
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20393137.roa
File: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (raw, json)
Hash identifier: XXgEPlHtjWL+fHvL9DSqkqe72aH2JJsWcxQ705tSA/8=
Subject key identifier: C5:32:06:D3:B3:A1:56:40:62:40:B2:5A:F5:75:EC:1F:CE:AD:09:3E
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 3F43C4D783552FCA15B1EE3445E86C41AF456A65
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20393137.roa
Signing time: Sun 06 Sep 2026 22:47:54 +0000
ROA not before: Sun 06 Sep 2026 22:42:54 +0000
ROA not after: Sun 05 Sep 2027 22:47:54 +0000
asID: 917
IP address blocks: 103.170.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:43:c4:d7:83:55:2f:ca:15:b1:ee:34:45:e8:6c:41:af:45:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Sep 6 22:42:54 2026 GMT
Not After : Sep 5 22:47:54 2027 GMT
Subject: CN=C53206D3B3A156406240B25AF575EC1FCEAD093E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:29:1b:5f:e6:db:c3:82:19:01:a3:b6:16:
e8:49:6c:4b:ce:2f:9e:aa:1a:31:f1:ac:66:3d:45:
a7:84:63:60:7d:e0:bf:ac:1b:6b:9d:7f:14:25:ba:
70:2d:14:65:32:ab:6f:24:ec:7c:e2:3b:89:b5:6a:
04:7b:f7:c1:f0:4b:6d:0e:1a:5c:98:99:a7:03:ae:
39:db:08:65:cf:bb:1c:7c:d9:36:5a:2c:9c:4a:d8:
40:3b:6d:18:57:e4:79:6d:20:c0:59:ac:de:a5:22:
0f:fc:cc:0b:1d:96:0b:f9:e8:9b:0e:0e:ea:25:5b:
51:06:c6:1a:7e:18:83:e7:56:6f:45:4d:e4:da:35:
d9:d4:5c:22:25:2d:28:32:8c:43:f8:30:40:64:0c:
3b:a8:69:63:33:11:43:dc:8b:96:e8:60:6b:27:bc:
4c:87:f8:1f:69:d1:69:52:01:23:b7:67:d4:93:7a:
2e:e4:41:6d:f4:de:0c:87:43:20:0c:0c:62:d0:30:
6c:83:ee:69:d5:78:a7:e5:16:d0:b8:59:ff:99:81:
2a:f6:22:23:b6:bf:13:81:1e:83:5e:2f:b5:a2:cf:
bf:3a:da:5d:45:3b:b0:e9:b7:a3:fa:89:6f:13:46:
50:35:a9:43:a4:3d:ec:f5:60:87:c7:2f:99:33:1c:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:06:D3:B3:A1:56:40:62:40:B2:5A:F5:75:EC:1F:CE:AD:09:3E
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.232.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:11:c9:f0:e4:0b:42:bf:16:f5:e5:0c:71:d6:a2:17:5b:63:
d6:93:42:f3:dd:0c:1a:63:04:64:dd:ff:54:40:b5:ea:2f:67:
78:c1:bc:56:1a:8e:6b:6e:c6:b0:68:92:8a:73:5e:7c:18:a9:
49:e6:24:97:3a:bc:5c:f7:10:3b:05:2e:b7:90:29:f1:23:57:
58:2e:91:30:b6:3e:33:16:54:ba:89:c6:ac:e2:a6:4e:2a:17:
e2:15:ba:d1:3a:ff:73:ee:aa:f8:c4:61:b8:f3:b8:59:54:1f:
e9:35:8b:81:35:b9:5f:03:c8:0b:b6:18:15:48:2d:59:2f:a8:
06:9f:c4:c6:4f:b5:23:11:88:97:24:f2:4e:4f:c6:9d:7a:fa:
56:c9:00:ad:1b:05:ab:f1:3d:7b:9b:ae:6c:61:10:39:cf:99:
c2:a3:1b:98:65:a9:89:55:e9:f3:c5:d8:78:75:05:aa:9e:61:
9a:9d:b4:0a:dc:1f:53:c9:21:f4:36:e6:c4:32:36:a7:60:b9:
86:67:a6:56:34:a3:e2:77:27:ee:c3:8e:d1:95:09:19:c9:87:
c9:fc:a0:65:24:f8:96:c5:9c:9e:26:a5:0c:7b:a1:76:af:4c:
5c:bd:69:0a:e0:a7:26:52:c6:e2:26:8a:55:ad:26:f9:91:71:
ff:4b:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:23:35 2026 by rpki-client