
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e312e302f32342d3234203d3e203338373838.roa
File: 3130332e372e312e302f32342d3234203d3e203338373838.roa (raw, json)
Hash identifier: TnnimCiJNEI3YZmDLBfCPDrxGGuhDFX5yXiQDusUYTc=
Subject key identifier: 11:D7:A5:0B:8A:50:38:7A:DF:14:59:4F:77:9B:04:1F:F3:AB:FB:97
Certificate issuer: /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial: 33EBB929610EF737FE78CBC72998610BDEC25613
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e312e302f32342d3234203d3e203338373838.roa
Signing time: Sun 03 May 2026 02:25:06 +0000
ROA not before: Sun 03 May 2026 02:20:06 +0000
ROA not after: Sun 02 May 2027 02:25:06 +0000
asID: 38788
IP address blocks: 103.7.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:eb:b9:29:61:0e:f7:37:fe:78:cb:c7:29:98:61:0b:de:c2:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Validity
Not Before: May 3 02:20:06 2026 GMT
Not After : May 2 02:25:06 2027 GMT
Subject: CN=11D7A50B8A50387ADF14594F779B041FF3ABFB97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:c2:b8:40:46:8d:f3:48:29:3b:7d:42:db:
db:47:7c:dc:51:dd:82:bd:b8:d8:f6:84:6c:39:e1:
d2:1c:22:9c:6e:15:76:5c:19:5f:66:07:56:6c:41:
cb:31:90:ab:6f:a6:c6:99:77:da:d1:45:62:93:cc:
74:60:3a:f6:06:82:a7:13:7e:f1:cf:e4:ee:9a:4e:
f3:e6:91:27:55:73:29:2f:ce:6d:ce:8d:8f:f6:df:
b7:2d:d6:ab:7c:2a:fd:17:e8:5e:bc:ab:4f:39:12:
13:ce:75:87:c3:2a:69:30:c7:6f:36:95:d8:82:34:
76:85:7f:f0:2b:21:98:85:e7:1e:54:33:5d:e0:0e:
8a:62:3d:ee:59:34:15:2b:39:f1:b5:8d:c9:f5:4e:
bc:51:6d:b2:a7:59:0d:71:c1:06:e9:de:f2:f6:6b:
56:42:49:31:28:5a:c7:f3:b7:28:a9:e3:b5:cb:f1:
59:ca:25:f4:f7:aa:d5:96:87:6c:19:08:b1:ba:61:
6c:21:c7:93:4e:48:1f:70:2b:09:66:4f:24:32:be:
93:55:e8:f2:53:e4:b5:2c:e9:27:0a:e6:47:07:f7:
18:64:8d:ca:bb:12:6c:fb:7b:96:e9:0c:b9:01:2c:
f5:e8:74:66:73:2f:c7:63:a1:0f:77:47:43:77:1f:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:A5:0B:8A:50:38:7A:DF:14:59:4F:77:9B:04:1F:F3:AB:FB:97
X509v3 Authority Key Identifier:
keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e312e302f32342d3234203d3e203338373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:15:56:67:25:24:09:89:03:d7:6d:da:8e:2e:55:65:40:27:
f9:42:6f:34:42:08:e0:9e:40:3f:e7:93:9a:62:7d:3e:6c:8f:
de:79:42:0d:31:f3:27:05:35:02:e7:61:eb:05:92:2d:ce:7a:
8f:88:9a:8d:a1:92:04:b2:1e:d4:cb:0f:1b:2e:91:09:af:10:
d9:d7:ca:4a:a2:1c:da:0e:54:29:98:c4:d9:4e:a2:e5:9b:51:
2c:dd:8f:5e:44:8f:eb:8b:b2:70:ef:28:11:bc:fc:df:a9:b7:
6f:d3:47:3a:06:39:bf:cf:19:64:98:0a:33:81:96:a9:45:f3:
4e:a6:b9:5d:11:4d:84:13:7a:2b:c1:3f:74:51:52:e9:32:0f:
cd:99:cd:e3:f7:5f:8b:2b:1a:5a:83:36:1d:04:45:92:1b:ef:
84:f6:24:b6:8b:24:1f:16:54:67:40:cb:1f:53:a7:52:6c:59:
a8:eb:cd:96:de:60:8a:98:65:24:7c:a4:a7:5f:78:18:1e:be:
8d:20:99:6f:20:65:7f:27:6c:22:bd:19:15:44:37:67:d0:41:
d0:2b:06:3f:9d:8b:e0:c8:b9:02:13:60:3c:dd:9e:70:64:42:
b9:8d:ac:b4:3b:44:f2:f0:72:b1:b9:08:88:38:06:17:59:00:
8c:99:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:52 2026 by rpki-client