
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa
File: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (raw, json)
Hash identifier: wpAJDLUihNgZdkXIKLfMYOAsPAxxh17Ib2DtgmuX8UA=
Subject key identifier: CB:3B:CE:B7:5A:36:A9:EC:C8:57:11:5D:32:A9:DD:52:E9:0D:B7:0B
Certificate issuer: /CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Certificate serial: 0D2BDC71D36EE1958CDA211610D4C97C98638497
Authority key identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa
Signing time: Sun 03 May 2026 02:13:57 +0000
ROA not before: Sun 03 May 2026 02:08:57 +0000
ROA not after: Sun 02 May 2027 02:13:57 +0000
asID: 150488
IP address blocks: 103.39.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2b:dc:71:d3:6e:e1:95:8c:da:21:16:10:d4:c9:7c:98:63:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Validity
Not Before: May 3 02:08:57 2026 GMT
Not After : May 2 02:13:57 2027 GMT
Subject: CN=CB3BCEB75A36A9ECC857115D32A9DD52E90DB70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:d6:24:58:6b:da:59:72:b9:cb:8f:d6:a9:
c8:f2:90:44:c0:61:35:1a:2d:88:c4:79:9d:a8:ea:
6d:86:b9:08:bf:6c:5a:b1:04:d7:e3:88:42:54:f7:
07:4b:08:7e:02:c2:df:c7:36:50:7a:8f:ac:49:5a:
13:5d:15:05:45:00:be:54:6d:09:e8:f7:48:36:37:
e2:82:57:64:fc:2c:35:f6:31:83:dc:29:1d:75:f8:
15:85:02:23:37:ec:c9:98:97:b1:44:c8:cd:70:35:
09:7b:04:82:b2:11:dc:1c:67:41:a1:30:4e:f7:4a:
cd:75:06:f4:81:13:8c:01:62:da:71:7a:cd:39:a5:
fb:d2:11:7c:f3:14:06:3a:2c:af:75:ed:39:34:0c:
6d:49:cb:36:eb:9f:05:82:2b:1e:d4:f1:16:2b:d6:
f9:23:ce:aa:4b:30:a8:38:aa:fd:c7:b7:70:ca:6c:
ba:fb:1a:20:20:92:55:2b:43:35:07:a7:98:6d:6d:
9b:36:53:82:55:80:c2:6a:18:e0:b1:b2:c8:08:2a:
6f:96:1f:61:d1:6f:e4:2d:fb:25:12:50:ae:72:20:
58:cd:35:f9:07:33:a6:67:a9:09:82:4f:15:a1:4a:
9d:99:8b:09:64:54:ad:de:d0:21:93:f5:c2:41:1a:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:CE:B7:5A:36:A9:EC:C8:57:11:5D:32:A9:DD:52:E9:0D:B7:0B
X509v3 Authority Key Identifier:
keyid:E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.72.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f1:05:35:11:e3:e2:62:91:b7:67:1e:a6:9f:0b:83:f5:5e:
9c:ac:3a:20:5a:97:2a:55:ac:2b:23:f7:e5:87:0c:d3:0a:db:
1d:66:58:98:e2:93:6c:d1:02:5d:05:73:c5:b0:2f:dd:12:2a:
01:d1:e9:a5:fb:93:8c:51:13:c7:c3:5b:4b:2b:cd:f5:5b:3a:
4e:90:e2:c1:ae:2c:8d:84:34:98:b0:e5:c0:4a:01:1c:87:ea:
70:c3:46:67:33:bf:4e:78:00:36:cf:e8:83:9d:99:8e:31:f0:
85:b0:5c:b5:ea:d5:79:f9:25:16:f7:df:ea:4c:6a:0f:1f:e2:
68:a8:df:7e:a7:10:47:b3:75:d7:eb:58:96:5f:d6:60:cb:13:
e6:ab:79:32:19:76:04:82:60:fc:b1:e9:7b:3c:db:9e:71:b6:
f2:6b:dc:b2:e6:cd:5e:12:07:ac:f8:48:13:e5:f5:dc:eb:be:
0f:17:ff:df:98:71:86:48:85:31:a3:02:13:d5:9a:5d:d6:f1:
99:51:55:6c:56:e5:46:ee:5d:19:28:3e:b0:2f:73:18:8c:bc:
cb:e4:b6:05:3f:61:c9:9e:51:a9:4d:4d:63:29:d1:f7:c9:4e:
bf:c0:83:24:ee:46:1f:50:17:de:a6:2d:ef:9d:5f:3c:1a:c6:
f1:6a:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:54 2026 by rpki-client