
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa
File: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (raw, json)
Hash identifier: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=
Subject key identifier: F9:B8:D3:A1:8B:03:0B:1A:E3:F7:B8:28:54:A7:56:3A:7C:2F:C4:FE
Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43
Certificate serial: 58113C72E33408F785637020CC9891711356FD4B
Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa
Signing time: Sun 03 May 2026 02:12:40 +0000
ROA not before: Sun 03 May 2026 02:07:40 +0000
ROA not after: Sun 02 May 2027 02:12:40 +0000
asID: 150932
IP address blocks: 103.107.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:11:3c:72:e3:34:08:f7:85:63:70:20:cc:98:91:71:13:56:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43
Validity
Not Before: May 3 02:07:40 2026 GMT
Not After : May 2 02:12:40 2027 GMT
Subject: CN=F9B8D3A18B030B1AE3F7B82854A7563A7C2FC4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:e9:fb:4c:72:7c:ee:3b:9b:2a:21:da:29:
a0:09:f6:78:a1:e2:ec:2d:65:bd:6e:1d:88:a1:25:
4f:7e:05:a2:72:6d:60:fd:69:7e:c8:68:bb:da:d1:
92:47:fc:dc:88:87:68:2f:7d:70:fb:6a:10:9d:a8:
75:74:45:4a:dc:14:e5:37:4a:37:91:4f:b3:cd:5f:
60:48:6a:14:f7:b9:c1:39:75:f7:5f:45:39:a3:79:
e9:ea:7b:b1:e7:28:68:f0:ec:95:ea:e6:2c:ee:91:
ae:39:d4:08:cf:5e:f0:e3:d8:d3:e0:01:c5:58:77:
0c:61:94:65:df:9a:f5:1e:4c:49:6f:86:49:cb:e1:
ed:e0:ad:dd:e7:ff:b9:f6:d3:b0:58:ba:09:0e:e1:
83:aa:df:0f:71:27:05:72:b6:e2:d8:47:9d:b9:e6:
4a:47:47:21:cb:d0:3d:cb:1e:f4:fe:df:d7:1c:35:
72:3e:07:31:58:59:e5:3a:9b:2e:7c:46:67:b8:da:
c0:b6:cf:39:6b:9c:36:90:b1:74:81:fa:71:52:1c:
d3:73:9f:b2:82:40:64:03:f6:5a:89:2e:57:c3:57:
55:7b:5a:f1:be:cc:66:df:55:53:86:9c:81:0d:a5:
5e:51:25:2a:cb:7f:9e:10:98:6e:3e:65:69:27:bd:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:D3:A1:8B:03:0B:1A:E3:F7:B8:28:54:A7:56:3A:7C:2F:C4:FE
X509v3 Authority Key Identifier:
keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c8:ac:35:a2:c2:da:9e:0d:78:a5:e2:e1:66:40:c0:f5:4b:
60:ae:3a:5f:d4:e8:f0:70:fa:5b:92:4a:45:29:8b:26:9b:c8:
f9:91:cf:e7:2a:47:f5:4a:ef:d5:b3:d9:4f:b8:b8:17:36:13:
a8:33:a2:7b:ff:96:c7:af:90:15:44:d8:74:68:dd:c0:5d:53:
d1:47:1a:99:9a:85:b9:31:57:3d:cf:f1:da:48:02:db:ac:4c:
01:26:e6:ab:1d:89:b7:f0:00:28:11:83:87:db:fb:a3:8b:c9:
6a:65:a0:a0:5d:e0:90:ee:94:2a:56:44:1e:35:b2:7e:59:54:
1e:0d:54:6f:72:53:10:b8:f1:b8:86:85:b7:be:21:bb:64:da:
ef:7b:ce:18:7b:43:22:07:5e:63:e9:fc:01:fa:05:3f:38:58:
63:62:91:6e:ef:3e:ad:71:0d:66:0d:be:dd:f0:02:bc:b6:81:
fa:4d:6e:df:f8:47:19:4b:7c:28:97:63:95:d6:85:1d:25:a8:
6e:e9:75:e6:f6:28:7d:b7:75:00:d9:a6:86:de:ba:df:5e:14:
e1:ea:0b:ef:44:f7:a1:8c:ea:c3:68:30:7e:7d:e9:06:68:be:
27:ce:32:14:ac:16:bc:b9:38:39:e4:ba:b2:e7:42:70:24:71:
34:e0:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:53 2026 by rpki-client