
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
File: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=
Subject key identifier: 08:BC:E5:76:6D:D7:5F:1B:9C:C7:4F:7A:6B:F6:0B:33:00:E6:8B:D3
Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF
Certificate serial: 4FA79B05F38F1483C0DF653F0E189B7AF9E171E0
Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
Signing time: Sun 03 May 2026 03:12:10 +0000
ROA not before: Sun 03 May 2026 03:07:10 +0000
ROA not after: Sun 02 May 2027 03:12:10 +0000
asID: 9341
IP address blocks: 103.181.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl
rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a7:9b:05:f3:8f:14:83:c0:df:65:3f:0e:18:9b:7a:f9:e1:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF
Validity
Not Before: May 3 03:07:10 2026 GMT
Not After : May 2 03:12:10 2027 GMT
Subject: CN=08BCE5766DD75F1B9CC74F7A6BF60B3300E68BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:c3:e2:76:95:f1:cc:a1:6e:57:aa:6e:84:
6a:c3:88:e6:e2:5a:e9:34:b1:32:cb:ca:f5:76:09:
3d:f4:84:32:c8:d5:1c:86:0c:cb:35:71:c2:c6:62:
51:6c:3f:cb:48:32:4b:84:f0:58:57:bf:30:85:53:
40:13:c0:3c:95:98:f4:85:43:36:c6:d3:a5:e0:4e:
13:d5:08:ab:82:3b:c2:83:ff:4f:a6:f2:9d:4c:33:
fb:7f:d6:de:7d:2d:09:ed:1a:88:09:2d:38:e3:5f:
61:21:09:b0:95:c1:a6:00:17:0b:63:54:55:77:ee:
70:98:aa:3b:88:b5:f0:44:d2:b4:77:51:3e:e1:79:
17:28:b5:28:3b:25:d6:d0:19:86:0f:77:bb:e0:62:
7f:58:b3:fc:3a:f3:94:61:fb:15:7a:f5:48:68:da:
4a:b7:47:2b:2c:1b:53:26:5f:41:57:81:a5:db:a6:
53:ee:1f:26:fe:76:48:fa:6a:2e:cc:b5:43:63:37:
85:01:1c:1e:b3:14:1e:a0:12:23:7d:b3:61:c5:5c:
aa:10:90:6a:6c:8f:bd:93:7e:33:f6:f5:38:eb:fc:
99:67:57:2f:57:6a:21:77:9c:ad:7b:76:69:1d:52:
c7:07:a6:b7:3a:45:de:8b:3e:9d:6e:13:aa:ef:00:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:E5:76:6D:D7:5F:1B:9C:C7:4F:7A:6B:F6:0B:33:00:E6:8B:D3
X509v3 Authority Key Identifier:
keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.250.0/23
Signature Algorithm: sha256WithRSAEncryption
23:f7:32:1a:41:02:d3:f5:ee:37:d0:58:d0:11:3c:f7:58:5e:
90:dc:76:82:63:39:9d:89:a4:d3:63:e7:e0:f4:03:5b:58:80:
ff:93:7c:1d:46:e2:50:b6:8a:05:fb:6f:bf:dc:0d:67:d1:60:
25:6f:23:53:b3:97:13:c6:f8:12:e6:f7:92:9a:94:2b:b6:48:
76:b3:8a:9e:6c:fe:0b:f3:65:51:96:d4:9a:d1:83:c9:16:80:
70:9c:51:0c:57:32:87:18:4a:01:50:40:a7:73:1f:1a:05:3c:
bd:2f:f0:ca:45:98:ce:b5:24:dd:a6:a2:51:6b:41:b1:3c:2d:
f8:8d:da:8e:04:aa:b1:bc:5c:9e:df:34:6e:7f:ab:ed:7a:cb:
f4:6c:bd:72:2d:2c:04:19:12:0c:bf:a4:75:86:cd:c7:f5:29:
20:9f:59:b1:6c:ec:19:02:2a:18:2a:8a:9b:24:68:5c:91:93:
8d:76:75:fd:a8:2e:41:fa:f0:d5:20:eb:07:d3:49:d3:c4:23:
8d:98:53:f3:86:e6:c1:ae:64:c3:41:b7:30:84:76:48:96:9c:
45:34:32:a4:0a:86:f6:77:4b:a7:c2:13:8b:e8:2e:32:f9:84:
08:57:34:2a:13:63:28:b5:8c:bb:b7:65:2b:5b:ff:66:24:8b:
d3:ac:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:27:37 2026 by rpki-client