
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
File: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=
Subject key identifier: AA:4A:17:5B:6F:96:A2:85:B5:36:12:88:9D:9B:A0:53:3C:31:47:B3
Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
Certificate serial: 3C7AF8EC58C58DCFB0195BC61A96406810D65C05
Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
Signing time: Sun 03 May 2026 03:05:37 +0000
ROA not before: Sun 03 May 2026 03:00:37 +0000
ROA not after: Sun 02 May 2027 03:05:37 +0000
asID: 48465
IP address blocks: 103.162.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl
rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7a:f8:ec:58:c5:8d:cf:b0:19:5b:c6:1a:96:40:68:10:d6:5c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
Validity
Not Before: May 3 03:00:37 2026 GMT
Not After : May 2 03:05:37 2027 GMT
Subject: CN=AA4A175B6F96A285B53612889D9BA0533C3147B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:b0:90:5b:33:05:5c:86:5e:c6:10:20:ba:
fb:7c:f9:0b:31:58:de:51:0b:93:dc:4a:0f:10:c0:
ae:51:f6:bf:27:0f:a3:20:84:ca:5a:39:53:5c:3d:
3f:10:db:5b:bc:d8:de:cd:7d:39:84:c8:7c:51:af:
8d:55:b4:65:4a:79:e9:4c:3c:ee:e8:56:b4:65:7d:
b6:03:9c:9c:69:c0:b6:a8:1f:4b:13:c5:c8:0d:fe:
eb:03:f9:ef:ea:f9:d4:85:b1:96:ee:36:cf:4c:1f:
8a:3d:fd:b3:d8:56:44:b5:b7:9a:3f:86:c2:37:8b:
e4:2f:70:6e:02:e8:a6:6b:cc:23:8b:0a:02:41:79:
b8:57:e6:9e:ed:d4:dd:72:5c:c8:99:f8:54:a4:8a:
6c:a3:45:ea:38:62:f8:4a:c9:ce:be:77:90:15:c7:
08:ed:5d:15:2c:7d:35:64:2c:ef:b4:ac:77:64:22:
b1:56:67:72:74:5e:f8:42:fd:e7:60:cf:46:c0:e6:
4b:a5:bf:26:1e:cb:af:17:cc:fd:65:c5:a4:b6:e0:
53:1f:4f:67:90:12:0d:6e:b4:8f:14:36:cb:cc:af:
f1:b9:ab:7c:f2:6b:66:eb:dc:6b:64:41:19:df:36:
e6:fa:da:d6:d1:11:4f:5d:d6:32:fe:41:38:f4:b7:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:17:5B:6F:96:A2:85:B5:36:12:88:9D:9B:A0:53:3C:31:47:B3
X509v3 Authority Key Identifier:
keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.222.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c8:ca:73:c9:8c:94:9a:7e:14:46:45:73:43:52:95:6d:73:
27:ac:46:ae:de:26:e0:45:3e:35:ee:ed:2c:2c:d1:64:d4:ad:
48:19:81:89:c2:c1:b9:9d:8b:95:fb:31:8b:8a:a0:30:eb:dd:
f6:9a:5a:bb:4e:aa:57:72:8e:24:21:d7:41:3e:b6:dc:62:69:
cb:72:98:97:67:56:6a:57:c8:b8:10:c6:18:5f:e4:5f:f4:2d:
46:a6:c6:43:0b:77:32:55:59:14:c3:d2:e9:23:52:3c:64:91:
4f:30:20:f1:7b:1d:78:16:9e:c6:05:f0:53:0d:52:21:83:58:
3b:bd:68:0c:df:40:c4:9b:0a:39:62:77:8f:84:bb:f2:fb:3c:
6e:6c:80:d4:af:ad:55:f0:02:78:13:db:4a:c6:8b:43:3f:68:
1c:ac:1a:f9:97:b6:5d:e8:a0:2b:4d:32:ce:6c:19:e8:70:19:
a2:c6:c0:25:4d:68:0e:c5:92:4b:08:43:11:97:f8:b9:db:d2:
c9:9b:d3:34:72:05:74:45:a9:b2:69:15:ef:ff:a2:ed:cb:78:
bb:87:99:a6:2c:9c:49:47:50:73:2c:0e:57:c7:cd:e1:fb:99:
05:80:a2:a0:7e:8a:4c:8f:c6:25:ae:09:83:3e:df:e0:cb:4f:
dd:f4:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:54:28 2026 by rpki-client