
$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
File: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=
Subject key identifier: 02:B6:7D:A8:D2:CF:8F:54:75:A5:0C:A1:EB:18:F5:ED:E5:18:7C:C5
Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27
Certificate serial: 0E341791550D295AC00816278E7A7ADE054C2601
Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
Signing time: Sun 03 May 2026 02:11:21 +0000
ROA not before: Sun 03 May 2026 02:06:21 +0000
ROA not after: Sun 02 May 2027 02:11:21 +0000
asID: 141928
IP address blocks: 103.166.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl
rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:34:17:91:55:0d:29:5a:c0:08:16:27:8e:7a:7a:de:05:4c:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27
Validity
Not Before: May 3 02:06:21 2026 GMT
Not After : May 2 02:11:21 2027 GMT
Subject: CN=02B67DA8D2CF8F5475A50CA1EB18F5EDE5187CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:55:7d:c4:f4:49:f0:38:ca:45:cd:52:9f:
6c:17:58:36:dc:5e:27:7d:cc:f5:52:9f:20:28:18:
72:b7:c4:f0:33:26:7f:19:fc:00:ae:2b:be:34:d1:
75:22:50:e9:d0:7e:23:9e:ae:5c:9a:67:85:fc:df:
a5:78:89:c7:5e:a4:61:7c:d5:1d:3a:5b:1d:5a:3c:
ec:02:23:25:d2:56:38:fd:b2:de:03:13:35:d8:20:
8d:88:dd:cc:2d:04:45:f9:6f:8e:e4:56:fe:88:16:
82:1a:d2:38:fb:73:2d:3d:bd:44:81:28:7b:0f:ba:
f0:ff:c4:6c:fe:84:ed:10:2a:8c:d9:00:11:a7:9f:
0a:65:b4:26:17:bb:28:a6:a2:a3:ec:60:a5:27:a5:
0d:11:93:eb:a6:70:37:ed:87:8c:eb:89:23:73:69:
ee:d3:ed:9b:4c:61:64:b5:5a:41:04:2a:63:90:4b:
f1:40:78:10:b6:f1:03:7d:99:73:99:1e:2c:79:7c:
32:16:fc:e5:0b:24:60:24:e8:b2:ae:5a:85:be:85:
1a:d9:4f:f6:d5:59:83:d4:c1:9c:6a:19:07:6e:50:
7d:6b:f6:24:c4:e0:d8:3e:fa:6f:5d:6e:90:41:42:
01:58:7b:09:98:ac:b1:93:5b:32:c0:91:15:8e:97:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:7D:A8:D2:CF:8F:54:75:A5:0C:A1:EB:18:F5:ED:E5:18:7C:C5
X509v3 Authority Key Identifier:
keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4e:82:3a:ea:cd:0d:b1:2c:8d:1d:4a:d8:d6:dc:45:ab:c6:
fc:ef:ac:c8:01:96:43:70:a3:bd:21:86:df:fc:6e:34:f5:b8:
3d:07:2a:d5:e1:8b:e0:e4:9c:27:1b:25:f2:73:d2:74:ea:fa:
ac:84:70:bf:34:48:92:94:77:56:06:06:ed:80:f8:8d:ed:ab:
b1:19:0e:b1:f9:53:4c:5c:a0:0e:f3:4d:66:cc:c6:f9:dc:63:
b9:08:eb:d1:7c:86:09:77:c9:59:1a:72:0c:9b:b5:20:15:43:
eb:66:8b:6c:24:36:db:2d:01:ed:af:28:4c:7e:38:37:24:3d:
c4:98:c3:45:a5:1d:3d:8c:7d:53:17:a5:7b:b8:38:ae:e6:4c:
53:f8:67:3f:a2:c3:c2:39:6f:6e:13:05:47:33:fc:2e:af:31:
94:c7:a5:e0:ec:f1:91:c8:93:e7:8c:78:7f:66:71:be:4b:93:
c9:28:26:24:57:40:f5:db:3f:58:b2:3a:09:6a:09:fa:9e:64:
d5:08:66:eb:c8:7c:67:31:8e:23:a6:aa:db:75:52:a0:ce:15:
9e:19:f8:be:e5:b6:67:a6:fa:3a:86:80:5f:3e:49:d7:84:b6:
76:52:de:61:91:bb:0c:23:db:79:47:ae:2a:90:52:0f:6e:91:
f7:46:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:17 2026 by rpki-client