
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa
File: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (raw, json)
Hash identifier: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=
Subject key identifier: 7E:1D:83:F7:33:20:C9:E6:38:D5:02:08:BC:CC:7C:40:F4:59:C7:0B
Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796
Certificate serial: 6314992048DDDEC9E75CDED3D284296CC945FE83
Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa
Signing time: Sun 03 May 2026 02:28:32 +0000
ROA not before: Sun 03 May 2026 02:23:32 +0000
ROA not after: Sun 02 May 2027 02:28:32 +0000
asID: 137378
IP address blocks: 103.119.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:14:99:20:48:dd:de:c9:e7:5c:de:d3:d2:84:29:6c:c9:45:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796
Validity
Not Before: May 3 02:23:32 2026 GMT
Not After : May 2 02:28:32 2027 GMT
Subject: CN=7E1D83F73320C9E638D50208BCCC7C40F459C70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:7e:fa:7e:6e:6a:ba:9b:2c:dd:e0:ad:a9:
75:3d:99:e1:a0:31:f2:01:29:27:72:87:01:59:63:
20:c1:ca:8f:d7:23:a4:5b:3d:f0:b6:bd:32:e8:fb:
07:64:96:a4:81:af:a7:52:39:c7:84:eb:79:ac:6f:
12:fd:7a:4a:f9:db:e6:9e:6b:fe:ce:10:1b:a7:5c:
e1:64:56:9e:c2:ea:d1:f7:cb:a4:67:d3:15:b1:41:
f0:3e:39:e8:41:d6:70:32:08:e8:02:13:04:cc:66:
b9:1d:77:2e:6c:fa:8e:50:b1:95:9a:5c:f2:8b:f3:
96:31:5e:6e:4b:55:29:41:ef:81:71:89:9b:e6:8c:
cc:02:23:5e:99:8a:27:76:e5:e0:be:e8:56:24:85:
c4:71:4b:47:a0:16:01:53:3a:d3:13:54:9d:04:76:
1f:8b:2c:c6:22:fe:86:a1:42:d7:76:38:52:8b:08:
c4:19:3c:b5:f2:08:1d:f5:94:e5:82:ca:e2:d8:c8:
58:c5:f4:14:90:aa:8b:f6:af:a3:bd:8a:ce:9e:67:
00:63:db:83:eb:05:0a:b3:9c:1e:96:9a:33:2f:a0:
a7:39:c7:b3:94:4e:a1:13:f6:26:41:d6:d5:1d:c0:
4d:6c:7c:59:b9:21:e7:27:e0:f4:60:27:ff:ac:52:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:83:F7:33:20:C9:E6:38:D5:02:08:BC:CC:7C:40:F4:59:C7:0B
X509v3 Authority Key Identifier:
keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:67:21:27:30:1c:e2:7b:9c:89:7d:3b:89:8a:4a:47:c4:65:
93:78:5a:4c:0c:20:4a:6e:d1:22:b4:f0:45:12:6e:a7:b8:aa:
9e:af:21:a4:33:d5:63:a6:7d:e1:75:0d:dc:48:7c:07:53:21:
01:2f:10:bd:c8:38:19:8c:a1:23:67:64:c0:5c:35:81:7e:79:
1d:c0:49:9b:f6:ca:7b:9e:2c:ca:3b:05:19:a1:a1:25:c9:5e:
64:8a:e9:6a:4a:ab:3a:75:ad:1b:c8:f1:96:ea:f3:1d:6a:cc:
fb:44:a8:bd:ed:09:6f:73:05:7f:8d:91:9f:df:66:35:d6:42:
96:01:e0:43:55:cd:78:1f:a3:23:5a:0b:d8:e3:0e:b9:4e:0b:
0c:8d:8b:9a:e2:aa:b2:4d:47:f1:c1:22:66:3f:14:e0:07:da:
04:69:2f:36:e6:11:01:64:21:e5:a0:8d:76:b4:90:54:85:57:
f0:89:5f:1a:11:8f:dd:90:61:e8:f4:af:0a:e9:05:b3:ff:81:
52:3c:9a:93:6d:9a:7a:29:ef:d9:76:11:75:cc:8a:db:90:84:
db:2d:cf:82:f8:f6:1c:c3:ac:07:35:f7:cd:32:f4:6d:7d:68:
4d:ca:35:58:3a:c7:a5:a7:f5:f2:0b:4b:15:9f:0a:c0:26:17:
dc:b5:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:50 2026 by rpki-client