
$ rpki-client -vvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa
File: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (raw, json)
Hash identifier: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=
Subject key identifier: E6:44:FD:CB:18:C5:77:6C:1C:18:86:61:7A:06:B8:C6:FF:50:29:FE
Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871
Certificate serial: 31FE984662E885C79EBB612E52485819D309AC9C
Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa
Signing time: Sun 03 May 2026 02:11:25 +0000
ROA not before: Sun 03 May 2026 02:06:25 +0000
ROA not after: Sun 02 May 2027 02:11:25 +0000
asID: 142307
IP address blocks: 103.168.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl
rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:fe:98:46:62:e8:85:c7:9e:bb:61:2e:52:48:58:19:d3:09:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871
Validity
Not Before: May 3 02:06:25 2026 GMT
Not After : May 2 02:11:25 2027 GMT
Subject: CN=E644FDCB18C5776C1C1886617A06B8C6FF5029FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:75:49:91:0a:01:57:83:8b:c6:cb:05:2e:
50:ab:67:fb:f0:66:d8:b2:bb:73:ae:ff:24:06:1a:
93:f5:92:05:71:21:08:00:f1:9f:57:43:55:8a:5c:
33:85:5a:bd:9a:71:ad:af:5f:da:be:42:a0:39:89:
97:16:9a:65:6d:68:34:6f:a0:21:85:e8:c9:82:98:
d0:94:05:b6:49:b3:33:91:a6:98:f5:e8:f9:64:b3:
28:df:a5:46:08:b6:bd:c1:3c:0c:93:f2:e8:53:ad:
76:b1:ef:f6:a8:57:85:cc:db:34:bc:62:27:84:86:
8d:8c:45:70:60:d9:01:aa:80:81:11:5a:a5:58:13:
61:fb:5a:f6:0a:1d:54:00:d6:a3:33:66:93:d5:61:
4e:6c:5f:39:33:24:f1:fd:b6:9d:58:81:90:20:42:
8c:4c:52:4d:aa:a6:30:aa:43:d7:ab:18:af:c1:4b:
27:f4:88:71:2f:2c:55:55:38:cf:f7:75:2c:7b:a9:
a1:23:93:46:6d:83:e7:51:d3:f3:79:48:47:7f:36:
04:78:32:07:ec:f9:43:d9:60:b3:2a:91:3f:b2:ee:
b5:f0:f0:6c:de:6b:de:72:6f:3c:9a:21:e0:61:30:
65:27:d0:e4:87:fd:0e:10:20:b4:e3:b4:66:93:c4:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:FD:CB:18:C5:77:6C:1C:18:86:61:7A:06:B8:C6:FF:50:29:FE
X509v3 Authority Key Identifier:
keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.44.0/24
Signature Algorithm: sha256WithRSAEncryption
82:33:d8:da:91:d7:8e:fd:1d:7d:f5:a3:d8:09:48:64:1e:f9:
c0:5d:16:01:2a:00:e2:4c:48:b3:87:04:c9:6d:d9:7c:9f:f7:
af:73:ea:05:5d:c7:e7:95:7e:c6:ec:f4:55:dc:04:ed:a8:ff:
c3:c3:bb:43:1f:e7:2d:b0:69:8e:e3:fd:a5:02:d0:8f:99:66:
f3:ed:fe:6c:65:7e:2d:bb:91:1a:b0:4b:53:97:d5:4d:a4:31:
2b:11:01:a3:5f:b4:68:8e:38:0f:2c:20:7b:3f:7b:ba:34:c4:
0f:7d:82:b0:e9:d9:ad:35:0d:b0:9b:41:f1:f7:17:68:ba:b2:
e1:74:16:04:38:7c:2c:d5:47:c7:b4:af:bd:c5:5f:81:6c:ce:
ec:bf:3e:0d:cf:35:eb:f9:ed:18:3d:4a:c0:08:a8:cb:34:95:
76:39:87:1c:c1:c7:ea:39:0b:55:f1:9b:93:c5:4c:2f:f4:1d:
76:dd:89:6a:5b:c8:46:2f:9e:2b:72:fe:96:f9:03:36:a6:0d:
63:16:cd:5e:8d:bb:e1:15:af:c5:7a:5d:50:57:55:c3:32:bb:
6b:db:15:ee:50:03:df:3b:24:08:61:35:52:35:b0:17:48:cd:
25:16:bd:1b:5f:ad:24:56:48:66:7f:b0:40:3f:69:c4:48:35:
32:da:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:59 2026 by rpki-client