
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/3130332e3135322e372e302f32342d3234203d3e20313430343236.roa
File: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (raw, json)
Hash identifier: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=
Subject key identifier: 2F:90:27:94:CE:BE:B6:40:68:66:61:B0:F4:7B:9A:FE:42:F2:8F:5D
Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8
Certificate serial: 2F51097F4942FCB78EE2597C10D5054FE93DD2A9
Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/3130332e3135322e372e302f32342d3234203d3e20313430343236.roa
Signing time: Sun 03 May 2026 02:27:05 +0000
ROA not before: Sun 03 May 2026 02:22:05 +0000
ROA not after: Sun 02 May 2027 02:27:05 +0000
asID: 140426
IP address blocks: 103.152.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl
rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:51:09:7f:49:42:fc:b7:8e:e2:59:7c:10:d5:05:4f:e9:3d:d2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8
Validity
Not Before: May 3 02:22:05 2026 GMT
Not After : May 2 02:27:05 2027 GMT
Subject: CN=2F902794CEBEB640686661B0F47B9AFE42F28F5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:35:54:a9:6f:35:10:22:f0:9e:4a:36:37:
53:9d:75:ba:6b:30:3a:6d:29:c4:b0:ed:25:93:84:
95:00:04:9f:5a:8a:9f:92:83:4f:b3:fb:06:2a:07:
20:bc:24:a5:66:cc:9a:36:a1:7e:23:09:5a:77:fc:
df:cc:88:b1:0f:c8:b6:b9:10:b0:15:a2:cc:a3:b7:
35:71:ef:20:d5:81:29:3b:5d:67:f1:25:58:01:37:
f9:1c:58:d7:5f:9b:2b:cd:36:40:8c:53:27:0f:0b:
78:eb:dc:1f:d6:71:34:b8:59:ac:1a:e1:db:a1:75:
ea:70:60:0c:9f:e4:66:50:f3:6b:5f:bf:9d:d0:c8:
71:d4:ce:e0:c6:73:6b:33:7e:de:0d:f8:92:32:88:
3a:66:33:35:3b:7c:bd:3b:78:93:f1:fd:2e:e6:08:
3b:16:0c:df:d2:77:a3:e7:b6:31:01:9d:10:f2:b8:
d5:26:f9:6c:fc:62:25:22:90:a7:de:6f:eb:0a:13:
64:4b:24:5e:e1:ce:5a:db:df:a4:e4:e9:1e:10:8d:
52:01:a0:8f:0a:03:1d:d1:30:6f:f5:4e:8b:3f:fe:
fc:b1:67:1a:b3:e1:82:c8:e2:f8:99:a2:4b:57:11:
16:d3:ba:cb:92:5f:ce:3f:fd:73:90:54:53:80:2e:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:90:27:94:CE:BE:B6:40:68:66:61:B0:F4:7B:9A:FE:42:F2:8F:5D
X509v3 Authority Key Identifier:
keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/3130332e3135322e372e302f32342d3234203d3e20313430343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9d:2e:cf:06:53:f0:e2:96:8e:70:c2:89:04:ee:61:93:48:
96:60:fe:83:89:7b:1d:e4:b8:ff:27:89:58:c4:db:9b:88:94:
27:67:22:77:dc:99:6e:2d:4b:e1:b8:b0:3f:55:0c:0e:cc:ab:
e2:13:a7:9d:b6:be:20:dc:59:56:a8:8a:4d:cb:16:cf:2d:15:
c8:d2:f3:cb:c9:ba:b3:a0:7b:c9:18:fe:93:b6:b6:24:3b:0c:
7c:28:b2:9b:47:3c:3b:47:66:34:28:87:e7:63:91:39:1e:c5:
cd:19:9d:ec:65:1f:6c:94:37:0a:bc:57:af:74:e0:cd:d3:03:
8d:9f:50:27:a2:ee:92:57:96:a2:09:28:0c:10:ce:19:25:59:
19:13:11:af:60:b7:84:36:83:6b:e0:a5:31:f6:05:87:26:5d:
b6:55:28:2e:d1:87:1a:c6:ca:84:71:49:8e:4c:0b:86:05:7b:
50:98:48:49:a7:55:31:47:74:be:b8:e7:78:1c:5a:94:b4:92:
43:f7:87:e9:24:ae:a5:0d:84:b2:a7:68:e9:7b:f6:3b:53:bf:
8c:de:cd:2d:ea:91:26:0d:28:35:d8:0f:c6:d5:cc:87:21:24:
42:a8:58:f7:74:3b:3b:a6:01:72:27:18:09:ed:4d:14:2d:81:
23:a1:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:43 2026 by rpki-client