
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32322d3234203d3e203538343835.roa
File: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (raw, json)
Hash identifier: i5cJhoPHd05iRQrt+c8hD0fxUqa82L/0uVmpW5FyRsM=
Subject key identifier: 77:EE:86:1A:E3:BB:88:03:FA:5E:67:85:F1:CA:CD:99:A7:D1:21:4B
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 480FE6696C274B31D5CA8344818D0BCA4E0BE0BC
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32322d3234203d3e203538343835.roa
Signing time: Sun 03 May 2026 02:23:17 +0000
ROA not before: Sun 03 May 2026 02:18:17 +0000
ROA not after: Sun 02 May 2027 02:23:17 +0000
asID: 58485
IP address blocks: 103.247.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0f:e6:69:6c:27:4b:31:d5:ca:83:44:81:8d:0b:ca:4e:0b:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: May 3 02:18:17 2026 GMT
Not After : May 2 02:23:17 2027 GMT
Subject: CN=77EE861AE3BB8803FA5E6785F1CACD99A7D1214B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:cb:21:9e:3d:9f:7f:a9:68:a5:7f:fc:92:
9a:b8:11:cc:9b:00:2c:f8:66:db:5c:43:3f:10:62:
fc:b8:d8:a4:37:d6:cc:c5:c4:cb:f3:63:5f:5b:07:
71:0c:40:4b:f5:b1:31:33:23:7a:ea:ed:44:c8:ac:
ea:f2:e7:88:47:10:54:78:ce:11:99:d7:82:61:de:
ba:31:8a:17:9e:4e:50:90:d1:89:26:3d:be:4e:09:
9d:3c:26:c2:ff:89:72:28:e0:df:9d:ff:08:aa:dc:
d0:27:6c:47:ec:21:b8:60:2d:b8:a1:6b:38:d9:a2:
27:98:17:49:b3:e7:d2:88:91:16:98:86:1d:92:cc:
7b:0c:b9:68:56:d8:e9:6b:8b:8f:73:88:df:12:16:
88:44:bc:76:a3:e9:5d:4e:31:16:7a:29:42:c5:50:
ad:ec:74:24:0a:19:26:47:9c:20:5b:5b:bb:f0:18:
b1:9c:66:23:30:cd:48:45:62:92:e2:53:ff:0d:4e:
f6:49:88:22:f2:74:af:39:3d:f7:86:ae:ed:b1:37:
29:2a:00:c4:dd:87:6c:9e:63:ff:ac:bf:54:48:33:
61:74:a9:f3:28:6d:52:e7:78:af:cc:30:6b:b2:4b:
af:79:54:22:cf:af:d3:57:e4:06:ee:77:01:b1:32:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:86:1A:E3:BB:88:03:FA:5E:67:85:F1:CA:CD:99:A7:D1:21:4B
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32322d3234203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:77:1f:d8:86:6d:1d:f4:96:01:39:11:ab:5b:38:9d:f4:28:
91:e6:e0:46:32:dc:23:5b:e5:3e:16:be:91:30:bd:e1:47:d0:
b5:28:c2:bf:96:d4:d2:68:89:0f:2b:67:eb:0c:6e:2b:5b:04:
c6:95:02:ea:4c:d0:d1:24:6c:6c:84:78:65:95:84:45:0f:48:
b3:e0:c1:c4:03:f8:21:81:9e:87:3e:59:8e:26:22:7c:39:da:
e4:ee:84:86:a2:66:18:c8:99:d3:7a:1c:8b:5f:33:a9:1c:86:
06:53:bc:ad:db:5d:88:a8:de:70:c3:8f:53:14:78:e9:fa:a0:
e5:2c:52:55:a1:4a:16:2f:f4:2e:a8:f2:88:3f:9a:e1:6d:1d:
e1:b4:ce:fe:af:3f:8e:49:71:a8:ed:82:13:b3:94:9f:32:15:
00:3a:13:79:d0:30:f1:e9:89:2d:bc:b7:63:af:90:4f:84:0e:
ee:4e:70:36:67:76:8c:c3:99:55:fd:f6:d0:e1:8e:b4:6f:a1:
4e:4c:8d:63:59:19:13:73:af:32:72:80:e8:f9:11:fc:95:e1:
38:d4:4e:9c:ea:38:cb:29:78:95:63:ff:a9:12:8a:01:c6:94:
b5:d7:f0:91:50:f1:3c:1e:45:f6:cf:55:4f:04:eb:bf:99:f9:
72:85:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:33 2026 by rpki-client