
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa
File: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (raw, json)
Hash identifier: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=
Subject key identifier: 5C:93:D2:E5:D8:E8:3D:20:3B:3C:9A:88:59:22:73:B5:D8:9F:2A:29
Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial: 296489E8E0D410A6334FE25E450AD5794DE43299
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa
Signing time: Sun 03 May 2026 02:21:46 +0000
ROA not before: Sun 03 May 2026 02:16:46 +0000
ROA not after: Sun 02 May 2027 02:21:46 +0000
asID: 55662
IP address blocks: 103.71.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:64:89:e8:e0:d4:10:a6:33:4f:e2:5e:45:0a:d5:79:4d:e4:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Validity
Not Before: May 3 02:16:46 2026 GMT
Not After : May 2 02:21:46 2027 GMT
Subject: CN=5C93D2E5D8E83D203B3C9A88592273B5D89F2A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2f:c7:e3:15:fd:af:46:64:fe:22:a7:24:b3:
db:75:57:e0:37:eb:c5:fc:57:34:47:15:da:a8:9e:
c4:1e:6b:6a:51:bf:e7:1f:52:ce:24:89:9e:6d:be:
e5:a8:ee:19:ce:55:d2:52:58:d3:bd:47:b8:43:76:
05:96:6a:96:b7:4e:22:de:3a:d3:60:17:a5:98:52:
bd:ec:90:09:31:75:e5:fc:a3:4b:12:22:0e:72:9b:
a6:c4:db:39:56:7a:a9:e3:b8:c5:55:f8:78:cd:6f:
c1:16:60:23:ba:41:ce:f9:30:78:52:47:ef:d2:0d:
1d:6e:18:af:3b:65:26:3f:79:c7:81:30:36:d7:33:
a4:c0:b0:68:74:94:1e:d0:92:d4:a0:6b:0d:41:52:
cf:1d:6c:c0:7e:7b:0e:bd:08:67:8e:88:c6:30:42:
12:9b:c0:b2:16:83:a5:a0:dd:09:c1:bc:5b:9f:0b:
70:d6:32:8f:11:26:10:ed:2f:e5:92:b4:35:fd:c5:
e3:42:c9:a8:24:df:ac:1f:aa:f2:29:1d:94:a5:6a:
67:7d:7b:21:24:f5:77:da:82:4e:21:b3:14:cd:e6:
4b:01:0a:e5:de:72:63:14:c7:a7:c4:b1:28:19:08:
dc:75:98:10:c5:31:4e:50:bb:ed:91:c6:87:63:9a:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:D2:E5:D8:E8:3D:20:3B:3C:9A:88:59:22:73:B5:D8:9F:2A:29
X509v3 Authority Key Identifier:
keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f6:70:8d:53:e2:8b:ec:19:eb:56:07:1f:fe:f3:7e:24:55:
fe:a2:44:46:be:75:bc:37:07:98:9e:b3:af:4a:5b:46:4e:68:
2d:9c:7e:ed:1c:eb:e2:b8:66:a5:73:db:28:bc:51:fc:ad:94:
aa:f5:fc:eb:b2:f6:75:af:07:ab:0f:97:c1:c2:5c:38:b4:eb:
4d:2f:b7:96:4a:17:09:86:48:c7:95:cd:be:f9:e9:53:4a:20:
d6:ec:31:b0:13:55:0c:79:28:44:b4:f0:56:52:0f:cd:d5:61:
07:47:35:00:7a:5e:50:9d:56:02:a6:ef:b8:61:c0:33:d6:e3:
56:fd:86:71:18:22:97:17:4c:97:fd:3a:24:58:ca:28:50:92:
b2:3b:cf:b6:6c:4d:f6:7b:cf:16:0c:ef:fc:84:54:3f:22:cf:
27:5a:2e:76:1c:2e:3b:20:f7:3b:0f:1b:b1:50:cb:76:33:e6:
c5:68:bf:19:e5:0a:8e:1e:59:90:bb:2a:31:94:1d:3d:22:c9:
cd:b6:30:3e:f6:f7:30:56:e6:a8:76:13:d9:6d:f2:94:65:a9:
85:eb:e4:ed:34:53:c5:bb:02:d9:6e:c0:cb:16:fa:a6:f1:f6:
4c:cc:52:64:72:5a:a4:0e:98:fd:68:fb:89:8f:c6:18:62:fe:
60:34:e4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:53 2026 by rpki-client