
$ rpki-client -vvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e31362e37392e302f32342d3234203d3e20313331373835.roa
File: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (raw, json)
Hash identifier: KbKAffsvKxiK1iR4ZLtyFSXqzPv63zoW9cNrraJoQ4s=
Subject key identifier: 74:C7:D5:34:B3:B0:18:F6:98:36:BC:B7:F7:5B:C5:FC:22:F0:6B:72
Certificate issuer: /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
Certificate serial: 56C7D01AF81A926C222E96A6EAA5A313F00AA8B8
Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e31362e37392e302f32342d3234203d3e20313331373835.roa
Signing time: Sun 03 May 2026 02:20:15 +0000
ROA not before: Sun 03 May 2026 02:15:15 +0000
ROA not after: Sun 02 May 2027 02:20:15 +0000
asID: 131785
IP address blocks: 103.16.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl
rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c7:d0:1a:f8:1a:92:6c:22:2e:96:a6:ea:a5:a3:13:f0:0a:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
Validity
Not Before: May 3 02:15:15 2026 GMT
Not After : May 2 02:20:15 2027 GMT
Subject: CN=74C7D534B3B018F69836BCB7F75BC5FC22F06B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:76:6e:7e:99:a0:3d:d8:50:4c:73:c4:4c:
1a:b0:1e:ca:9c:86:06:c1:60:2e:16:e7:82:52:48:
de:f2:b5:45:0e:5b:9e:d2:6c:24:40:20:ad:d8:0a:
2c:54:ee:cc:03:a0:0b:7b:37:a4:54:ca:33:92:6f:
2f:fb:51:d9:e1:7e:b4:8c:c6:0a:a2:47:7c:54:ca:
64:f0:e3:98:15:b5:df:16:c6:b1:02:5f:d5:f7:fc:
4b:c5:74:9e:d3:bf:80:c9:22:8c:1b:f8:b3:1f:ed:
9e:2c:d7:6f:19:a3:14:a7:95:51:05:2f:9d:02:3b:
bf:93:79:d8:45:56:aa:40:85:ec:40:2a:1b:64:f1:
72:55:e3:57:9b:17:c2:d6:40:42:b9:32:2f:fd:74:
69:25:77:8d:36:bf:71:2b:4e:73:19:f5:fe:01:f8:
79:b4:ee:f1:49:a3:20:86:4d:31:9e:5b:8a:0e:9b:
29:0c:97:65:fd:74:3a:bb:3a:21:c0:c3:60:62:1f:
6f:94:54:f5:e5:02:cd:4f:0f:8f:2d:8b:27:4d:91:
c5:26:96:3e:e1:9e:28:50:18:cf:47:ec:32:15:45:
6f:82:fc:60:5a:51:d7:ae:0a:36:b6:44:8d:3c:52:
3e:da:63:33:9c:22:31:78:db:c3:a9:72:df:03:ce:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:D5:34:B3:B0:18:F6:98:36:BC:B7:F7:5B:C5:FC:22:F0:6B:72
X509v3 Authority Key Identifier:
keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e31362e37392e302f32342d3234203d3e20313331373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:51:09:c3:58:19:9a:11:06:2d:a4:29:68:f3:11:27:ce:1d:
3e:74:fb:7a:49:64:49:b0:bd:16:a8:54:c6:ab:3a:cb:01:87:
71:24:7f:a9:b4:e2:30:68:de:33:ef:5c:4c:54:5b:f5:ae:b7:
06:00:33:6e:eb:48:f3:a9:7c:69:46:24:55:ca:36:4d:c7:14:
05:f9:76:81:d6:b0:8a:9a:12:cb:af:dd:12:41:a6:7e:ca:29:
68:d4:ba:2b:4d:b1:9b:1d:0e:93:73:55:71:65:65:f2:25:93:
b9:b7:1b:60:c8:72:fd:25:81:7a:f2:da:e7:48:e8:f8:92:20:
78:e5:58:8b:6e:fb:ca:ac:fa:f7:33:a4:04:dc:21:82:2c:af:
c6:b2:2d:bc:95:ef:e3:51:e4:f0:17:9b:41:66:c7:5c:a3:43:
60:e1:c8:51:dd:c3:c1:e0:4b:b4:c4:28:51:f2:6d:7d:13:ab:
3a:32:8e:46:af:07:66:cd:3e:58:26:f9:f2:20:be:c7:fb:70:
e8:6f:2e:ff:eb:24:89:c2:61:14:69:b3:58:99:df:f2:e8:ae:
f9:7f:d5:1d:9f:ef:f3:ec:b4:5a:e0:e0:fc:24:11:f7:67:b4:
84:30:19:1a:ed:91:f9:65:f0:b6:c6:a1:ff:1c:8d:8e:9f:a7:
03:93:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:51 2026 by rpki-client