
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
File: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=
Subject key identifier: 0B:D2:EC:12:FA:B0:54:92:47:20:09:1B:71:4F:9F:40:9B:82:45:F6
Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Certificate serial: 320F1F49AFA7641FF6A9D4211524380E959F57C0
Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:10:26 +0000
ROA not before: Sun 03 May 2026 02:05:26 +0000
ROA not after: Sun 02 May 2027 02:10:26 +0000
asID: 38320
IP address blocks: 103.135.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0f:1f:49:af:a7:64:1f:f6:a9:d4:21:15:24:38:0e:95:9f:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996
Validity
Not Before: May 3 02:05:26 2026 GMT
Not After : May 2 02:10:26 2027 GMT
Subject: CN=0BD2EC12FAB054924720091B714F9F409B8245F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:58:cb:7b:31:2d:77:df:87:ab:18:86:a9:
fa:1c:58:30:f3:98:5d:0a:a5:41:6c:75:d7:5a:23:
03:cd:22:2b:4c:4f:45:eb:17:75:11:8c:65:fd:61:
ec:a8:bb:ea:4a:4d:19:f0:00:c0:fb:a8:58:3d:19:
ef:1d:06:04:b5:25:7a:34:1f:41:21:78:78:78:42:
ef:da:47:0b:5a:98:77:ee:5b:b1:8f:6c:18:32:b7:
7c:c0:51:2d:30:e4:30:32:35:a9:52:91:61:6a:bf:
67:03:53:44:a4:03:d2:82:a7:a0:eb:c9:d8:0c:92:
81:d0:a1:d5:b7:4e:28:c0:d7:50:c1:80:c4:ec:29:
0e:6f:b3:f7:e4:68:73:66:26:3a:b4:51:f0:87:3e:
d6:7f:07:73:a8:3e:bb:b0:cd:46:ad:f9:79:c1:04:
ea:00:0e:ce:ab:16:3f:bf:13:a4:98:cf:60:ae:de:
6a:ce:05:8f:7f:7f:e8:56:ea:0d:c0:23:5a:cd:0a:
2a:e7:09:63:b1:ed:f2:2b:0f:09:8d:43:f3:06:cf:
ec:b4:1c:f4:fd:3b:c5:65:b9:2b:17:de:fc:f3:07:
a0:a6:0e:8e:8b:31:af:a9:ae:8d:4a:22:3c:b4:1d:
8c:19:30:ce:16:50:a9:ac:0e:79:d4:6c:f0:0a:35:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:EC:12:FA:B0:54:92:47:20:09:1B:71:4F:9F:40:9B:82:45:F6
X509v3 Authority Key Identifier:
keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.2.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f3:46:41:16:6f:d0:0a:2f:2d:a8:b2:4d:33:92:c8:be:9a:
21:a4:ae:3b:d7:29:5f:34:f0:42:e3:06:3c:6f:19:d9:6b:78:
ae:26:60:ae:31:ec:82:12:c2:4c:c1:e1:9a:72:97:2e:2b:4b:
c5:af:58:3b:52:62:22:e7:28:a0:d3:39:54:8f:10:28:0b:f2:
b4:1d:05:06:b7:de:2e:91:e7:8e:95:93:7d:fb:9c:45:c0:21:
a7:34:41:7e:f8:36:1d:56:8a:d7:06:2c:fd:58:61:9a:aa:d5:
0c:7d:cc:fa:e4:51:18:52:02:6e:44:a1:46:86:33:f5:fa:87:
3c:c1:10:c2:a6:25:13:64:75:cd:78:18:84:bc:51:77:bf:b7:
f8:7e:2e:63:ba:ba:5e:24:35:5e:09:b3:db:95:d3:a4:38:70:
fa:d2:e6:c4:00:6c:fd:ff:8b:e6:d0:32:c9:01:da:36:e7:6e:
17:ad:2e:f3:2e:56:ed:0f:6b:44:35:f6:2e:21:10:7f:44:cc:
23:3f:9c:9a:6c:f5:65:dc:d3:9a:ac:f3:ce:7d:1b:9d:03:5f:
ba:ea:2a:70:36:7e:49:99:0d:62:f8:3c:b9:ac:39:b6:81:c0:
5b:68:b2:2e:41:c5:3c:91:bd:4e:4a:d9:9f:43:25:98:39:97:
c9:b7:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:14 2026 by rpki-client