
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa
File: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (raw, json)
Hash identifier: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=
Subject key identifier: 1C:B6:28:7B:FB:14:67:25:A0:5B:DB:F3:26:18:A1:53:E9:30:93:1E
Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E
Certificate serial: 0C85FCF0DB2D94B609FA0028F7C3D30CE9658E70
Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa
Signing time: Sun 03 May 2026 02:13:52 +0000
ROA not before: Sun 03 May 2026 02:08:52 +0000
ROA not after: Sun 02 May 2027 02:13:52 +0000
asID: 141113
IP address blocks: 103.157.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl
rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:85:fc:f0:db:2d:94:b6:09:fa:00:28:f7:c3:d3:0c:e9:65:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E
Validity
Not Before: May 3 02:08:52 2026 GMT
Not After : May 2 02:13:52 2027 GMT
Subject: CN=1CB6287BFB146725A05BDBF32618A153E930931E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:ad:ff:6a:ba:61:fa:e9:9e:26:34:16:0a:
c9:a4:d1:7a:6b:81:bf:6d:6f:98:df:d9:8f:e6:da:
2c:fa:4f:3d:02:8e:42:6b:b5:52:75:a7:21:6f:0b:
84:71:4d:ec:55:ee:62:3b:8f:7e:33:82:23:b5:bb:
8a:45:45:d3:de:a6:8a:d9:86:77:92:12:ba:5c:15:
a9:61:cf:7a:b1:54:39:d8:08:63:aa:aa:6a:c5:d8:
37:e3:fa:1d:5c:de:60:a2:85:58:bd:f6:c3:8c:d1:
75:04:04:79:4e:d9:a7:f6:33:7a:f9:ea:14:13:65:
83:d9:6e:27:27:2c:96:5a:3b:d5:c9:f7:87:35:15:
fb:5c:b6:00:5b:75:b5:01:dd:76:4a:33:8e:52:a3:
73:8e:27:a8:3e:86:74:8e:57:39:43:05:03:f6:13:
15:d9:99:3d:93:95:bc:7d:4d:3c:2c:69:28:27:89:
09:2f:22:57:62:b0:fb:b4:1b:d0:c2:1c:c0:05:52:
ed:e8:fc:d5:14:ca:50:ab:bb:64:2b:d0:1e:7e:a4:
95:6f:4b:43:c7:2a:aa:8d:bc:2a:5a:b8:71:d7:08:
22:42:7d:86:c9:3b:98:5b:92:aa:24:10:fb:bb:7e:
5d:5b:97:71:f4:e0:c6:8d:1d:b1:ea:b3:e9:94:ab:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B6:28:7B:FB:14:67:25:A0:5B:DB:F3:26:18:A1:53:E9:30:93:1E
X509v3 Authority Key Identifier:
keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d2:1e:40:72:d3:e2:68:75:b3:c7:5a:c9:2f:03:86:af:3a:
91:07:9d:0b:88:6a:a7:22:5c:17:a3:85:4a:6f:d7:2a:09:87:
05:39:87:ee:d7:ed:c9:f1:01:d7:9f:45:88:f7:fe:09:60:1b:
57:2c:26:6c:e2:a1:25:24:82:04:d1:8c:32:88:b3:b9:8a:e2:
a4:7c:39:76:bb:31:8f:61:8e:f2:b3:87:6a:e4:34:cd:1b:5b:
09:eb:a9:dc:ff:de:a2:3a:58:90:71:c7:c4:93:c6:6a:9a:08:
63:4d:d0:72:d8:6a:d8:94:bd:3e:84:8a:ed:8f:f7:b8:87:e6:
e5:60:f7:eb:3d:fb:0a:be:cb:9e:af:27:7d:87:1a:f2:9c:7d:
25:f6:a3:34:67:70:5f:e9:36:b9:77:db:b1:12:d4:8e:93:36:
5c:c9:0d:28:15:b4:06:6a:8b:b7:d7:9e:7e:a8:60:41:d0:cd:
ff:40:a9:10:a0:b6:97:7c:5a:9c:50:4a:9c:bc:b1:0a:35:29:
d5:bc:5c:c4:9e:a2:e6:37:45:de:d7:48:1f:2c:44:df:dd:e9:
f5:02:fb:c6:ea:8c:2b:58:a8:45:13:37:2b:5d:16:3a:23:46:
88:12:ee:6e:43:e4:36:06:28:b1:af:ee:af:3d:60:8f:65:53:
e5:fb:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:24 2026 by rpki-client