
$ rpki-client -vvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa
File: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (raw, json)
Hash identifier: CtGqY694vs+5rhe29OiFriR1fCqTy1GqyZ3iimqLrsk=
Subject key identifier: 6C:15:CE:42:9F:55:5A:6B:24:C7:B4:53:AE:04:1D:98:1E:5F:EF:C9
Certificate issuer: /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
Certificate serial: 32DBC341889A67B9166CF61E2748A7529C782F93
Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa
Signing time: Sun 03 May 2026 02:20:15 +0000
ROA not before: Sun 03 May 2026 02:15:15 +0000
ROA not after: Sun 02 May 2027 02:20:15 +0000
asID: 131785
IP address blocks: 103.116.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl
rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:db:c3:41:88:9a:67:b9:16:6c:f6:1e:27:48:a7:52:9c:78:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
Validity
Not Before: May 3 02:15:15 2026 GMT
Not After : May 2 02:20:15 2027 GMT
Subject: CN=6C15CE429F555A6B24C7B453AE041D981E5FEFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:ee:c0:02:a1:2b:53:a3:3f:72:d4:4a:77:
70:06:b0:38:43:5a:62:23:6a:f1:95:cf:a7:21:3e:
a5:cf:8f:c6:d8:c9:ba:49:be:27:d9:4e:71:6c:ea:
6b:68:2d:e9:6b:a1:17:14:ad:d8:a9:61:f9:85:60:
41:6e:38:8e:89:17:3b:92:53:1b:f7:5c:b3:7d:3f:
c8:4f:79:0c:a1:ac:52:88:9b:a6:38:2d:ef:00:50:
bd:f0:23:45:1c:36:10:3e:27:fb:c4:2e:15:f2:ac:
17:78:71:3b:7e:05:ee:a0:a2:03:b6:c8:df:01:6c:
8d:fb:70:f0:09:f5:86:e7:eb:7e:04:a1:b6:43:47:
b6:8a:13:58:0f:9a:1e:8d:0f:de:99:91:6c:01:48:
30:cb:11:97:23:a3:f4:00:24:6a:e2:2d:a6:b8:ef:
91:82:e3:a9:fa:6f:bb:9a:e7:fb:66:94:cc:ff:99:
20:ce:ee:1e:9a:eb:d4:73:0b:92:a9:e1:7f:8d:25:
0e:2d:87:c0:17:58:bc:24:32:d1:56:bf:93:b6:61:
5a:5e:c3:79:b1:88:ee:f3:2a:2a:4a:1b:9a:a0:bf:
9c:f3:e7:de:17:f0:da:b0:c8:b7:01:83:c9:db:a2:
66:1c:e6:47:2c:69:a0:20:13:a3:ca:81:96:f7:d5:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:15:CE:42:9F:55:5A:6B:24:C7:B4:53:AE:04:1D:98:1E:5F:EF:C9
X509v3 Authority Key Identifier:
keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f2:54:0d:cc:6e:ac:10:fb:20:16:d5:f2:34:00:f6:a5:88:
6a:86:c4:6a:53:a3:8a:01:4b:03:63:ef:a8:5c:8a:fb:40:cd:
0c:f4:30:d9:fd:4a:9d:c7:45:e6:3c:aa:ee:0c:3b:88:e9:c3:
e7:86:95:be:f3:a4:ea:5d:8a:cb:6c:6a:cf:09:7e:22:2c:57:
a1:25:19:f3:ec:fb:9b:90:9d:de:db:5a:23:3e:50:a1:e4:36:
af:64:c2:49:f4:94:bc:5c:6d:e1:98:6c:75:4e:49:5a:41:fb:
11:e7:09:ad:65:0a:cc:9b:c9:0b:cd:f0:92:90:de:69:0e:11:
d2:f9:dd:2b:50:d5:7a:63:14:c7:af:cc:dd:d0:20:3c:02:d7:
39:aa:ab:67:89:6d:4d:13:ab:e5:10:b6:fe:f9:cc:58:e9:50:
83:94:cb:95:68:a9:18:88:13:8b:06:ab:04:5b:8f:21:39:b5:
ff:ca:17:0c:c4:c0:3f:20:74:5e:aa:24:47:0d:df:89:6c:a5:
5f:e6:85:ec:d8:c5:f5:d2:a1:bb:d7:f2:8f:74:9d:a7:78:28:
26:d8:f9:a6:e7:76:2c:18:95:25:ec:39:b9:7a:4b:dd:31:64:
f1:cd:03:d0:3b:43:11:15:a3:c3:5d:90:45:ce:bb:79:6e:52:
5f:12:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:38 2026 by rpki-client