
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
File: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (raw, json)
Hash identifier: h0mDQReAke//6pXCcFZT8G6lJ584gGzjmeVUQYfewjg=
Subject key identifier: EB:A1:29:C2:9E:B3:8A:82:D1:93:86:B1:6D:D5:4A:CC:47:BC:88:25
Certificate issuer: /CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C
Certificate serial: 242574310CE5B99FB977F73CB18265BB5E4137FA
Authority key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
Signing time: Sun 03 May 2026 02:21:10 +0000
ROA not before: Sun 03 May 2026 02:16:10 +0000
ROA not after: Sun 02 May 2027 02:21:10 +0000
asID: 141905
IP address blocks: 103.217.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl
rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:25:74:31:0c:e5:b9:9f:b9:77:f7:3c:b1:82:65:bb:5e:41:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C
Validity
Not Before: May 3 02:16:10 2026 GMT
Not After : May 2 02:21:10 2027 GMT
Subject: CN=EBA129C29EB38A82D19386B16DD54ACC47BC8825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:08:7a:af:b3:a5:fb:f8:0a:8e:3c:0f:0a:
34:84:6a:34:db:d9:3f:41:46:d2:3b:14:74:b2:02:
7b:31:88:58:19:20:8d:87:34:ac:b4:fc:e4:94:e1:
98:a9:23:8c:a2:d7:bd:7d:a5:63:dd:b9:14:a1:c5:
d5:ec:87:62:ad:0b:1f:c4:39:70:7f:71:a5:dc:25:
fa:b1:00:19:b1:09:77:f7:84:fd:8a:d5:0f:d0:d6:
2f:05:2f:93:08:18:40:10:ca:e1:9b:6e:0a:32:aa:
07:79:19:66:2d:81:70:d6:7e:c6:0f:9c:53:ac:1e:
04:f8:fc:d0:80:d9:61:21:3a:c7:f7:7a:21:be:24:
02:35:58:f6:b7:f0:3a:47:8e:90:67:e7:26:6e:27:
63:91:d6:ce:7d:7e:73:b9:29:0a:50:f0:88:ce:a2:
66:04:c6:a4:09:e1:2c:39:84:66:81:f1:2b:b3:82:
58:32:67:fa:b5:86:a6:cb:20:e2:35:a7:01:ff:ed:
12:5a:65:4d:6c:89:45:ce:76:64:f3:58:d0:14:fe:
3a:86:d0:7b:fb:45:cd:09:27:bd:e9:f9:01:ad:0d:
d2:08:7c:00:57:fd:1f:68:86:64:07:34:a3:e4:b4:
81:8a:a2:f4:fb:ba:fe:d2:dd:64:25:a5:bb:a8:84:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:29:C2:9E:B3:8A:82:D1:93:86:B1:6D:D5:4A:CC:47:BC:88:25
X509v3 Authority Key Identifier:
keyid:1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.217.76.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f3:75:51:67:0b:ce:f0:ea:8d:5d:d6:ca:19:d8:8c:95:04:
0c:fc:87:bb:e0:53:db:d1:81:19:ec:00:c4:64:db:0c:4c:0a:
3c:4d:c6:b2:28:0d:30:5a:f5:e3:6c:53:5d:0a:fb:a4:0b:e4:
89:94:45:7d:42:55:24:4d:70:1f:bf:95:11:5e:9e:a3:9b:01:
b9:7f:5e:71:d2:54:70:66:07:be:cc:de:21:5e:d0:d5:ca:cb:
6d:2e:60:6f:6e:36:47:b9:0e:b7:69:b9:f0:17:6b:6d:31:9d:
24:5b:70:4f:8c:95:76:85:6a:29:df:67:d7:90:34:b5:22:28:
80:bb:b3:85:6d:64:6c:c3:54:a9:3b:7e:f7:60:59:79:5d:c7:
fc:fb:2b:6b:ea:6d:52:69:de:5a:61:e8:7c:d4:69:f2:16:76:
96:1e:33:6b:33:c8:b7:78:b1:97:d6:65:6d:b8:bb:69:61:36:
b7:74:f4:6a:b7:48:af:22:e6:c5:c1:75:5d:c3:fc:8a:27:7e:
38:82:e7:af:52:f0:0d:37:4c:bb:66:93:ea:1b:5f:a2:86:3d:
d3:57:1f:e1:65:63:cb:cc:27:50:28:fc:53:fd:c6:b2:be:a2:
d5:17:f4:ba:55:aa:3a:2f:f3:32:5d:dc:00:56:8b:86:6c:f5:
f9:05:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:01 2026 by rpki-client