
$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa
File: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (raw, json)
Hash identifier: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=
Subject key identifier: 0E:45:4C:9F:86:52:AD:E8:E1:24:B2:B7:01:36:87:46:47:1E:74:A3
Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0
Certificate serial: 7FE882DF84FE2B6A645BDDCC8F4ED679A52C04C3
Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa
Signing time: Sun 03 May 2026 02:19:36 +0000
ROA not before: Sun 03 May 2026 02:14:36 +0000
ROA not after: Sun 02 May 2027 02:19:36 +0000
asID: 142396
IP address blocks: 103.172.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e8:82:df:84:fe:2b:6a:64:5b:dd:cc:8f:4e:d6:79:a5:2c:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0
Validity
Not Before: May 3 02:14:36 2026 GMT
Not After : May 2 02:19:36 2027 GMT
Subject: CN=0E454C9F8652ADE8E124B2B701368746471E74A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:a6:d7:76:4e:b6:9a:43:bb:88:6e:f1:17:
16:5f:71:97:8c:b7:40:1f:99:68:54:92:eb:68:5c:
45:2c:d5:9d:ab:f6:58:1d:1c:23:85:ff:18:d1:57:
51:46:a5:a7:f7:a6:9b:e8:e6:13:73:e0:c0:cb:a5:
f5:71:dc:4a:1b:21:62:8c:41:fc:dc:3e:ed:1c:6c:
d0:2a:7a:7c:d2:c1:4b:a8:70:0f:e3:3e:3e:5f:36:
ff:9c:1d:76:6d:2d:dc:de:90:50:1b:71:e9:50:c7:
26:01:b4:3b:f7:62:38:ad:59:51:a9:97:15:57:6d:
1d:f2:8a:5b:60:5d:eb:2a:24:95:2a:ba:ac:df:63:
e6:5c:4a:55:da:4c:1b:48:98:3b:2d:7b:61:8d:fe:
ee:78:8f:00:7e:76:7a:82:5e:1e:9a:d7:5e:53:db:
e4:dc:7a:88:bd:4e:4b:5b:f8:20:e3:f9:00:b3:3b:
62:48:d7:db:94:9c:04:a1:9c:a5:2f:21:2a:d1:d3:
5e:d9:d3:97:76:f9:ef:7d:bb:ee:6f:c5:f7:52:f7:
c5:5a:d1:5a:a6:05:b2:bc:16:6a:d8:1b:f2:33:c9:
60:45:c8:e9:65:ad:01:e0:ca:4f:82:17:83:08:d4:
30:ca:80:60:9f:04:be:43:9a:4b:ae:cd:49:34:83:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:4C:9F:86:52:AD:E8:E1:24:B2:B7:01:36:87:46:47:1E:74:A3
X509v3 Authority Key Identifier:
keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.170.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:86:2b:d6:7a:9e:cc:10:53:a8:9b:88:33:3d:a8:f5:0d:50:
50:2d:d5:c3:9a:97:67:dd:8e:a1:eb:d4:ed:cc:9d:56:a3:09:
20:06:79:87:36:e7:c9:0b:13:40:24:b8:53:9f:8c:0b:3d:29:
dd:94:4b:d9:c2:36:f7:88:9f:98:0b:28:d7:13:e5:93:0e:fc:
7d:c2:cc:8c:22:29:c6:93:b7:37:31:0e:99:3c:4c:06:f0:0a:
34:43:a8:bc:5a:a5:70:58:88:45:27:13:cf:6d:eb:70:20:98:
e0:ee:5e:52:89:cb:8f:d9:8a:58:22:b2:74:79:b8:7d:7c:57:
14:c5:32:6e:55:90:08:03:02:05:02:29:64:4b:6d:29:05:68:
7b:10:ca:39:15:45:4c:20:72:a0:92:28:00:a4:c0:1a:d8:48:
2a:a5:04:1b:c4:ae:fa:10:f6:01:c7:29:6d:73:15:5f:06:5d:
d7:60:53:25:8e:e2:54:c1:b3:03:a6:09:14:94:fa:a6:3a:84:
1d:42:f0:ab:1b:2f:a4:9a:43:dc:8b:17:19:c1:6d:c5:43:86:
a7:b3:b9:21:d5:24:06:1b:6f:69:6e:2c:ed:a1:fd:3c:66:99:
6e:d0:69:ce:92:24:94:4e:8f:25:fa:28:80:a8:18:86:72:50:
c7:a0:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:27 2026 by rpki-client