
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3130332e3136372e33302e302f32332d3234203d3e203137393935.roa
File: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: CSG0H/DZBA3s6AGv8lPFFy0HS/2QV2mwHN4jVwXK0hQ=
Subject key identifier: 64:47:DB:6D:3C:23:F3:D2:45:C7:99:1C:22:91:5E:9A:58:D3:18:51
Certificate issuer: /CN=3FB91A5366225ED818B1E745D18CD5555C3F9180
Certificate serial: 2C5201C070971069F04A3F9F9189DB6C23E4A07E
Authority key identifier: 3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3130332e3136372e33302e302f32332d3234203d3e203137393935.roa
Signing time: Sun 03 May 2026 02:45:26 +0000
ROA not before: Sun 03 May 2026 02:40:26 +0000
ROA not after: Sun 02 May 2027 02:45:26 +0000
asID: 17995
IP address blocks: 103.167.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl
rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 19:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:52:01:c0:70:97:10:69:f0:4a:3f:9f:91:89:db:6c:23:e4:a0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FB91A5366225ED818B1E745D18CD5555C3F9180
Validity
Not Before: May 3 02:40:26 2026 GMT
Not After : May 2 02:45:26 2027 GMT
Subject: CN=6447DB6D3C23F3D245C7991C22915E9A58D31851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:11:a4:fd:e6:3d:0c:5a:dc:92:bb:1d:ab:
53:7f:55:4f:75:00:d9:64:ec:c8:46:04:0e:3e:58:
f9:0b:33:b6:30:22:c5:51:41:8b:41:51:e1:ba:4f:
e1:7c:e3:0c:70:7a:d5:fd:42:46:54:43:fe:f3:d9:
b0:0f:c0:a9:df:4e:7f:34:ce:ae:07:0e:2d:d5:33:
9b:94:6a:6f:af:80:5c:de:f1:b7:af:2a:ed:2b:40:
69:5c:f9:f1:44:c0:91:88:75:04:ea:94:c1:25:03:
16:fe:86:9a:1b:9e:8f:34:0b:2b:75:ee:26:94:bc:
79:73:56:e3:91:5f:3b:32:f7:f9:06:f9:ea:75:87:
35:24:b6:9d:8c:39:48:9d:b7:48:5e:41:c7:03:e4:
a6:31:2e:70:5d:c2:20:f9:78:bd:10:21:0a:37:14:
07:eb:81:c0:51:46:e1:f0:36:d5:d1:25:f7:41:11:
e2:6d:4b:a7:27:82:8f:83:a9:7f:32:8b:14:2a:62:
2b:74:97:11:93:9a:a5:8d:9e:30:cf:1f:44:f0:33:
d4:6c:71:de:34:5d:22:29:2c:99:01:f3:42:59:6c:
cf:e1:2f:d0:92:6a:43:37:c5:77:2e:86:a4:97:be:
19:90:05:e2:ea:3b:c7:9a:83:21:e5:8e:a5:65:9b:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:DB:6D:3C:23:F3:D2:45:C7:99:1C:22:91:5E:9A:58:D3:18:51
X509v3 Authority Key Identifier:
keyid:3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3130332e3136372e33302e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d3:f3:0d:70:77:1f:6b:6e:cd:86:18:e2:9d:d2:f3:f7:a1:
79:a0:86:83:46:a0:52:be:b4:58:00:ab:75:bb:80:96:fe:9b:
61:f6:ce:1e:88:52:41:94:bb:54:b6:f8:44:c6:8a:a0:ad:3e:
57:9d:e0:ef:fc:42:08:58:f5:16:e9:05:4c:1e:f1:3b:7c:f0:
e1:7f:5e:0e:cd:e0:bb:bb:c0:ec:9b:03:54:90:0a:65:0c:bc:
05:d4:6b:3a:fa:aa:6e:77:51:39:b4:4a:ce:8a:a3:78:99:ee:
63:80:f7:5b:17:8e:ec:98:9b:1e:4b:d7:d5:5e:bf:06:33:f9:
fc:90:98:1c:07:34:bd:02:92:5d:49:dc:4e:de:6b:10:f8:e6:
f4:81:7d:7f:61:99:2d:b7:0f:fb:70:38:cd:b2:9f:d8:44:7a:
ca:c5:34:28:96:d1:9e:94:4c:74:7c:5b:b0:01:57:c0:6a:d3:
9d:5d:6c:15:28:32:57:54:eb:16:d5:2a:f8:f0:4d:f9:59:90:
ba:7b:32:04:00:d7:54:8c:14:1e:24:30:6c:36:c8:b2:88:2c:
a4:cd:08:de:cf:30:db:4f:d3:76:5a:a3:8f:48:72:f8:8e:61:
4a:20:f7:f1:8c:58:8d:52:45:93:5b:99:92:8c:1b:33:6c:ba:
7f:5b:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:34:29 2026 by rpki-client