
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa
File: 3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa (raw, json)
Hash identifier: Qko/spdBlsUVP3897WCdZTdpikFTtKKMZnOIM7RvYVs=
Subject key identifier: C4:71:E7:2B:F2:7D:ED:40:32:FE:1E:F7:87:AB:C9:88:3A:5D:D1:73
Certificate issuer: /CN=16A6747482288B9CE98B8471FAB375C9CC0473E3
Certificate serial: 1BC8E18287E664081D20CBEF92094B45FC707E85
Authority key identifier: 16:A6:74:74:82:28:8B:9C:E9:8B:84:71:FA:B3:75:C9:CC:04:73:E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa
Signing time: Mon 05 Oct 2026 13:48:09 +0000
ROA not before: Mon 05 Oct 2026 13:43:09 +0000
ROA not after: Mon 04 Oct 2027 13:48:09 +0000
asID: 151587
IP address blocks: 103.216.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.crl
rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c8:e1:82:87:e6:64:08:1d:20:cb:ef:92:09:4b:45:fc:70:7e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16A6747482288B9CE98B8471FAB375C9CC0473E3
Validity
Not Before: Oct 5 13:43:09 2026 GMT
Not After : Oct 4 13:48:09 2027 GMT
Subject: CN=C471E72BF27DED4032FE1EF787ABC9883A5DD173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:03:dd:b4:5e:0d:62:7d:b4:fe:1b:aa:84:
f2:c1:f6:bd:7e:13:4e:b3:cb:0e:bb:71:71:88:8a:
fa:93:fa:35:73:3b:fb:93:82:f1:a7:33:93:0d:6f:
b3:f3:e5:09:e0:28:34:0d:47:05:d8:21:35:52:db:
7f:7d:d0:56:2a:3a:95:3e:de:18:d2:d7:6c:49:d2:
40:3c:c5:96:c8:bb:c9:a5:58:a5:32:a9:49:4f:1d:
57:0d:0f:dc:9f:b4:24:29:36:a4:61:ee:d6:b1:fc:
8a:1c:d2:87:fd:ca:48:86:b9:e8:0c:1c:f9:69:01:
94:08:67:7f:69:94:a6:f7:49:ee:c6:82:1a:8c:35:
40:f6:34:dd:da:48:74:b6:86:a3:04:36:0e:a7:46:
c9:87:cc:0c:f9:30:15:d5:60:76:9c:45:e6:8b:20:
b5:f5:32:02:ba:97:a2:a6:97:db:f8:52:3e:03:48:
8e:2f:f0:94:62:80:ad:7a:9d:10:a3:9f:6d:21:38:
c8:6b:d5:d4:94:cf:71:a1:bd:f6:6b:6d:d9:fd:f6:
12:7a:7b:c8:e4:96:11:8f:db:47:03:66:c3:dd:cd:
04:f6:88:d8:14:d4:94:93:ac:b7:50:17:6a:42:04:
0f:bc:db:1d:81:34:5d:b7:3e:16:2f:55:b1:99:e5:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:E7:2B:F2:7D:ED:40:32:FE:1E:F7:87:AB:C9:88:3A:5D:D1:73
X509v3 Authority Key Identifier:
keyid:16:A6:74:74:82:28:8B:9C:E9:8B:84:71:FA:B3:75:C9:CC:04:73:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b8:fb:ba:8f:f3:16:a0:da:1f:6a:e3:e9:09:cc:d6:f7:2f:
44:4b:86:a3:06:c0:35:74:99:44:d1:e5:b7:21:df:46:c9:24:
ae:da:0c:45:58:5a:a3:30:5e:1d:05:12:df:8f:11:3d:d8:45:
eb:f5:11:69:84:c0:08:6d:39:7f:62:46:a4:2f:f3:70:08:4b:
3e:7a:12:71:03:a3:c1:08:88:31:fc:88:b3:30:6c:16:d4:18:
32:c8:d8:aa:4a:da:d0:57:b4:54:f7:15:82:2d:19:34:67:dc:
3c:b5:3c:37:a3:99:de:2c:a2:3b:d5:36:4c:31:9a:fe:04:ba:
71:8a:e4:14:07:09:91:ac:c5:f1:ff:08:5e:72:60:aa:71:ee:
18:56:c8:36:8d:7b:1a:c9:48:7b:d6:12:34:1f:bc:9c:2d:64:
8a:87:a5:16:92:ea:4f:5f:cf:19:bc:45:d4:c6:d8:8a:1a:04:
73:44:9c:55:b7:13:21:2f:b6:14:73:65:03:51:c3:b3:70:9d:
66:fe:1d:d4:4e:e0:7c:c3:99:e3:3f:91:35:e7:ea:b9:11:2a:
69:3a:6c:2d:a6:17:29:a8:68:5a:5a:57:63:72:9d:bf:ea:3b:
84:31:7f:69:c7:73:ad:9a:d9:42:29:89:23:cf:60:19:7a:63:
a6:dc:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:14 2026 by rpki-client