
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e302e302f32342d3234203d3e203338333230.roa
File: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=
Subject key identifier: 12:5B:65:B2:C4:F7:46:76:65:A2:39:23:E5:D1:47:5F:28:B4:3B:CE
Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Certificate serial: 1B215E8133FFCDC2F4634A5D8060F7862FF71067
Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e302e302f32342d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:10:27 +0000
ROA not before: Sun 03 May 2026 02:05:27 +0000
ROA not after: Sun 02 May 2027 02:10:27 +0000
asID: 38320
IP address blocks: 103.135.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:21:5e:81:33:ff:cd:c2:f4:63:4a:5d:80:60:f7:86:2f:f7:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Validity
Not Before: May 3 02:05:27 2026 GMT
Not After : May 2 02:10:27 2027 GMT
Subject: CN=125B65B2C4F7467665A23923E5D1475F28B43BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:d5:90:80:ff:cf:c8:f8:bd:e0:7e:1a:af:
11:39:c8:ea:ba:3c:ea:b6:ef:b1:00:a4:4f:a1:91:
e0:f6:58:aa:bd:9a:b7:47:66:50:b5:bc:38:09:c4:
29:32:77:0d:ed:6a:3b:3b:65:ab:d6:13:10:7f:af:
3a:76:ae:00:d7:4b:ab:42:8d:27:d7:ce:a1:f1:f8:
03:c5:c9:ae:b4:ca:4a:e4:f2:58:9a:e9:6e:8c:b0:
a9:94:70:fe:7c:75:24:b3:b7:56:c8:b6:db:85:bc:
ff:6a:39:e8:79:34:5c:48:a8:05:4b:c5:9f:29:3e:
a9:06:bf:ce:86:8d:77:ec:c1:64:dc:31:df:1c:e1:
23:15:81:26:41:47:66:ce:e3:b8:16:94:5c:5c:2e:
83:c4:fe:b2:67:7b:48:5b:7c:3d:f8:62:15:cf:08:
89:d9:30:6b:e5:36:8b:a9:9e:69:81:87:4a:8e:a3:
09:e5:3b:fe:f3:98:d5:97:97:2f:62:6c:f9:09:ee:
b4:dc:d7:2c:f6:cd:28:32:ca:f7:f0:c7:83:04:43:
90:e2:de:0b:c9:6f:1e:d0:ad:5e:90:f7:f7:3a:41:
08:b9:08:61:cd:95:56:3f:e4:d2:a3:57:2e:08:35:
81:ca:bd:73:e8:23:69:cc:64:a9:b5:d4:4a:c5:89:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:65:B2:C4:F7:46:76:65:A2:39:23:E5:D1:47:5F:28:B4:3B:CE
X509v3 Authority Key Identifier:
keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e302e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:56:9b:92:a7:ae:72:f5:6b:94:38:f4:06:03:0d:15:ff:7b:
10:ce:c1:85:e9:fb:51:51:02:93:6d:97:87:6f:4e:37:58:aa:
e1:92:4a:62:d3:70:fb:b7:9e:1d:1c:1f:5f:f7:ce:24:ae:df:
c0:0b:dd:9b:f9:58:7a:1b:c3:fa:bd:90:71:90:f2:cb:aa:07:
6c:2f:53:50:44:36:58:ad:01:89:25:0e:44:b2:15:15:a7:16:
08:63:6b:bf:5d:33:6f:4a:9d:b7:3d:0b:de:f7:45:42:bf:2b:
35:87:a0:40:42:fa:09:2c:7c:5c:55:2d:fe:53:1d:08:30:1b:
d6:7e:5c:b6:0d:73:4e:6d:7e:31:2a:23:ab:66:48:f9:a8:7f:
d6:11:fb:fa:03:4c:a6:f4:6c:71:53:0c:f8:91:21:9a:48:86:
df:46:3c:4a:a9:ac:2d:cb:c2:06:3e:80:d2:4e:62:62:de:02:
40:16:57:1c:ea:5f:c5:9c:66:99:86:9f:c7:ef:eb:c9:74:02:
5e:d3:ef:5d:21:b3:ca:51:27:3d:23:59:68:41:83:2a:ec:e6:
95:52:63:b6:53:9c:4a:57:73:94:bf:58:0f:4e:98:e0:29:64:
69:e0:5c:2a:5e:03:2d:04:27:1c:7d:94:2f:32:45:32:cb:66:
69:f3:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:15 2026 by rpki-client