
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e20323032303336.roa
File: 3130332e31302e3133362e302f32322d3234203d3e20323032303336.roa (raw, json)
Hash identifier: nFrGkNtbiP65ptVH8GixDxeFliqaHY23rYmvKOOUees=
Subject key identifier: 09:2A:4A:A4:4A:7D:4F:86:C2:39:04:37:BE:18:04:B9:3C:D9:A6:F2
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 4324CA824BA4A7A8CADF9DA43FD8CA9C208C7DEB
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e20323032303336.roa
Signing time: Tue 18 Aug 2026 11:14:47 +0000
ROA not before: Tue 18 Aug 2026 11:09:47 +0000
ROA not after: Tue 17 Aug 2027 11:14:47 +0000
asID: 202036
IP address blocks: 103.10.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 09:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:24:ca:82:4b:a4:a7:a8:ca:df:9d:a4:3f:d8:ca:9c:20:8c:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: Aug 18 11:09:47 2026 GMT
Not After : Aug 17 11:14:47 2027 GMT
Subject: CN=092A4AA44A7D4F86C2390437BE1804B93CD9A6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:65:d5:7e:fe:fc:87:d9:75:da:b6:83:01:
21:81:3c:8d:6f:a8:4b:72:1c:49:01:e3:2f:4c:80:
c3:cb:56:0a:24:7e:c3:54:77:27:7f:d8:fc:d2:4e:
c4:5e:f6:0e:08:3b:06:c7:b7:21:5a:5b:7a:55:b9:
ff:6f:5a:84:f5:cf:0c:b3:d1:3a:64:05:17:03:90:
8d:0c:98:ab:72:89:d7:72:e8:8e:8e:d6:75:33:41:
25:a5:35:57:0a:11:1f:bd:f0:b9:44:75:d1:9f:0a:
d5:ab:0d:b2:61:15:f2:34:27:b5:1d:d8:13:c1:88:
f6:a2:a6:fa:b2:4d:45:3b:43:83:6a:c7:0f:6c:70:
b5:1d:cb:b0:eb:ed:75:a6:4a:c6:75:cc:9d:18:4e:
85:11:ed:dd:c0:37:9b:8a:3f:20:d6:dc:1e:44:f9:
a1:61:89:23:83:3a:24:cc:bd:a6:bb:af:bf:c7:23:
68:d2:db:4b:8e:1b:18:6a:03:97:db:5c:c6:d2:f8:
04:01:46:ba:90:3b:c6:10:aa:f7:dd:fd:e1:90:ee:
0e:68:e6:05:9a:1a:73:8f:fe:ca:cb:a6:51:c1:81:
0f:a5:6b:da:00:fd:f3:5c:88:e5:68:8a:27:23:06:
54:23:ea:07:b9:6b:70:5a:91:40:24:79:84:e2:51:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:4A:A4:4A:7D:4F:86:C2:39:04:37:BE:18:04:B9:3C:D9:A6:F2
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e20323032303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.136.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c3:bd:c7:65:f2:ad:16:fc:93:ff:36:a3:71:80:c8:d7:e9:
7e:3c:fa:2b:cb:18:a2:0c:03:e6:f8:87:44:26:6c:ae:ec:9d:
27:89:26:51:f4:09:64:aa:7b:35:d4:ea:4c:3c:48:31:14:b1:
34:09:5d:ee:0c:3d:1e:f3:3f:69:3c:e4:76:13:89:64:7f:dd:
d5:de:b4:00:2d:50:13:b3:d0:6c:75:c5:29:18:a2:55:c8:87:
6c:8b:d3:e8:a0:cb:88:10:f7:70:7c:58:63:27:5d:48:b7:26:
a6:f8:e1:01:c6:ad:59:f6:c6:49:c9:c8:2f:e7:ce:87:b4:94:
36:ec:af:05:8d:55:74:b8:ed:d1:f6:3b:62:c5:c0:1e:49:a9:
7d:32:04:6c:9e:64:dd:38:bb:51:1a:6d:7a:36:81:0f:e9:cf:
ae:14:03:c1:7f:8d:c0:9a:31:94:a8:5e:4b:3d:d1:ca:5f:59:
53:a5:ec:50:92:53:22:7b:a2:ff:b8:33:be:73:d4:6d:af:bd:
87:f6:21:9f:89:81:f2:19:e2:e6:40:cf:9d:f0:d8:44:0b:03:
90:ee:ec:64:4c:b6:d0:bf:ce:c6:68:e8:da:33:43:81:c2:f7:
d3:84:c4:8e:ad:fc:58:46:57:86:41:fe:5d:82:2c:b9:1a:45:
05:4e:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:20:48 2026 by rpki-client