
$ rpki-client -vvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa
File: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (raw, json)
Hash identifier: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=
Subject key identifier: 10:EF:86:C6:27:21:2C:80:51:EB:E0:83:4C:43:67:50:E3:9B:39:01
Certificate issuer: /CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Certificate serial: 3BDF32F006E6000F206386FAA277EBA012664E13
Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa
Signing time: Sun 03 May 2026 02:11:26 +0000
ROA not before: Sun 03 May 2026 02:06:26 +0000
ROA not after: Sun 02 May 2027 02:11:26 +0000
asID: 136871
IP address blocks: 103.104.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:df:32:f0:06:e6:00:0f:20:63:86:fa:a2:77:eb:a0:12:66:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Validity
Not Before: May 3 02:06:26 2026 GMT
Not After : May 2 02:11:26 2027 GMT
Subject: CN=10EF86C627212C8051EBE0834C436750E39B3901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:68:8a:4b:10:79:91:49:b3:90:ef:ce:4e:
48:d2:fd:42:32:82:8f:52:de:dc:24:83:cc:a4:aa:
25:18:19:53:a3:cc:d7:b4:b4:bb:16:16:b7:62:be:
07:19:c3:f9:53:fa:a0:9e:2e:1d:62:fe:59:e0:fe:
d1:de:77:5b:a3:94:2b:fd:5a:5a:a5:4d:d4:d6:5c:
42:67:65:47:8f:9c:00:52:5d:e2:a7:8a:55:06:62:
40:0c:dc:68:27:78:d9:2b:2a:1c:6e:e1:4f:5b:be:
2b:12:22:96:20:77:1e:0c:e4:ed:aa:13:54:19:a2:
db:05:9f:cd:a0:8d:ef:9c:65:f9:a8:bb:27:30:19:
48:3b:54:53:d8:30:e4:dd:c6:a8:3a:8c:70:65:1b:
33:66:6b:7c:15:aa:70:b3:7f:6c:be:7a:1f:a7:56:
e9:eb:0e:00:03:2e:cf:1d:0b:f7:f2:be:71:2e:2e:
10:cd:76:c4:da:49:02:b3:b1:07:3d:97:9d:6d:f1:
b9:40:a3:9d:16:77:5c:c0:40:ac:ee:ff:6c:37:6f:
d2:94:17:b3:89:b8:6d:e7:e3:cb:47:bc:76:c9:37:
d9:30:ed:0d:84:7b:e6:6f:5a:72:13:f0:2b:8f:5b:
40:04:f5:f9:cd:3b:24:28:26:78:cb:12:6e:ae:9f:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:86:C6:27:21:2C:80:51:EB:E0:83:4C:43:67:50:E3:9B:39:01
X509v3 Authority Key Identifier:
keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.130.0/24
Signature Algorithm: sha256WithRSAEncryption
20:01:dc:9c:cb:da:25:81:78:e1:e6:0f:5b:99:1b:16:bf:03:
79:11:1b:fa:c2:27:52:ce:ab:a6:2a:c2:54:3b:2b:82:da:ec:
e8:0b:39:f8:34:6b:b8:ec:13:61:28:63:89:e0:89:84:2d:af:
1e:8e:9a:3e:62:a0:01:40:dc:56:00:d1:3b:75:05:26:ba:3a:
39:7c:dc:b3:a7:c7:08:98:a0:54:ed:cf:19:b0:a0:e2:b2:0a:
03:84:49:af:e5:a9:16:6d:ec:9c:02:d2:0e:f9:29:24:7b:68:
30:fb:f8:82:b2:ab:3d:fc:fd:99:b8:7b:55:94:18:8c:f2:c5:
c7:df:22:2f:05:26:7d:1c:eb:1e:f2:43:e9:39:59:3e:e4:79:
64:95:ae:37:ed:c1:01:44:3a:de:18:85:19:70:13:d4:20:17:
60:2c:f9:5c:85:38:cc:53:7d:4d:4e:21:54:73:7a:84:3d:97:
45:d6:d2:6d:ff:e4:29:33:f6:f0:8a:b4:4c:9d:18:c7:a6:11:
a5:36:58:c6:43:a1:a3:6a:8d:8c:00:ec:c5:e8:a8:04:3e:b5:
ea:ee:6f:b2:3f:8c:5d:3b:22:cf:3a:b4:ca:1f:5c:d3:4b:da:
64:42:22:f4:e8:2e:14:31:3d:b2:c6:f0:e2:da:7e:e8:fb:01:
f3:83:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:16 2026 by rpki-client