
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa
File: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=
Subject key identifier: 4E:F1:92:33:40:36:62:A8:6C:B6:06:AA:C9:2A:02:0F:F2:7A:01:92
Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B
Certificate serial: 55745B0685C6BD7C4B18F57BF32D05FB795B8035
Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa
Signing time: Sun 03 May 2026 02:22:40 +0000
ROA not before: Sun 03 May 2026 02:17:40 +0000
ROA not after: Sun 02 May 2027 02:22:40 +0000
asID: 134658
IP address blocks: 103.210.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl
rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:74:5b:06:85:c6:bd:7c:4b:18:f5:7b:f3:2d:05:fb:79:5b:80:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B
Validity
Not Before: May 3 02:17:40 2026 GMT
Not After : May 2 02:22:40 2027 GMT
Subject: CN=4EF19233403662A86CB606AAC92A020FF27A0192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:9f:a6:58:5c:f8:16:4d:5a:08:ba:a5:48:
20:4d:40:9f:12:59:8a:d1:4d:d1:e6:9d:00:17:72:
ec:77:ff:20:0a:1e:3c:51:8a:51:53:b9:55:1d:21:
f9:72:7d:26:89:71:7f:96:f0:1e:74:c3:dd:8c:2f:
f7:cd:0d:71:a6:30:81:92:0a:ba:e2:4f:77:c8:4f:
7a:e1:8b:43:e0:1d:fc:60:a7:8e:8f:06:2c:c8:73:
53:aa:58:c5:c1:8a:55:1c:87:4d:f0:14:47:a6:96:
4e:11:15:e7:38:55:2a:4b:65:12:07:65:7c:79:ee:
51:8f:9a:f4:5e:3c:1e:b7:47:41:5d:bd:2d:2e:18:
e5:b3:50:69:ec:ef:08:18:0c:e0:7b:3c:ca:9f:74:
ae:ea:6b:3c:51:89:f5:75:d3:2d:e5:76:50:30:84:
96:83:48:d5:9c:a8:33:3d:86:58:00:f5:e5:bd:bc:
99:60:25:4e:71:d6:16:8f:3f:c2:cb:36:c3:17:ff:
9d:16:89:74:24:4c:91:0d:13:fc:02:d9:fd:50:62:
a1:22:62:82:9b:cc:63:e4:69:91:b4:7b:9e:fc:68:
48:0e:c4:62:7c:68:a3:6b:c6:4d:cb:6d:32:5f:f5:
c2:4d:64:32:bb:7a:aa:ac:76:87:5f:27:2c:75:b3:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:92:33:40:36:62:A8:6C:B6:06:AA:C9:2A:02:0F:F2:7A:01:92
X509v3 Authority Key Identifier:
keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d0:75:89:72:fa:b2:71:24:05:41:78:2b:36:20:4f:6a:95:
bf:09:7e:aa:62:88:9c:64:56:6e:32:c7:e1:3b:f8:f4:ec:5e:
5e:1a:e3:50:8a:6c:89:2b:5c:e9:67:a6:f4:7e:c7:86:3c:21:
b6:5d:31:13:c2:dd:34:a8:69:e1:6a:f9:71:8b:a3:e6:ba:b2:
f2:9c:07:35:52:b1:a3:ca:30:a0:52:3c:2c:59:03:48:ba:52:
d0:58:be:01:f0:8c:d4:d0:34:15:11:ac:41:dd:fa:81:d8:f1:
8c:83:c4:97:3f:30:ba:9f:8a:b4:16:b7:13:b9:f3:94:9e:84:
f0:b2:f6:fe:73:1d:75:ba:2f:f6:0b:98:9b:17:da:09:f1:f4:
c3:18:35:c3:3d:ad:e2:bb:f8:94:4c:da:a6:27:a3:4e:02:74:
6d:f0:41:85:e1:0d:ec:08:46:7f:c1:1d:d1:21:69:5f:2e:e7:
e4:85:db:66:b7:10:31:56:02:e8:ed:dc:66:d5:ca:10:cf:c3:
5c:26:d6:b6:a8:a3:f4:0b:13:14:3d:95:6f:9b:d1:6f:42:72:
b7:f7:27:91:84:67:2e:71:81:22:37:d2:1a:78:ab:e9:4f:f5:
38:23:43:2e:eb:17:d6:bf:1e:1a:02:74:86:b4:a4:c2:25:3f:
eb:fa:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:10 2026 by rpki-client