
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa
File: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=
Subject key identifier: 13:D5:7C:0C:76:13:C4:E1:98:41:DF:45:F9:97:B5:E5:BC:88:17:EC
Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3
Certificate serial: 0124F32907BAA60FE9568B53A5AB9712FDB20F79
Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:12:30 +0000
ROA not before: Sun 03 May 2026 02:07:30 +0000
ROA not after: Sun 02 May 2027 02:12:30 +0000
asID: 58369
IP address blocks: 103.140.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl
rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:24:f3:29:07:ba:a6:0f:e9:56:8b:53:a5:ab:97:12:fd:b2:0f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3
Validity
Not Before: May 3 02:07:30 2026 GMT
Not After : May 2 02:12:30 2027 GMT
Subject: CN=13D57C0C7613C4E19841DF45F997B5E5BC8817EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:1c:aa:fd:99:0c:32:f6:4b:13:3f:74:ca:
6d:28:4f:d1:6f:a9:38:a1:87:4e:77:f9:1d:e2:8b:
6b:81:f0:ff:b0:77:52:b7:41:dc:06:62:b4:02:52:
35:fa:22:0c:ff:e4:ed:46:22:19:c3:95:75:a8:02:
13:46:7b:6d:56:d2:e4:d6:1a:de:2e:24:b8:eb:ec:
f5:85:1a:12:c0:82:72:b7:fd:32:46:95:f8:e5:09:
89:60:25:f8:d3:dc:a7:0e:c9:3c:01:0f:d7:51:51:
ad:66:6c:e6:1c:e0:de:86:2e:c1:df:fb:88:72:bb:
23:ec:a0:dc:7f:ba:66:5d:38:a7:1a:01:8a:ff:1a:
db:1d:55:17:02:28:13:77:f7:bc:e0:f3:74:2e:69:
81:e2:41:e0:6f:6c:d1:3c:58:31:cb:93:d9:87:fe:
1a:1d:40:e2:c9:2e:b8:a7:8e:6b:3c:4a:a4:7e:31:
75:35:6d:e8:4b:ad:7f:4d:a2:a6:32:d3:a7:c2:64:
e8:91:59:b5:ac:78:d7:04:71:e0:36:d8:48:c1:15:
a4:74:0a:d6:b1:5f:4b:2d:50:d8:c4:ab:25:cc:5d:
3d:97:ba:ef:02:84:ee:f8:1f:f4:cd:a8:5d:88:f3:
c8:31:e2:28:05:69:63:f2:87:31:6b:18:d5:ef:15:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:7C:0C:76:13:C4:E1:98:41:DF:45:F9:97:B5:E5:BC:88:17:EC
X509v3 Authority Key Identifier:
keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.108.0/23
Signature Algorithm: sha256WithRSAEncryption
46:47:f8:d6:60:d8:68:55:ec:68:a7:2e:84:df:48:ee:b8:35:
62:fb:2a:30:4f:ae:d9:39:e6:ee:03:a1:44:42:c9:8a:dc:36:
2d:42:0b:6f:5e:72:96:63:6b:04:24:fa:21:16:8c:f1:0f:43:
76:92:25:11:b0:86:cd:88:2f:7e:43:a7:7f:34:07:b6:59:85:
e9:bd:05:2c:c5:14:66:cf:37:37:ec:37:19:45:87:e7:72:19:
a9:88:63:ed:c8:74:f8:4a:42:f4:75:4a:72:54:28:ff:86:91:
7e:0f:84:71:c0:f6:d3:67:ec:0c:c2:4c:e6:6b:c0:e6:45:9c:
20:41:66:a7:5e:a1:e4:5c:ca:53:bb:bc:74:ea:00:e2:4a:2c:
c6:e4:5e:58:a3:ea:58:c7:ed:9e:c9:aa:00:1e:89:fa:a5:68:
75:8f:21:70:d3:9a:58:e3:1c:47:f9:eb:06:34:8d:42:60:77:
c6:fe:6d:4a:e0:1b:99:85:b4:7f:a0:0f:8b:a8:79:ec:84:1e:
b4:c6:c4:4a:9b:e2:af:dd:95:05:87:e3:ac:94:4f:83:cd:32:
43:07:28:23:37:8b:88:67:06:09:f3:eb:68:b5:21:a4:63:1f:
55:8a:76:2e:b1:47:a5:3c:f6:c4:e9:d9:ff:26:b3:6a:32:a4:
38:8c:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:11 2026 by rpki-client