
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
File: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (raw, json)
Hash identifier: Acd+CNDLcrmehVnAROgrc31TunZVSjXxsQg7HAi/x2w=
Subject key identifier: 3E:05:D6:17:63:86:90:04:73:B6:A9:7C:3D:D5:B8:D6:F7:E5:A1:80
Certificate issuer: /CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A
Certificate serial: 7E17DAE9CE9C4AD05403B5BE837E69E0B485814A
Authority key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
Signing time: Sun 03 May 2026 02:28:21 +0000
ROA not before: Sun 03 May 2026 02:23:21 +0000
ROA not after: Sun 02 May 2027 02:28:21 +0000
asID: 137315
IP address blocks: 103.109.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl
rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:17:da:e9:ce:9c:4a:d0:54:03:b5:be:83:7e:69:e0:b4:85:81:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A
Validity
Not Before: May 3 02:23:21 2026 GMT
Not After : May 2 02:28:21 2027 GMT
Subject: CN=3E05D6176386900473B6A97C3DD5B8D6F7E5A180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:28:09:f6:09:85:d1:55:3e:4a:b8:38:ec:
0b:71:9a:fe:ac:9a:b6:65:69:5e:5c:8a:17:ad:0b:
ac:b3:f4:2c:68:27:6c:89:df:10:6e:e9:40:0a:4e:
42:22:cd:a1:23:42:68:1e:c0:a9:32:70:79:fa:18:
46:a3:3f:f0:44:a2:08:6d:df:d9:77:c3:fa:ec:f2:
2c:e9:d6:d5:62:40:6b:22:fc:d7:9d:8c:ed:17:60:
55:ab:02:d6:9a:4f:db:6c:88:e5:e9:d9:86:fd:ba:
a2:66:50:83:40:75:f9:5f:1b:a0:4c:b4:17:88:9f:
82:f8:a0:02:37:8c:b1:8a:3f:35:83:30:79:ec:d8:
d6:8b:c2:e7:1c:1d:4e:8e:55:99:fa:02:fb:de:67:
bc:c7:ab:df:65:28:35:aa:cf:0e:37:89:5b:9c:e3:
62:b1:fa:87:2b:97:6c:00:62:d9:b6:6f:b7:4d:bf:
cb:ff:11:54:cf:45:02:c4:54:55:5f:f6:7a:29:ef:
c2:3c:f9:08:fd:6b:f2:56:4e:99:55:8d:06:03:ff:
e8:12:9f:d8:8f:fc:48:d0:5f:53:50:40:a3:57:a0:
34:7a:af:a0:ce:a2:15:6f:7d:d0:96:bd:dd:39:7a:
f7:c1:69:16:b0:81:d7:2d:3f:2d:c7:f2:35:42:19:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:D6:17:63:86:90:04:73:B6:A9:7C:3D:D5:B8:D6:F7:E5:A1:80
X509v3 Authority Key Identifier:
keyid:1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.210.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ca:c4:ba:0f:32:0e:49:c6:e2:e3:01:6b:4c:42:e4:30:c7:
aa:84:84:9c:bd:43:0d:cb:1f:33:51:22:17:5b:45:88:11:55:
0a:7e:81:98:36:96:0c:05:49:ab:9c:c7:7d:ca:29:54:45:70:
53:a1:cd:83:db:ec:f8:e2:72:d1:9e:dd:c7:7f:80:48:48:48:
9c:e5:42:e5:44:9c:9b:ef:53:d5:33:82:54:17:73:7e:0e:fd:
7b:6a:c0:da:f5:db:88:4d:0a:2f:a6:53:3a:c9:5d:00:59:8b:
b8:29:d7:9c:79:d4:91:41:ab:01:a5:13:95:71:09:bb:8d:52:
e2:66:a9:06:a1:14:cf:e0:91:2a:1d:cb:ea:92:c7:61:e1:ef:
3d:e4:64:00:e3:88:02:bb:bf:b8:72:9a:3f:b3:18:2f:5d:b6:
69:22:2f:6b:ec:dd:eb:c6:96:bf:e6:6c:e5:83:7b:6e:02:b4:
43:4b:52:87:60:1f:ec:97:c1:ba:b9:62:b1:65:66:c6:a1:5c:
a2:e1:4e:d6:a5:85:55:24:69:8e:fe:c5:bb:04:5f:a2:58:72:
25:6e:9d:fe:86:a8:fc:d5:77:6a:f5:3e:de:fb:23:db:e0:d0:
0b:bd:03:ba:6a:14:2a:6f:67:51:33:d8:56:80:86:83:92:0b:
1f:14:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:09 2026 by rpki-client