
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
File: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (raw, json)
Hash identifier: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=
Subject key identifier: 96:53:BE:8E:45:F0:DD:FD:90:7D:86:89:DF:56:47:31:05:FF:AD:5E
Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4
Certificate serial: 719D1F958EAB048CE2F23CB6D52D3A93C98F87E9
Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
Signing time: Sun 03 May 2026 02:19:44 +0000
ROA not before: Sun 03 May 2026 02:14:44 +0000
ROA not after: Sun 02 May 2027 02:19:44 +0000
asID: 150270
IP address blocks: 103.39.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl
rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9d:1f:95:8e:ab:04:8c:e2:f2:3c:b6:d5:2d:3a:93:c9:8f:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4
Validity
Not Before: May 3 02:14:44 2026 GMT
Not After : May 2 02:19:44 2027 GMT
Subject: CN=9653BE8E45F0DDFD907D8689DF56473105FFAD5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:e0:fa:c2:5a:cd:02:b0:de:8c:5d:25:7d:
01:62:21:90:4f:c2:ca:9d:4e:d6:d0:3d:1c:2f:4d:
b5:2b:79:01:85:01:59:82:85:66:54:81:76:cf:ab:
7a:f0:07:61:87:f6:88:43:69:26:1f:00:58:30:10:
70:94:79:11:0d:c9:27:84:ef:fd:b0:85:74:cd:b5:
73:26:d2:aa:57:70:c6:42:d4:52:20:b5:13:27:f4:
72:bd:fd:5c:16:45:3f:17:e0:5e:c5:74:8d:89:fe:
8e:d2:af:5a:93:c1:e6:0d:e3:44:89:58:55:c1:04:
e9:21:9f:db:bd:8c:b0:ed:0d:20:e9:2b:35:9f:4e:
85:f7:ae:ff:77:85:04:a8:d0:56:9e:fd:cf:5d:db:
6a:7a:40:5c:8c:1e:7c:7a:e4:60:22:8f:4f:e2:a7:
a0:45:c7:36:c8:a1:fe:e2:fa:bf:8f:bd:fb:96:f2:
84:48:40:48:a3:d4:2f:8a:2d:36:1f:aa:12:fc:ef:
3c:a4:d4:a8:e9:ea:d6:b0:17:fc:22:fc:61:5e:86:
88:f9:3e:ba:96:8e:2c:90:20:f5:7a:1d:f5:83:ca:
56:11:9e:95:26:cf:99:b1:67:08:56:c7:88:eb:6f:
8f:0e:32:d8:92:aa:cf:1d:6a:71:24:95:99:2c:80:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:BE:8E:45:F0:DD:FD:90:7D:86:89:DF:56:47:31:05:FF:AD:5E
X509v3 Authority Key Identifier:
keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:a8:db:7a:0b:af:85:37:ed:12:cf:95:d4:7b:79:f1:cf:
9e:4c:cc:44:19:5a:66:75:eb:84:18:43:15:95:db:80:1e:a6:
69:5c:fa:3a:ed:34:3d:63:c7:db:ec:5e:ed:16:bf:be:86:a0:
8e:0e:39:fc:39:f3:92:1c:89:33:01:04:6a:33:2e:3c:6e:46:
97:dd:f1:cc:b2:29:92:0d:61:55:db:6a:70:5c:46:11:5a:4b:
a5:75:6b:42:ac:4e:ea:38:67:cd:2c:77:9b:19:df:fc:df:da:
0a:62:b9:2e:18:42:82:0a:4f:83:89:46:1d:b0:25:e4:4f:e4:
2f:f6:6e:b5:b0:65:67:ce:ee:e1:48:c5:ff:29:65:b9:c1:8d:
fe:67:e8:d2:44:08:10:41:80:8f:42:97:86:84:32:f8:45:ea:
cd:7f:a0:d7:a9:79:72:90:5e:d6:d3:03:08:16:c4:cf:71:e7:
4f:ee:c2:43:58:29:e9:e1:21:eb:ec:ac:9e:31:ca:2d:cd:39:
da:a4:37:ee:c0:bf:e1:72:6f:9e:c4:5e:4a:23:e7:44:65:c3:
18:85:3f:2a:3b:74:d3:2c:f8:78:ad:bb:b9:55:40:d8:59:17:
a3:93:ae:e3:12:36:f3:1f:03:27:38:a5:a2:3c:3c:9d:a5:24:
82:45:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:04 2026 by rpki-client