
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32342d3234203d3e203535363632.roa
File: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=
Subject key identifier: D3:63:E9:F1:78:56:62:99:A8:9C:82:C1:82:91:F9:6A:FE:4E:60:65
Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial: 0E398B65DA0A5A886BFC8665FFC43A51B2A30B2F
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32342d3234203d3e203535363632.roa
Signing time: Sun 03 May 2026 02:21:48 +0000
ROA not before: Sun 03 May 2026 02:16:48 +0000
ROA not after: Sun 02 May 2027 02:21:48 +0000
asID: 55662
IP address blocks: 103.71.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:39:8b:65:da:0a:5a:88:6b:fc:86:65:ff:c4:3a:51:b2:a3:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Validity
Not Before: May 3 02:16:48 2026 GMT
Not After : May 2 02:21:48 2027 GMT
Subject: CN=D363E9F178566299A89C82C18291F96AFE4E6065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:e4:26:31:b7:b3:d6:ba:37:8d:34:2f:85:
fb:0c:db:a2:ad:a3:87:20:a3:1e:74:7c:2e:dd:81:
3c:ef:7e:02:78:eb:41:90:11:51:36:77:b9:f2:4c:
2c:69:b5:04:2c:fa:4a:67:8d:11:aa:28:a6:82:42:
38:65:d3:25:9f:d6:e5:7d:74:37:86:a9:28:5d:56:
bd:41:dd:28:f6:a8:da:ca:9e:71:fa:2b:f1:43:ef:
1d:4a:df:ea:9f:4c:98:eb:31:99:b0:73:81:5b:1f:
c1:03:60:f3:de:d4:b9:8d:da:c6:ad:05:06:cc:5b:
b1:2f:84:dc:67:0a:80:56:a1:21:77:f1:ce:9e:1f:
a7:6d:0f:9a:d7:b3:9a:6a:a0:13:20:a2:56:9e:47:
7b:0f:cf:9c:b5:00:a8:eb:ba:94:62:ba:3e:be:d6:
2c:bf:dd:aa:b5:81:c9:1b:89:9d:6a:a3:24:ff:e1:
79:12:6b:36:11:e9:20:b0:19:63:bf:95:ea:e1:66:
ce:89:38:8f:b8:db:bd:8c:a1:85:bd:58:58:4c:4c:
0c:86:ae:6a:21:6e:08:dc:97:1d:b2:46:33:25:86:
41:21:93:97:3e:00:d8:22:5a:d6:5b:f9:5b:92:94:
15:50:2f:ee:c8:26:6e:8c:f1:56:39:22:2a:26:4e:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:63:E9:F1:78:56:62:99:A8:9C:82:C1:82:91:F9:6A:FE:4E:60:65
X509v3 Authority Key Identifier:
keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32342d3234203d3e203535363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:44:a8:9b:aa:c6:71:a2:a4:b8:af:ed:27:f6:9c:9d:80:60:
32:36:1a:bd:cb:8f:e3:61:cf:d6:d7:78:a1:be:b8:73:85:25:
89:d4:95:1e:b1:3d:68:83:62:2a:6e:71:c4:17:89:40:dc:18:
09:d8:59:a9:b5:0f:39:2f:b5:b8:d4:a0:00:78:fb:a3:30:fc:
40:87:d9:ca:bc:65:b0:74:57:f4:5d:d8:80:6e:cf:78:22:5a:
e1:78:3f:7d:fc:e7:b6:03:83:1e:0b:8a:64:fb:b9:24:cc:58:
fe:81:4d:17:ba:16:31:bf:7b:5d:d0:f0:04:5e:60:84:75:73:
2a:af:2e:aa:c0:0c:e4:c0:0a:79:2f:16:fa:b4:a9:65:b7:9f:
58:48:65:81:22:0b:8a:a1:c1:07:cd:e1:bb:53:6b:45:44:bd:
ac:15:59:62:8f:b3:41:0a:81:54:69:10:10:51:bd:a0:b8:a6:
82:e5:55:3b:b0:19:12:2e:51:63:cf:58:2a:d2:41:65:cc:5e:
b0:19:74:aa:da:9e:77:41:72:b5:99:d0:89:18:dd:f0:2e:64:
4f:a6:7b:22:ad:d6:c3:91:c9:ca:fd:b8:61:19:ef:b3:a1:a1:
94:0c:a1:e7:49:50:c4:eb:ce:04:ae:ac:3a:f9:3a:df:f2:09:
24:51:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:49 2026 by rpki-client