
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32322e302f32342d3234203d3e203539313337.roa
File: 3130332e3235322e32322e302f32342d3234203d3e203539313337.roa (raw, json)
Hash identifier: 1+scwTfe6FoFSzCOMQMP/l1HCgRWBgorKjqDF9t7ojE=
Subject key identifier: 9D:30:20:CF:20:4D:4F:57:D9:99:72:E4:C0:7C:9B:B7:3D:BC:56:84
Certificate issuer: /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial: 7FF0E8A23140FD3F423AD018574418690849145A
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32322e302f32342d3234203d3e203539313337.roa
Signing time: Fri 16 Oct 2026 09:31:49 +0000
ROA not before: Fri 16 Oct 2026 09:26:49 +0000
ROA not after: Fri 15 Oct 2027 09:31:49 +0000
asID: 59137
IP address blocks: 103.252.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f0:e8:a2:31:40:fd:3f:42:3a:d0:18:57:44:18:69:08:49:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Validity
Not Before: Oct 16 09:26:49 2026 GMT
Not After : Oct 15 09:31:49 2027 GMT
Subject: CN=9D3020CF204D4F57D99972E4C07C9BB73DBC5684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:82:ea:1a:eb:c9:be:57:29:e4:e7:80:a1:
35:9e:dc:5d:f0:31:db:53:b7:b1:b4:65:ec:c5:50:
46:d9:b6:75:8f:62:10:84:61:ba:1c:0c:35:6e:c2:
66:36:97:c9:d5:83:37:1d:93:0e:4f:94:db:7d:30:
6f:7c:ef:27:0b:03:06:ec:92:3c:1d:6c:dd:a8:bf:
61:57:e8:48:25:c6:90:00:28:d2:07:f6:16:07:08:
34:95:82:ef:28:b9:aa:b2:87:28:a7:8d:ce:10:1f:
c8:a0:9f:3e:5d:0f:a5:e0:13:85:dd:70:6f:25:c8:
23:6b:e4:80:1b:44:5e:bc:c3:30:7c:0a:4b:03:eb:
f1:44:83:49:39:de:0f:c5:62:4d:29:7e:9a:09:52:
42:bc:26:02:b6:5d:64:9d:ad:8c:f7:9a:20:08:b7:
0d:0a:f9:ee:96:a9:da:fc:82:c4:a4:15:84:c3:db:
8a:db:b3:6f:9f:15:2b:77:a9:7e:3b:b7:bc:b5:ba:
b7:a1:b6:ab:41:82:91:8c:62:e4:94:44:0d:39:72:
c3:bc:51:94:86:31:20:b0:43:26:80:76:6d:e8:92:
e1:27:f7:16:3e:03:72:66:62:51:bb:5b:89:49:8e:
db:0e:82:c2:69:f9:50:37:4f:e9:41:c6:40:a4:7d:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:30:20:CF:20:4D:4F:57:D9:99:72:E4:C0:7C:9B:B7:3D:BC:56:84
X509v3 Authority Key Identifier:
keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32322e302f32342d3234203d3e203539313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.252.22.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f7:5a:8f:a8:16:f4:1c:aa:80:7f:21:dc:d9:47:9c:cd:66:
30:22:50:72:e9:8f:43:59:0b:1b:4d:2c:ad:99:78:39:84:c7:
a3:6e:0c:8a:b3:31:58:40:4f:29:56:16:36:3a:bf:b1:bf:3c:
42:17:14:25:81:93:78:57:93:4e:d8:9c:2e:0f:58:2b:35:64:
62:13:69:ea:fd:7a:28:a9:0d:31:8b:c4:69:29:4b:b9:a0:81:
e5:f0:3d:f8:6e:c8:45:3e:c1:0b:e4:1f:ba:f3:a4:c0:9d:06:
36:4e:ba:70:4c:52:53:86:4f:99:94:84:26:60:7f:40:f3:3c:
a6:de:0c:0e:90:40:c6:f5:cc:60:3c:e7:ce:5d:5e:32:f8:b5:
79:e0:7e:0f:87:a9:a6:5a:e2:af:bc:9d:90:55:4a:3b:51:b1:
72:99:06:8c:7f:c0:5c:cc:e4:74:75:c8:41:9d:12:d7:27:34:
39:2b:a4:39:49:d8:32:a4:ba:bb:2c:35:65:db:c0:57:bb:9d:
8c:98:57:65:ee:26:fe:d5:33:c2:c0:71:71:d2:06:d7:dd:f0:
e6:e4:78:d6:3f:53:13:98:ba:cb:85:47:40:48:6a:ab:b9:67:
fa:1a:2d:59:c1:30:82:f4:c0:22:90:94:20:0b:4b:12:e5:4c:
95:f2:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:04 2026 by rpki-client