
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa
File: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=
Subject key identifier: DB:8E:B5:F0:DE:2D:77:BE:84:35:C6:D3:BC:87:5C:FD:E5:B8:C7:00
Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial: 45F0F3815216465082C1DDD642CA03F01DCC7061
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa
Signing time: Sun 03 May 2026 02:21:46 +0000
ROA not before: Sun 03 May 2026 02:16:46 +0000
ROA not after: Sun 02 May 2027 02:21:46 +0000
asID: 55662
IP address blocks: 103.71.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f0:f3:81:52:16:46:50:82:c1:dd:d6:42:ca:03:f0:1d:cc:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Validity
Not Before: May 3 02:16:46 2026 GMT
Not After : May 2 02:21:46 2027 GMT
Subject: CN=DB8EB5F0DE2D77BE8435C6D3BC875CFDE5B8C700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:14:45:60:07:63:f9:9e:55:e0:ab:9f:74:
6a:f1:14:51:b1:55:13:fc:f3:8a:c1:fd:25:fb:de:
c0:02:02:59:79:af:9a:94:d1:a9:11:89:c2:44:aa:
e0:60:11:39:e0:8f:db:a1:63:e9:c2:e2:a7:25:e2:
00:e1:50:43:d5:20:dc:7d:2b:d8:84:b1:a0:87:a1:
e3:22:e9:52:76:4a:43:d6:10:ea:fc:29:d4:e8:6b:
b0:41:8e:d2:ab:37:54:59:81:d2:18:9b:32:c9:d8:
2d:ae:36:bc:33:1c:44:78:eb:13:8b:bb:23:cf:0a:
3d:79:3e:3e:35:8c:7f:8e:03:46:b3:fb:4e:6b:61:
c5:f5:a1:61:ff:a6:ad:37:03:22:43:b7:16:ce:83:
3f:e1:09:b1:65:c2:e9:56:90:e5:28:ca:d9:36:7e:
4b:3f:01:3c:39:70:b0:08:ad:94:93:17:f4:c9:3b:
ac:2d:03:ac:4c:37:6f:32:eb:38:68:d8:25:79:ee:
b5:44:0f:88:fa:a7:33:7f:66:86:38:55:81:bc:67:
2f:64:6d:79:a6:44:38:a6:99:c2:53:99:ac:f9:62:
14:a1:ac:35:ba:c8:14:ce:ba:71:cd:4b:38:aa:0b:
b9:57:59:85:ee:60:96:15:8c:d0:e2:bd:aa:b6:12:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:B5:F0:DE:2D:77:BE:84:35:C6:D3:BC:87:5C:FD:E5:B8:C7:00
X509v3 Authority Key Identifier:
keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.11.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1c:6d:94:51:b7:10:d8:bc:50:22:42:28:de:ec:2a:4b:1d:
5f:7a:97:da:a0:f3:06:fa:c1:d4:a1:11:ce:10:5b:32:f0:95:
d7:04:d1:72:86:04:10:a7:d0:5c:6b:ea:7b:64:4a:80:08:a8:
f5:c8:65:51:12:b2:5f:91:51:e2:6e:06:c4:6a:30:c0:10:98:
24:18:7e:c6:57:fb:d0:aa:5f:3b:08:35:c4:69:b6:80:e2:10:
1f:43:38:c9:99:15:3c:1d:37:92:25:7e:3e:08:8f:17:27:42:
85:29:f3:07:13:ee:94:e5:b3:83:3e:94:31:67:9a:1f:89:22:
0e:2e:72:89:fb:fc:3b:c1:ae:16:35:c4:d1:f6:14:aa:39:e4:
44:a2:51:7d:75:ba:e7:4d:ef:f5:ed:f8:98:5c:72:d1:44:e3:
54:78:9d:72:87:1b:a7:d1:31:4c:a2:d3:ad:e3:94:bc:7f:f3:
a2:cf:b0:5c:c0:66:50:48:b9:de:57:a9:13:1f:6d:d6:16:3f:
e3:c5:3c:c2:78:6b:ce:a9:b8:b1:5b:04:46:d4:c0:06:c3:ef:
f6:7f:a0:a4:30:02:3b:44:bc:61:d6:a7:49:0e:e8:75:59:46:
32:b6:03:30:81:8e:0c:20:ce:16:3c:1e:5e:f9:79:52:26:2c:
9b:cf:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:04 2026 by rpki-client