
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
File: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (raw, json)
Hash identifier: J1nHPFtAKLB+vuTpgao772bc30wyFHiWLh6RRldiry8=
Subject key identifier: FA:13:42:5C:C5:09:C3:64:11:B3:DD:03:81:9C:2E:B0:19:06:07:2F
Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial: 10FC51982FB4CCC471B47A0E2838EF2F45002547
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
Signing time: Mon 05 Oct 2026 04:51:38 +0000
ROA not before: Mon 05 Oct 2026 04:46:38 +0000
ROA not after: Mon 04 Oct 2027 04:51:38 +0000
asID: 149971
IP address blocks: 103.194.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fc:51:98:2f:b4:cc:c4:71:b4:7a:0e:28:38:ef:2f:45:00:25:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Validity
Not Before: Oct 5 04:46:38 2026 GMT
Not After : Oct 4 04:51:38 2027 GMT
Subject: CN=FA13425CC509C36411B3DD03819C2EB01906072F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:98:be:2b:e1:ab:14:fb:84:22:86:76:2e:
b9:97:23:f5:da:69:6f:7e:ad:03:46:6f:04:6b:84:
f2:86:50:63:23:72:5f:12:6c:82:bb:0f:cd:47:40:
97:74:d5:b4:f0:43:1e:27:35:a1:6f:f5:c4:fd:97:
9e:b0:54:cc:75:73:bc:51:92:63:95:36:0f:37:e0:
ba:0e:4e:af:00:3c:f4:58:0b:8f:94:5c:ec:09:40:
43:2a:e2:6d:4a:47:c8:86:c9:1b:d6:73:da:38:14:
43:88:f9:61:1a:8b:f2:d4:e8:56:70:13:00:ee:cc:
0d:20:3f:56:12:00:44:73:4d:79:ce:1c:e4:80:dd:
e1:e6:98:a3:30:3e:79:3d:9e:66:68:d4:05:d5:ca:
5d:65:23:72:ef:fd:aa:3a:ca:b5:83:71:2d:1f:4e:
e4:64:51:5f:9c:6c:15:5a:8d:bb:89:06:ad:bc:25:
81:1d:b6:9f:e7:c5:b7:cf:8b:9a:99:7d:a2:bf:e5:
f7:dd:b4:80:bf:b5:3e:79:2b:db:97:de:a0:ec:aa:
21:d3:d9:d6:09:cc:ef:50:43:87:8d:83:12:5c:d5:
8d:63:c4:04:d6:a2:c0:76:c2:bd:51:18:e4:28:9c:
87:ee:91:95:81:07:6b:23:2f:46:37:0a:02:7b:ee:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:42:5C:C5:09:C3:64:11:B3:DD:03:81:9C:2E:B0:19:06:07:2F
X509v3 Authority Key Identifier:
keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.194.46.0/23
Signature Algorithm: sha256WithRSAEncryption
71:1f:b9:b5:8d:a5:f5:ff:24:7d:d5:0e:07:73:9a:7f:7e:65:
b9:69:a0:62:15:67:50:d7:8f:ed:df:ae:49:49:52:d1:03:07:
7d:c3:fc:c8:fc:30:47:4e:f9:77:21:3d:f9:0b:21:ed:c5:f5:
1f:2f:a0:56:c2:05:cf:19:1b:25:39:78:d4:53:ec:2c:92:cf:
69:0a:51:71:b1:70:61:3d:fb:eb:1f:27:81:5a:8b:c2:9b:b8:
f5:52:29:36:78:8f:87:d8:e6:cc:4b:7c:aa:04:dc:fe:70:bb:
82:56:b8:ac:a0:76:b6:3c:19:ef:e7:ce:09:bd:ef:29:bf:94:
b5:b8:22:4d:8d:a5:b6:39:a5:96:b6:3b:0f:b8:06:29:b7:97:
20:0d:62:a9:f9:fd:69:79:98:d9:d9:6c:02:8f:ef:93:fa:d9:
33:3e:4a:5a:4d:ab:c3:c2:60:b4:8b:8b:d5:89:82:b1:7c:89:
16:d4:14:17:b1:9c:7b:8a:ef:26:a0:20:94:fe:8b:11:4c:dd:
7d:d1:2d:73:ec:85:ae:a1:cc:44:1d:93:77:9c:e0:1a:be:77:
3f:c2:06:99:66:ab:97:21:f8:9c:29:76:0d:6c:88:fe:4d:e9:
ea:b5:29:6b:59:23:55:8f:95:45:50:c3:9e:2e:ec:e7:a4:03:
cc:fb:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:05 2026 by rpki-client