
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
File: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier: sPNvpeDzhWn+6hid5VgHhdrKErvd5aUmBzSDcwGzfnk=
Subject key identifier: 99:B7:F6:33:70:07:25:FB:33:11:20:24:39:BB:91:FA:B9:57:68:5B
Certificate issuer: /CN=330092B238160780852731102A871D6304465F70
Certificate serial: 04F676D15FC1B36DEB6737C459222DF7E7A07993
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
Signing time: Sun 03 May 2026 02:28:25 +0000
ROA not before: Sun 03 May 2026 02:23:25 +0000
ROA not after: Sun 02 May 2027 02:28:25 +0000
asID: 141056
IP address blocks: 103.155.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f6:76:d1:5f:c1:b3:6d:eb:67:37:c4:59:22:2d:f7:e7:a0:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330092B238160780852731102A871D6304465F70
Validity
Not Before: May 3 02:23:25 2026 GMT
Not After : May 2 02:28:25 2027 GMT
Subject: CN=99B7F633700725FB3311202439BB91FAB957685B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:38:2d:24:7c:5f:ba:9e:66:d7:6c:65:13:
47:df:41:29:96:dd:94:7e:5e:ce:fb:53:ef:a2:dc:
0f:67:8a:d1:7b:e7:9d:1f:e3:11:be:79:a6:30:7d:
5f:a4:12:96:b3:ac:da:cd:78:46:50:00:40:dd:d9:
63:2e:ae:fb:b3:25:64:77:93:a7:24:29:b5:89:99:
ef:8f:97:51:4e:81:0f:60:a0:7f:6d:a4:01:c3:0f:
b3:e8:8f:2f:2c:9c:53:c9:65:19:70:dd:71:42:41:
8e:8b:f8:2d:c6:f5:0a:36:59:d8:39:05:92:90:0c:
e8:e7:af:2e:63:d7:cb:56:5f:11:0e:bb:fb:a6:5d:
95:de:58:58:cd:64:2d:f3:a6:f6:af:bb:bb:22:f4:
8d:42:52:16:82:a7:bd:c8:1f:b8:22:75:32:a5:65:
09:58:f2:a4:bd:3c:58:7e:1d:55:8a:a5:5e:4c:90:
59:35:12:92:f4:e9:46:d6:6f:00:df:e9:54:94:f6:
70:d0:ca:df:fb:41:4e:6f:82:1a:22:1e:72:25:cd:
30:3c:be:ab:b3:91:40:ad:c1:c6:ca:e2:06:7f:13:
6b:3d:fa:eb:75:ac:cb:50:c4:2d:5e:61:4e:c1:a0:
72:44:e4:4e:26:fd:cb:52:b7:65:19:fe:81:7b:78:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:F6:33:70:07:25:FB:33:11:20:24:39:BB:91:FA:B9:57:68:5B
X509v3 Authority Key Identifier:
keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.117.0/24
Signature Algorithm: sha256WithRSAEncryption
52:54:5f:bd:80:b7:8d:19:3a:3d:4a:31:5d:7f:cb:86:c1:0d:
58:aa:ea:9f:56:fb:0c:60:e2:fb:d3:ea:11:7f:c5:e6:5b:d5:
af:c7:9a:36:f3:53:06:5f:39:81:34:1c:5b:e3:de:7c:f1:15:
ba:30:45:0d:43:c4:71:a2:3d:de:6a:dc:c8:2b:c8:e4:ff:fb:
04:01:30:32:61:7d:28:4f:42:f9:7a:38:f8:5d:86:d0:32:29:
8a:14:a1:ad:e1:3f:97:33:65:c7:e3:d1:b7:c4:59:3e:ab:1a:
0d:28:02:7e:f5:8e:d8:62:57:29:0d:e8:9d:4b:39:4f:e1:01:
9c:a1:26:bc:2c:49:25:e0:8f:35:c1:ab:0e:7f:39:e8:46:b3:
24:d5:fa:8a:cd:df:ac:72:34:2d:e9:69:16:cf:59:05:f8:1e:
33:4c:b8:22:62:4f:bf:d6:2c:a5:9f:59:90:bd:63:27:1a:9e:
48:fc:7f:4d:42:35:d5:ca:52:f0:77:dc:50:44:d4:69:83:f4:
82:50:b4:4d:18:a0:56:9f:23:39:e1:98:78:72:a6:03:98:46:
05:0c:80:d0:d2:78:da:23:d6:ce:51:c0:ef:b4:d6:52:c5:3e:
a5:44:07:90:2a:52:26:6c:00:eb:c1:f6:ee:c3:10:98:c9:9d:
ef:aa:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:44 2026 by rpki-client