
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa
File: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (raw, json)
Hash identifier: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=
Subject key identifier: 1F:55:56:9A:79:3A:F3:D0:F1:EC:9B:82:87:D8:6C:7A:C2:58:75:E6
Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796
Certificate serial: 2C872809F80A703EE362719F8C84734147D1C109
Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa
Signing time: Sun 03 May 2026 02:28:34 +0000
ROA not before: Sun 03 May 2026 02:23:34 +0000
ROA not after: Sun 02 May 2027 02:28:34 +0000
asID: 137378
IP address blocks: 103.119.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:87:28:09:f8:0a:70:3e:e3:62:71:9f:8c:84:73:41:47:d1:c1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796
Validity
Not Before: May 3 02:23:34 2026 GMT
Not After : May 2 02:28:34 2027 GMT
Subject: CN=1F55569A793AF3D0F1EC9B8287D86C7AC25875E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:25:21:f8:ba:f2:cf:d6:5b:34:8d:a7:72:
4d:4c:d2:cb:2f:c1:07:73:d5:0e:90:28:3d:9a:d8:
8e:97:07:d0:5c:d0:b8:58:f6:8d:0f:56:77:9d:ac:
87:20:7c:5c:ba:f0:2c:a3:5d:b0:25:37:a9:45:4a:
29:8b:72:40:be:aa:65:13:f4:92:16:b4:93:a8:96:
1a:f1:5c:20:b3:43:4d:fe:91:d4:6d:b3:35:46:25:
74:93:30:55:3b:5a:e3:25:e2:e0:5a:2b:22:7d:8b:
0d:93:a6:ba:89:b6:21:f7:33:f2:a5:c9:36:74:47:
64:ff:b5:b7:1c:d2:66:78:d4:67:8b:9f:29:0a:78:
e0:70:70:78:b5:74:c7:71:64:88:3d:36:99:93:72:
83:cc:44:58:66:d4:c9:7b:f3:1f:fc:55:ff:bf:b6:
f2:14:ac:24:79:8b:b3:60:8c:61:39:dd:f8:f6:7a:
94:85:30:a4:7b:80:4a:62:3f:60:27:9f:df:4b:5b:
06:9f:0f:0f:6d:b4:21:c4:94:30:52:66:2b:56:a0:
37:31:67:75:b5:f1:66:1d:04:16:87:aa:21:06:2e:
5b:94:94:7a:39:67:86:6e:12:9f:f6:a8:db:50:dc:
96:f6:87:96:26:4f:d6:fa:38:ca:77:9e:fc:cc:bb:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:56:9A:79:3A:F3:D0:F1:EC:9B:82:87:D8:6C:7A:C2:58:75:E6
X509v3 Authority Key Identifier:
keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:20:88:7c:21:7d:8e:33:52:f5:63:76:cf:62:7a:a8:00:79:
a9:fe:ae:51:1d:fd:a2:ab:59:f9:7b:63:a4:7c:f7:c1:30:bc:
08:fc:a4:ec:b2:90:f9:70:1e:c6:2c:94:9a:99:16:f6:74:01:
dc:0e:02:eb:0f:2f:a3:7b:8d:0a:8c:2a:fa:af:47:ed:c7:25:
a3:f8:28:62:0c:c9:cb:d7:8a:6a:74:df:ce:6b:32:c6:f7:d1:
27:a6:14:5c:e0:72:bd:f6:10:ea:29:4b:80:78:69:10:16:9c:
4b:c5:5a:52:0f:f5:76:45:31:db:45:0c:b4:74:9a:11:36:38:
88:e7:66:c8:89:07:a4:f7:2f:f7:1f:f2:7d:c2:cf:b2:27:d2:
d3:ad:cb:6f:21:c0:ba:96:11:5c:3c:11:f8:27:ec:d8:2e:c1:
32:d7:a1:9a:ce:21:66:06:01:dc:f9:ec:36:3d:0d:66:67:10:
19:a1:96:71:ef:ef:8a:c8:68:d1:19:07:6e:c2:77:53:f5:8e:
08:df:8c:24:db:2b:9b:2c:d9:7e:c1:af:b5:96:6e:4e:b3:ea:
2c:a7:4f:a7:22:02:b8:ad:4b:0e:fb:1a:bd:0b:93:fa:d6:6c:
0f:c0:99:23:40:dc:0f:da:68:5d:38:fa:e5:8f:9f:e8:54:45:
51:81:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:48 2026 by rpki-client