
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa
File: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (raw, json)
Hash identifier: 38bOTSe4cTdefI8PO7GN8RWELwk4anfmyd09536sUts=
Subject key identifier: 79:B5:6B:5B:53:3B:A5:04:4D:9D:D0:DC:76:2B:17:59:5F:16:97:DF
Certificate issuer: /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Certificate serial: 1386DE6090BB2CF2462A13871BFEF00FE8303E4B
Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa
Signing time: Sun 03 May 2026 02:23:32 +0000
ROA not before: Sun 03 May 2026 02:18:32 +0000
ROA not after: Sun 02 May 2027 02:23:32 +0000
asID: 136888
IP address blocks: 103.106.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:86:de:60:90:bb:2c:f2:46:2a:13:87:1b:fe:f0:0f:e8:30:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Validity
Not Before: May 3 02:18:32 2026 GMT
Not After : May 2 02:23:32 2027 GMT
Subject: CN=79B56B5B533BA5044D9DD0DC762B17595F1697DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:c3:a2:9a:dd:97:01:15:5a:e1:93:4e:c7:
87:72:99:6c:8b:9f:eb:ad:19:51:c4:68:3c:b2:f0:
fe:8e:d8:85:d4:cb:38:aa:e2:d8:f2:a3:51:16:93:
87:98:cd:78:6e:87:2b:00:d1:13:de:0a:26:b5:6c:
ca:3c:f3:71:cf:53:f6:35:1f:3d:5d:4a:a7:ea:a2:
51:d2:d4:d4:29:a2:70:16:64:6f:fb:25:c8:f5:61:
14:b9:ee:36:a4:2e:66:77:59:87:b9:29:03:58:38:
61:47:47:1a:04:0f:45:51:36:80:3d:f4:03:db:ee:
a7:56:70:22:61:d2:04:ab:29:21:30:37:de:eb:e1:
bc:4b:6d:01:35:9c:55:4c:a0:10:fa:37:8d:7c:b6:
10:89:ab:34:3d:95:31:9a:d5:a9:f9:0c:3a:63:1b:
9d:56:20:a9:ac:3a:91:0e:c2:de:69:1e:7c:1f:08:
67:45:33:d3:83:3b:05:c4:52:76:8b:3f:05:e2:0b:
d0:db:fa:c7:91:67:62:81:31:ce:cf:33:42:01:e1:
a8:08:b7:26:a4:d5:f2:cc:8f:64:22:30:f8:7e:ad:
7c:67:43:70:15:91:b8:64:54:f2:91:65:25:e6:0a:
02:da:fc:c7:b0:d5:87:a0:7b:c3:0e:6a:9c:64:0d:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:6B:5B:53:3B:A5:04:4D:9D:D0:DC:76:2B:17:59:5F:16:97:DF
X509v3 Authority Key Identifier:
keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.172.0/23
Signature Algorithm: sha256WithRSAEncryption
98:8f:50:09:8c:07:db:84:e6:04:12:14:83:b8:84:92:19:91:
e3:f4:97:b5:dd:14:40:8d:00:2a:41:e0:12:7f:52:7a:9c:07:
f6:34:8d:e7:fe:45:26:7e:3d:9a:23:bc:7a:66:9f:91:81:ce:
33:1c:d4:c1:92:cc:1d:4d:73:50:aa:e3:c6:76:01:6d:bc:c9:
c4:2b:99:a0:8d:ca:7e:9b:ca:06:7f:b4:1d:df:ca:ae:b0:f7:
45:21:c6:4a:e1:92:c2:29:58:39:e2:bf:0a:23:57:a3:b6:93:
fe:ca:16:83:bc:95:b0:78:60:d1:7f:ac:27:1b:ac:9e:73:d2:
45:83:61:6e:cd:e2:0a:9c:e1:f3:40:93:37:f3:ff:fd:7f:4c:
1a:fd:9c:49:db:d2:d1:bd:8a:84:b7:56:ca:c3:35:6c:df:74:
9e:52:a4:b7:d1:7d:a9:03:6e:52:a7:e5:f2:9b:ef:70:a7:4a:
01:ad:c3:e7:99:29:2a:79:c3:8c:52:5c:a3:cb:41:ff:90:e2:
eb:be:58:05:30:c0:0b:d1:a6:29:24:27:2a:4d:4c:ab:2e:12:
26:24:b4:4b:5e:75:32:c7:dc:3b:bf:ce:7a:8c:9f:64:27:53:
04:b1:84:ad:2d:e4:40:b6:85:bb:ef:cc:11:bc:38:cf:68:0a:
a5:c7:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:57 2026 by rpki-client