
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa
File: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (raw, json)
Hash identifier: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=
Subject key identifier: B9:C9:B9:55:58:9D:CE:3C:A8:80:67:10:52:9E:ED:30:DB:47:56:AA
Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Certificate serial: 7590686A289AD03AF84B24005F6ED2E29886688E
Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa
Signing time: Sun 03 May 2026 02:28:51 +0000
ROA not before: Sun 03 May 2026 02:23:51 +0000
ROA not after: Sun 02 May 2027 02:28:51 +0000
asID: 139989
IP address blocks: 103.148.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 20:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:90:68:6a:28:9a:d0:3a:f8:4b:24:00:5f:6e:d2:e2:98:86:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Validity
Not Before: May 3 02:23:51 2026 GMT
Not After : May 2 02:28:51 2027 GMT
Subject: CN=B9C9B955589DCE3CA8806710529EED30DB4756AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:d8:d5:41:c9:68:46:3b:b5:a2:de:aa:e5:
13:20:f4:2e:bb:0c:38:e1:ca:67:69:02:98:ab:33:
2e:6f:bc:e7:aa:c1:c5:12:ac:b4:3c:a2:48:81:dd:
df:d9:8e:31:c2:3a:8d:6a:57:07:aa:2a:71:3e:85:
6e:65:d6:e3:d1:e1:3a:b7:a8:b5:10:ee:c6:54:cb:
ed:3f:e1:9d:2b:b5:16:ff:99:b7:53:94:1f:93:5c:
32:29:b5:61:4c:ee:68:ba:2e:c5:b5:93:53:91:91:
6f:65:60:c7:cb:81:d0:5f:5c:be:a7:f3:b5:e4:02:
92:fe:cc:f9:9e:84:96:12:f3:15:6f:47:4d:c0:9d:
71:1a:bb:8d:1d:22:98:39:e8:b0:d0:37:8d:4b:6f:
d3:82:d3:54:d7:5e:2e:8d:79:50:18:41:33:a0:5d:
5e:02:22:63:14:4b:26:65:eb:95:63:20:d5:9d:e9:
ac:8b:95:f8:d0:1c:5a:d4:7d:39:d4:78:ae:1a:79:
ed:19:44:b1:d0:83:a0:c3:a4:68:18:1f:25:12:79:
47:c3:8b:78:63:6b:c5:cb:47:69:15:ae:ee:38:c7:
53:ef:1b:59:8e:8a:44:46:b0:92:92:30:a0:66:30:
1a:01:59:47:0d:88:53:f1:5b:c2:ed:f3:c6:b6:3d:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C9:B9:55:58:9D:CE:3C:A8:80:67:10:52:9E:ED:30:DB:47:56:AA
X509v3 Authority Key Identifier:
keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4d:88:a8:12:71:9e:02:69:56:f6:9c:6b:b8:6f:84:18:cf:
4d:37:89:ba:c3:83:1d:56:c1:d6:57:47:74:f2:09:b7:e7:3d:
9d:d7:17:5d:a0:4d:64:2c:fa:a0:3c:cb:aa:60:ef:99:a4:6f:
7c:4a:c4:6b:98:94:98:cd:85:ae:98:45:bf:d8:61:56:24:8f:
54:d7:51:d2:ff:aa:29:8b:fd:52:17:62:75:79:36:60:74:61:
ee:81:11:c0:b8:48:69:67:87:1a:ee:da:4a:32:b4:e0:ac:6b:
11:e7:55:3d:69:2b:5c:84:e5:16:a7:ec:ba:2f:ed:67:d5:75:
45:22:b3:bb:fb:a8:15:72:24:73:a9:94:c2:f5:06:c4:9e:65:
fe:70:0b:cf:a9:21:35:90:57:42:08:42:78:1e:c1:30:56:a5:
14:1f:88:87:22:08:fd:f0:09:2b:1c:d7:d6:eb:2f:4b:28:4b:
f2:15:be:0e:ed:ce:ab:ff:ed:e5:82:7c:3c:c5:9c:6a:bc:ee:
57:29:79:a0:eb:3e:9e:b1:31:1d:ff:a5:65:53:11:d5:6c:be:
7b:76:1c:17:4e:65:79:e0:6e:0c:95:f6:79:d9:84:a8:3d:70:
41:e3:ca:d8:34:2b:98:a7:0f:0d:02:82:db:a8:57:c5:b8:6d:
98:60:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:02:40 2026 by rpki-client