
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa
File: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier: 2XkpN/yeHiOUoJ2xsuKoxeJRASOp5SwKm66EqL0pa2o=
Subject key identifier: 08:C1:37:21:8A:C8:28:14:F8:B3:33:E2:AE:72:ED:0D:61:1A:85:89
Certificate issuer: /CN=2224681B90D457DB106C5BD5E5518DFF52C87334
Certificate serial: 6BFE727FB1340839E342C679266A51CD4784D786
Authority key identifier: 22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa
Signing time: Sun 03 May 2026 02:16:04 +0000
ROA not before: Sun 03 May 2026 02:11:04 +0000
ROA not after: Sun 02 May 2027 02:16:04 +0000
asID: 45325
IP address blocks: 103.169.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl
rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fe:72:7f:b1:34:08:39:e3:42:c6:79:26:6a:51:cd:47:84:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224681B90D457DB106C5BD5E5518DFF52C87334
Validity
Not Before: May 3 02:11:04 2026 GMT
Not After : May 2 02:16:04 2027 GMT
Subject: CN=08C137218AC82814F8B333E2AE72ED0D611A8589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:73:ae:fa:a8:67:a8:77:49:b2:29:df:87:
99:b0:2c:3d:be:53:d9:03:f5:ce:e8:28:65:59:ec:
c7:33:15:ed:b9:1a:24:3d:79:83:c2:bc:3e:20:53:
52:fe:8e:f0:64:75:9b:2f:5b:f0:0d:ba:d0:85:4b:
3f:91:41:2f:5c:35:41:74:69:84:9a:fc:3a:27:4f:
c9:94:52:dd:32:db:1e:88:db:cc:44:f4:ef:de:94:
b4:82:fc:9f:30:b0:f2:ce:3f:79:b1:79:dd:09:ee:
89:5f:85:78:07:4c:52:28:55:cb:a2:c6:d2:71:bc:
62:d4:97:40:77:fd:27:da:97:06:d0:0f:de:fe:68:
e9:44:29:72:67:e4:15:4d:f6:84:95:75:92:73:d2:
db:4b:1b:ac:3e:d5:ca:4f:de:71:e9:ac:5f:f2:bb:
00:39:24:5b:99:c8:5a:3e:51:35:81:c5:0d:00:ef:
aa:18:ee:68:de:f5:8a:00:6d:3f:b5:c9:16:74:53:
ea:81:ab:d6:3b:a3:b1:41:23:6c:9d:0b:b4:f6:3e:
d1:1e:16:d2:1a:c0:6b:5e:04:0a:d4:65:b5:e7:3a:
92:e6:ed:49:69:e5:61:5d:96:01:19:80:ec:18:bd:
f2:1d:00:57:f6:ed:45:67:8a:b8:34:87:21:20:f7:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:37:21:8A:C8:28:14:F8:B3:33:E2:AE:72:ED:0D:61:1A:85:89
X509v3 Authority Key Identifier:
keyid:22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:75:c1:f2:7a:20:3e:51:41:4a:cb:c0:5f:30:ef:6b:56:cd:
fa:52:39:86:c1:35:38:ed:db:c7:da:0e:e9:90:33:71:9e:43:
31:fa:1d:5e:2e:be:6a:51:ad:80:93:37:8a:44:3b:c7:ec:d9:
07:de:35:a4:76:48:07:3f:69:9f:21:2c:02:35:59:73:f5:e2:
5f:31:88:a9:54:7d:66:a0:9d:ea:59:dd:90:ef:8a:c7:66:3e:
a1:25:ff:88:d6:4d:55:42:e2:40:df:5f:64:c0:d3:db:70:49:
9c:b1:ca:e7:06:8c:c6:b9:01:5b:4b:29:7e:a9:d2:49:ce:71:
34:65:f5:60:5b:d2:33:e1:2e:9b:e7:e8:bb:c7:79:ef:6c:b3:
57:45:a8:0f:4f:8e:ca:e4:35:f2:e8:31:7c:36:1e:59:9d:48:
b2:2e:8a:ee:87:86:6a:07:aa:4c:67:85:33:f6:28:63:3a:81:
f0:27:90:69:32:5b:75:f0:b6:c3:5f:ea:7e:cf:9c:78:8d:6d:
07:14:97:f4:6f:3d:7d:d6:e3:48:01:2d:0f:1b:07:73:42:5e:
33:1f:bf:94:fb:35:20:7b:4c:83:b0:fd:3d:71:5d:84:bf:67:
b0:76:d5:0b:fb:53:f8:a8:5b:d5:b3:b7:44:12:f4:b3:d1:ad:
25:50:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:12 2026 by rpki-client