
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
File: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier: 20o6cT5BLNovtqYdA+/pLFKRgD8D7hQ8yuxDKaT2ZSg=
Subject key identifier: 88:30:10:E8:95:BA:AF:1F:C5:81:60:5B:29:80:99:58:B1:1D:FB:EA
Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial: 1A171F489D03C8D563B75417FC7DB8D2AA395F3D
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
Signing time: Mon 05 Oct 2026 04:24:59 +0000
ROA not before: Mon 05 Oct 2026 04:19:59 +0000
ROA not after: Mon 04 Oct 2027 04:24:59 +0000
asID: 149971
IP address blocks: 103.194.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 07:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:17:1f:48:9d:03:c8:d5:63:b7:54:17:fc:7d:b8:d2:aa:39:5f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Validity
Not Before: Oct 5 04:19:59 2026 GMT
Not After : Oct 4 04:24:59 2027 GMT
Subject: CN=883010E895BAAF1FC581605B29809958B11DFBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:2c:20:b3:ec:36:0c:bc:a5:59:53:7e:c1:
21:18:b5:6d:b9:4f:12:39:95:3d:1b:c8:c6:c2:6c:
e3:a1:f9:52:1a:dc:62:84:0b:2b:3a:cb:21:20:75:
47:da:da:a3:3f:0e:6f:7a:e1:bd:3c:bc:5b:c5:a1:
f8:7a:6a:d5:d5:e2:71:52:50:80:c5:08:c8:69:38:
b8:58:f9:af:92:d4:ae:4d:ad:3b:df:e9:93:4c:78:
97:a5:e4:f0:e0:8b:2f:72:69:5e:b7:9e:f8:79:a5:
ac:e6:38:bb:f0:b0:13:8c:a4:de:63:ae:8c:e1:66:
55:b6:db:02:cb:14:c5:8e:a0:25:21:47:57:32:67:
80:01:6c:f6:d2:8a:3e:56:66:55:6e:b2:d4:23:97:
58:46:70:c0:0b:9f:68:f2:44:6b:1f:3d:ea:8d:63:
ee:c1:ca:8f:f5:98:d1:fa:74:05:f3:88:1d:61:7f:
59:7a:ef:4a:0a:49:b3:24:63:17:07:47:ec:99:7b:
05:60:79:4d:d9:e3:92:a6:9c:1a:12:3b:56:0b:e2:
ee:bd:84:cd:f6:9a:de:26:6a:4b:78:9c:fa:88:30:
33:28:da:2d:2b:9f:90:58:63:9a:99:28:73:3a:3e:
2e:b8:14:ef:30:cc:10:a0:d5:6a:c7:44:14:71:b4:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:30:10:E8:95:BA:AF:1F:C5:81:60:5B:29:80:99:58:B1:1D:FB:EA
X509v3 Authority Key Identifier:
keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.194.46.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f1:dc:ce:54:dd:c2:f3:44:d4:ec:e4:34:6e:b8:ff:c6:54:
a7:b3:a4:08:d2:66:11:50:66:2d:67:bc:bd:7d:ca:c1:ac:14:
35:de:a6:7d:31:dc:65:80:55:a6:67:ea:75:4c:da:75:ca:5c:
54:2e:19:51:15:58:01:93:cf:c2:48:25:22:aa:c9:78:58:ed:
d6:6f:26:b5:04:1e:f3:74:b7:8b:2f:31:12:09:4c:d2:d6:a2:
36:08:30:0b:2e:b3:7c:18:7f:65:ef:06:c7:ce:f4:3e:8e:a5:
c8:04:a4:d1:91:fb:e4:32:eb:d2:f3:40:64:74:c4:0f:53:05:
a2:8e:55:73:5b:8a:42:a7:21:40:77:d7:52:e6:5c:97:39:ae:
24:c5:ca:e2:8b:8b:a5:b3:de:38:e9:da:07:e4:21:a0:81:3c:
f0:dc:7f:08:67:01:9e:a3:d5:60:20:75:af:d8:2d:e6:cd:50:
f8:ae:67:82:76:cb:26:3c:7a:ef:bf:d5:f2:f1:51:05:23:a4:
cf:87:bf:69:f5:95:de:e4:bc:4c:f3:e2:5c:ab:40:79:5d:9f:
ad:cc:a9:21:62:83:8e:9e:49:ff:0f:18:69:34:ef:a0:22:89:
f0:ee:81:3e:58:ec:f9:a4:71:44:67:3a:e9:a0:65:66:52:a7:
b9:62:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:22 2026 by rpki-client