
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
File: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (raw, json)
Hash identifier: 18eMz8teTkkcf9p+UfDdXZ6oyQLlhohSPsxmAeH1CuI=
Subject key identifier: E1:1E:17:3E:F9:70:8E:B6:B3:2F:1A:55:34:4B:0B:5B:F9:7C:E8:94
Certificate issuer: /CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206
Certificate serial: 7D15BAEEA710B31E3DB9B557B0DA02B5DE18FA5E
Authority key identifier: FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
Signing time: Sun 03 May 2026 02:28:59 +0000
ROA not before: Sun 03 May 2026 02:23:59 +0000
ROA not after: Sun 02 May 2027 02:28:59 +0000
asID: 136099
IP address blocks: 103.89.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl
rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:15:ba:ee:a7:10:b3:1e:3d:b9:b5:57:b0:da:02:b5:de:18:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206
Validity
Not Before: May 3 02:23:59 2026 GMT
Not After : May 2 02:28:59 2027 GMT
Subject: CN=E11E173EF9708EB6B32F1A55344B0B5BF97CE894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:23:7d:2e:60:f9:0b:f4:2c:a3:6d:89:06:
1f:d1:ac:38:47:0c:13:c4:b7:8e:47:10:0f:81:bd:
9f:5a:05:2f:c7:d2:12:5e:73:f7:32:52:6d:37:ec:
a2:1c:e6:cc:5c:dc:6f:3a:c1:8a:b3:40:74:90:1a:
1c:bf:41:4a:06:48:9f:2f:12:0b:ac:3c:84:c0:24:
c5:52:db:76:d9:9c:ba:7c:be:93:3d:a7:22:bf:da:
75:98:80:b5:23:86:57:fd:b0:c2:e0:f5:fc:89:a9:
69:62:fe:6d:65:19:9b:ec:5c:48:1b:b3:7a:4b:69:
3f:68:9d:b0:10:6d:3b:a9:7c:df:52:c3:8b:d6:14:
6f:10:c1:82:00:04:1c:34:cc:83:73:4f:c8:08:d2:
db:39:73:8d:bf:4a:ae:fb:c1:ed:fd:db:11:c9:74:
6e:5d:d8:fc:b2:78:f3:10:a7:b4:cd:3d:03:52:d6:
61:70:b2:e5:fb:bd:06:24:83:7c:64:df:67:46:13:
24:eb:48:13:51:3c:d9:11:4e:92:79:40:b5:09:fd:
6e:dc:20:04:9b:90:f3:b9:70:a6:e8:12:e3:49:0d:
cd:6a:6a:b0:b9:19:a1:51:79:b1:0c:48:34:04:89:
73:73:a1:f6:83:c6:a6:a4:ac:24:18:5b:be:a2:ef:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:17:3E:F9:70:8E:B6:B3:2F:1A:55:34:4B:0B:5B:F9:7C:E8:94
X509v3 Authority Key Identifier:
keyid:FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:52:e5:63:ac:8c:f0:83:5f:6e:0b:6a:86:d7:68:d5:fa:6b:
19:98:6b:1a:a1:62:ee:70:7a:54:8f:2f:78:b7:72:bf:02:d8:
95:ae:1e:2e:69:e4:51:2a:34:0b:9f:6a:ee:4c:68:85:bf:68:
0a:58:1c:1a:c5:3a:22:d0:4d:4b:b5:ed:57:25:ef:af:91:03:
5b:24:16:d3:bc:4a:ec:8c:59:e5:29:4c:43:09:32:ef:d2:94:
88:70:cb:73:d6:76:f8:33:c2:8f:cd:01:04:09:2e:a3:63:3e:
38:5f:1e:e3:af:df:6e:2a:e0:41:6e:43:8b:3d:e4:aa:ed:9e:
1c:03:b2:1c:ef:ab:f2:84:91:33:b1:e8:21:a9:7d:e4:8a:cb:
69:74:35:15:9d:63:6f:75:b8:15:e7:77:ff:a2:d9:64:18:63:
1e:9b:ae:36:1c:96:d3:e6:0b:fd:ae:6a:56:49:43:6f:95:e3:
09:59:2a:72:99:4b:c3:04:6f:92:0e:6f:0c:62:37:7e:c6:8d:
64:f1:cd:aa:7e:15:46:24:37:70:13:1c:5c:9c:a2:c1:68:74:
2c:73:71:eb:f5:d1:5d:a4:a3:ca:87:84:ea:56:70:f4:6a:3c:
d9:2c:93:cc:6c:23:50:fe:b2:fd:e9:ba:c7:52:e6:e6:29:5d:
c7:9a:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:24 2026 by rpki-client