
$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
File: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=
Subject key identifier: B8:9A:A1:0D:C2:14:90:F2:55:1E:A5:CA:92:7D:BF:97:F7:B2:45:B9
Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Certificate serial: 0AE4EB4FCAB19DBA1739B742EC89267F69D01D63
Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
Signing time: Sun 03 May 2026 02:15:40 +0000
ROA not before: Sun 03 May 2026 02:10:40 +0000
ROA not after: Sun 02 May 2027 02:15:40 +0000
asID: 9341
IP address blocks: 103.180.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e4:eb:4f:ca:b1:9d:ba:17:39:b7:42:ec:89:26:7f:69:d0:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Validity
Not Before: May 3 02:10:40 2026 GMT
Not After : May 2 02:15:40 2027 GMT
Subject: CN=B89AA10DC21490F2551EA5CA927DBF97F7B245B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:99:81:9b:cd:c0:83:51:e1:9c:3e:45:68:
a2:76:10:03:e7:66:77:33:46:3d:29:a3:c7:d9:3f:
a3:46:77:d8:c3:48:fd:9d:bd:73:9b:dc:ee:73:3a:
6c:0f:bc:88:08:19:da:c5:47:3e:a3:19:c6:c2:b3:
a0:ab:fe:3f:66:88:fa:c6:9e:07:6d:fa:0c:65:62:
66:35:61:1e:23:58:1c:54:1a:d1:1a:cf:e7:93:df:
44:f0:50:74:ff:f9:de:ed:7d:a0:e1:75:65:d9:00:
79:a9:5c:64:bc:3f:34:5f:47:fa:f9:03:01:62:86:
70:bd:2d:ef:b8:1b:e2:d8:93:d1:8c:dd:5e:14:9e:
13:11:fd:4a:b7:77:d1:ea:f9:ba:d2:61:3f:80:a6:
f1:2d:07:cc:a4:e4:52:ca:5e:ed:dc:70:df:b9:b9:
b9:28:ab:d5:72:d4:a9:ed:e0:45:9a:d0:ff:d7:54:
3c:d5:78:3a:1b:7f:d8:fd:3c:32:68:71:ea:44:3a:
52:e6:ed:bd:5a:84:bc:f5:bf:ef:6d:d4:47:9c:5c:
5f:61:f5:a6:6b:d3:d1:35:f3:1b:4b:12:93:b3:d1:
4b:41:cd:ba:98:0e:85:08:68:6e:9d:51:05:f2:8d:
08:f4:bd:07:33:c2:2f:95:fb:07:78:9a:33:b9:29:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9A:A1:0D:C2:14:90:F2:55:1E:A5:CA:92:7D:BF:97:F7:B2:45:B9
X509v3 Authority Key Identifier:
keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:90:cc:62:09:1e:2a:1b:1c:0b:99:cc:38:d9:20:9c:96:7a:
22:39:cd:2d:8f:c4:c8:0d:e9:c8:1b:69:1f:f2:71:8e:fc:d4:
9f:f7:12:57:12:d8:ce:75:bb:94:b2:e7:45:87:2d:47:d4:6c:
b3:2b:1d:70:35:4e:4f:3f:13:54:2f:d8:57:da:e7:b5:79:f2:
73:2f:04:39:7d:95:f1:13:84:a8:21:6d:1a:c3:a2:5f:c1:0c:
f7:93:ac:bc:b1:d5:c6:45:d5:5a:13:86:79:82:b0:ba:82:5a:
4f:16:c5:83:db:78:a5:72:b0:ef:02:c4:76:25:72:0a:9b:5d:
2d:fd:c3:bd:40:35:50:60:b3:27:25:e7:ac:25:86:6b:8a:82:
ca:5f:e6:b0:29:37:4e:95:d7:2d:11:52:de:19:05:1f:ea:89:
c1:f2:9c:bb:66:49:44:c4:32:60:ee:9c:d3:9e:50:1e:44:fd:
71:0e:e3:e1:f3:3a:bc:e5:ae:ce:97:00:61:44:96:bc:f7:a6:
7d:40:09:ee:ff:e8:f2:15:4a:33:e5:6b:8b:2d:49:72:07:c1:
21:8b:14:a7:4f:5b:a7:13:c0:cd:52:a2:5a:7f:f4:45:a3:14:
6c:72:26:45:02:18:09:19:7c:a1:5a:ff:c9:bb:38:11:99:55:
2c:7d:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:31:35 2026 by rpki-client