
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32322d3234203d3e203535373031.roa
File: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (raw, json)
Hash identifier: LXq7hGEpfDwOU/0U2QR8rTojO84R6vUdH42Dh5XJwhA=
Subject key identifier: 60:1B:91:11:67:D1:A4:6B:6A:EA:41:BC:BD:AA:2E:14:59:01:3B:AB
Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
Certificate serial: 58531CEBFAA4049781C32E3C15F06AA791FF185F
Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32322d3234203d3e203535373031.roa
Signing time: Sun 03 May 2026 02:21:06 +0000
ROA not before: Sun 03 May 2026 02:16:06 +0000
ROA not after: Sun 02 May 2027 02:21:06 +0000
asID: 55701
IP address blocks: 103.31.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl
rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:53:1c:eb:fa:a4:04:97:81:c3:2e:3c:15:f0:6a:a7:91:ff:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1
Validity
Not Before: May 3 02:16:06 2026 GMT
Not After : May 2 02:21:06 2027 GMT
Subject: CN=601B911167D1A46B6AEA41BCBDAA2E1459013BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:db:57:1f:df:65:23:02:18:60:ac:92:3d:
b5:2f:1f:83:9c:cd:cc:ad:0e:80:0f:49:f9:14:40:
5d:bc:98:ff:d9:7b:15:5f:55:6d:05:8f:6c:0b:ce:
99:e3:68:a8:31:f5:7e:c2:39:60:2f:b3:40:04:91:
b5:8c:77:c1:38:b6:ea:28:df:e8:c9:e3:e1:8f:ae:
25:43:ae:a0:28:56:68:d1:57:15:6e:ac:8c:81:1d:
55:6d:52:d0:92:75:db:75:e5:bb:8b:63:53:17:97:
2e:ee:1d:24:89:53:d9:5a:d0:de:39:e3:bf:12:f5:
88:0a:ac:61:d0:b2:50:46:59:0d:ce:58:8b:ba:b9:
09:b9:e0:86:6a:7d:ba:77:2e:fa:0b:17:77:34:35:
23:8c:0c:a4:dd:af:3f:16:ea:a3:d7:ed:68:d2:51:
d2:11:bc:ac:b4:a5:2e:e8:4f:23:24:75:f8:f9:11:
21:55:3a:d6:cb:8d:dd:78:ec:cf:f2:3b:43:c9:08:
52:c9:b2:bc:9e:f9:eb:d7:01:d4:ea:96:4f:60:83:
99:6c:ce:84:ac:dc:0c:7b:46:86:14:63:e4:98:75:
0e:6c:94:41:3a:a8:1a:54:77:7b:b4:4e:44:b3:7f:
30:ec:15:66:5f:fa:c3:6a:d5:04:ca:cd:c4:90:88:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:91:11:67:D1:A4:6B:6A:EA:41:BC:BD:AA:2E:14:59:01:3B:AB
X509v3 Authority Key Identifier:
keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32322d3234203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.232.0/22
Signature Algorithm: sha256WithRSAEncryption
15:80:f1:1b:60:86:04:dc:ce:d6:0b:cf:26:fc:45:27:1f:ae:
4e:5c:7d:72:6e:55:ab:aa:64:40:6f:10:6b:ca:74:ca:e8:25:
71:49:2f:2a:4f:b8:42:bf:c2:d7:e6:c5:31:fc:79:3d:5c:19:
0e:24:59:b7:c1:7a:ef:81:44:75:18:69:5a:6f:26:39:78:d2:
fc:32:b2:a2:e8:20:3f:cc:a6:2c:1d:41:7a:a9:8b:c0:65:13:
f5:43:e0:57:7e:5f:9d:fa:25:1c:21:0d:9b:b4:81:52:73:f8:
25:e4:83:a2:37:f9:7d:01:82:09:53:79:99:fe:81:54:74:30:
2e:c5:ba:e6:af:32:b4:41:df:ca:9a:ed:5b:db:7d:1e:f7:49:
c7:c7:09:6c:7e:cf:ac:a5:4a:15:c5:75:bb:5b:a9:5f:be:f7:
1f:7a:5c:b1:52:2f:5c:4e:2a:10:f5:cb:32:f9:f4:69:15:75:
0b:b0:a4:ae:71:60:83:34:4e:20:1a:c5:7d:78:8e:c2:71:0c:
85:51:49:52:5a:64:29:2a:eb:f6:af:34:a9:e5:1a:50:17:b0:
cf:31:ab:83:de:55:f2:6f:b3:6d:49:66:87:9e:7e:b3:5e:cf:
fd:ef:d3:3f:36:08:12:a8:f0:08:41:cc:73:90:9f:fc:28:3b:
43:4e:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:11 2026 by rpki-client