
$ rpki-client -vvf rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa
File: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (raw, json)
Hash identifier: fXvqiR82gi7YB7d/7jQ2cdvdZ/4SJXXC4hBrVNhlfUA=
Subject key identifier: F3:D5:68:90:FF:A0:89:BA:2B:5D:34:FB:0B:1A:5A:E2:77:2A:33:0D
Certificate issuer: /CN=6C9BE2712174A61A708F557544E696FFDBDA757D
Certificate serial: 7B0E65B3AF915CE1544753FE92992B76DDD1DB07
Authority key identifier: 6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa
Signing time: Sun 03 May 2026 02:26:08 +0000
ROA not before: Sun 03 May 2026 02:21:08 +0000
ROA not after: Sun 02 May 2027 02:26:08 +0000
asID: 150971
IP address blocks: 103.127.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.crl
rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0e:65:b3:af:91:5c:e1:54:47:53:fe:92:99:2b:76:dd:d1:db:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C9BE2712174A61A708F557544E696FFDBDA757D
Validity
Not Before: May 3 02:21:08 2026 GMT
Not After : May 2 02:26:08 2027 GMT
Subject: CN=F3D56890FFA089BA2B5D34FB0B1A5AE2772A330D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:72:2d:91:d0:73:fa:5d:52:f6:98:73:8e:
50:95:54:8f:0f:b0:63:3e:fb:d8:98:cf:00:48:30:
c9:74:18:1b:33:b1:20:22:75:20:93:ce:e3:fc:1f:
6f:53:af:5e:fe:7c:31:36:ba:a5:f2:3c:f7:0f:4b:
b2:37:a6:0b:73:8d:26:be:9a:8c:8e:3a:ed:b3:f4:
c4:71:22:bd:3d:8e:f9:86:35:80:92:b9:13:0e:3a:
03:a7:d8:74:aa:61:da:90:4d:ff:67:13:2a:81:e7:
7a:f1:24:91:47:c6:04:11:7d:52:92:c2:f7:65:04:
52:fc:a7:62:9f:7e:22:ca:6d:06:1a:c5:23:61:fa:
e3:c6:f7:9c:0d:61:49:d1:39:df:4c:92:5a:33:70:
a3:dd:0d:1f:6e:a3:18:e6:d2:33:f2:f4:96:40:c9:
db:f8:71:28:2e:f4:7c:13:f3:be:99:1b:63:3f:77:
05:c7:29:40:24:c6:2d:e9:05:0b:7d:35:9a:d7:ec:
d6:2a:f0:66:c0:0b:66:4c:db:f7:07:d6:10:d6:38:
24:dd:4d:d1:58:b7:ab:cf:41:9f:1b:ca:37:20:5d:
af:2c:c8:b3:30:24:1b:95:88:e4:84:bf:26:97:25:
ff:c9:f0:71:e2:0c:56:09:f2:6c:36:98:04:88:56:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:68:90:FF:A0:89:BA:2B:5D:34:FB:0B:1A:5A:E2:77:2A:33:0D
X509v3 Authority Key Identifier:
keyid:6C:9B:E2:71:21:74:A6:1A:70:8F:55:75:44:E6:96:FF:DB:DA:75:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/6C9BE2712174A61A708F557544E696FFDBDA757D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C9BE2712174A61A708F557544E696FFDBDA757D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.106.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b7:98:79:70:1a:0e:23:07:a7:4a:72:90:b6:fc:29:b1:66:
51:c1:cc:c9:e8:6e:b4:d7:d2:c7:52:2d:81:39:98:7d:71:ee:
e9:57:b0:36:6d:ee:bd:f9:f1:23:06:57:11:55:95:45:75:38:
19:b8:ad:c0:2e:da:6f:06:b8:f1:69:a8:62:31:50:21:db:8b:
0c:e3:b0:f1:1a:ea:ed:8d:1f:ce:a9:9c:83:1c:ed:0c:48:a9:
ac:8a:81:0c:d9:e0:d2:99:89:c7:f5:f9:d3:a8:83:6f:de:e0:
60:1b:61:3e:d7:42:30:55:f9:a6:ad:43:1d:5a:96:00:e6:cc:
a3:40:db:6b:a5:ad:c1:83:9e:89:93:11:01:98:94:9a:dc:60:
21:ba:cd:ed:2a:3e:7b:14:8e:10:df:48:99:be:da:fd:df:88:
54:f6:5f:f3:bf:38:90:9d:e9:a0:5a:b7:4d:2b:44:58:f8:e5:
8a:02:da:24:da:ba:57:af:03:51:3d:2a:e8:2d:78:df:05:16:
c9:8b:9b:9e:51:57:14:d1:bf:74:88:21:9c:43:1c:43:e4:64:
f1:a5:2c:1c:16:70:ac:56:be:85:d8:32:8e:35:62:20:05:3a:
c2:a0:23:13:a1:66:b3:20:4c:f7:0e:3a:20:84:a5:c8:af:a7:
1d:67:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:52 2026 by rpki-client