e4:0c:e7:57:44:86:87:b1:be:e6:b9:0a:e1:
47:7c:48:6d:76:76:52:1c:d4:d0:bd:06:30:2f:65:
26:d6:db:0f:4c:f5:2f:cd:60:5c:86:b1:39:06:04:
48:7f:41:d6:ac:c4:20:24:22:8d:ef:0f:a0:67:9f:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:54:53:80:4C:42:2F:EC:38:B2:9F:B9:2F:7E:2A:DD:91:02:62
X509v3 Authority Key Identifier:
keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130332e3234362e302e302f32322d3234203d3e2039343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.0.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:62:9e:5e:99:9c:53:95:61:9a:11:92:a2:f5:ed:5b:f4:b9:
2e:27:43:da:e0:9d:59:89:f2:8a:f0:9b:1c:26:87:c4:09:15:
3e:47:2e:fc:15:3b:61:ba:9b:4b:64:0c:58:61:eb:08:a0:a9:
b2:05:5b:e6:e2:b3:da:a2:52:67:ab:66:d7:8e:ea:ab:5a:ae:
04:c1:43:9a:ff:5e:20:1f:56:8f:c2:c1:07:4d:cd:e3:8d:03:
f1:42:21:69:0c:f8:5b:88:11:ae:0b:fd:b9:ef:a2:9b:00:ef:
1e:ac:f9:6e:a4:d4:b4:86:7b:03:d5:61:58:10:09:98:fe:fa:
73:2f:b8:f7:82:4e:35:1c:3e:6b:2f:1e:f2:7c:c3:5a:b6:cc:
06:1a:2a:55:54:a5:97:49:fe:7f:b1:16:eb:d3:bd:1e:23:eb:
de:a2:e3:2e:f7:c4:dd:3e:41:22:b9:16:13:a0:95:5f:04:02:
ba:0f:fd:49:17:ab:f6:12:e3:7e:12:95:47:e5:aa:83:1c:3a:
7e:4f:c4:a0:21:68:67:ec:41:a8:72:40:9a:cc:33:aa:23:c8:
f7:c2:5c:42:05:d9:d6:89:eb:0e:4f:48:48:5b:96:98:e8:5f:
60:a8:45:78:be:e8:d7:f4:53:1f:b3:5b:77:0e:2b:f5:27:89:
b6:2f:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 20:05:49 2026 by rpki-client