
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa
File: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (raw, json)
Hash identifier: f3wJQDXGzu3D9hBo8GBwbAPITCCR387RhleY4wa8/xI=
Subject key identifier: C7:7E:D8:C3:23:70:BD:7B:CC:6E:61:E2:63:8F:90:E5:0A:D5:E7:8E
Certificate issuer: /CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Certificate serial: 2EC5A3A5F71F57E169E68E8424E9C0DB358C9BE1
Authority key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa
Signing time: Sun 03 May 2026 02:30:24 +0000
ROA not before: Sun 03 May 2026 02:25:24 +0000
ROA not after: Sun 02 May 2027 02:30:24 +0000
asID: 137288
IP address blocks: 103.107.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c5:a3:a5:f7:1f:57:e1:69:e6:8e:84:24:e9:c0:db:35:8c:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Validity
Not Before: May 3 02:25:24 2026 GMT
Not After : May 2 02:30:24 2027 GMT
Subject: CN=C77ED8C32370BD7BCC6E61E2638F90E50AD5E78E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:cf:2b:f0:e2:fa:53:8d:b0:f3:9d:3e:c8:
75:87:d6:dd:18:08:c1:27:b5:74:57:13:bc:d8:f8:
f6:57:69:ba:8e:a9:b9:b1:3a:85:f6:b3:28:68:e3:
24:11:4d:80:01:46:f4:dc:51:f6:b3:77:5d:90:30:
14:b8:ee:0b:09:79:04:7b:78:8d:a5:c8:0d:d3:b8:
45:7c:1c:5d:1c:49:a1:47:00:54:a8:2f:d7:a5:31:
e1:7f:63:ce:ed:5c:f2:4f:3c:b4:fc:1d:7b:0e:d2:
8b:07:6b:95:5b:8e:18:98:65:bb:2e:42:65:c8:5d:
47:dd:72:0f:b7:e4:23:b3:2a:9d:44:fe:28:05:4d:
0e:ae:15:8d:48:8b:83:e2:c7:68:28:a5:b6:b1:cd:
83:32:4e:87:21:34:01:3f:76:ec:ba:01:5b:13:d0:
75:2b:13:02:f6:21:09:4b:d4:91:97:c4:12:a1:36:
71:9a:66:23:3c:e5:e0:a3:f5:00:7b:25:ee:5e:bb:
75:d5:3d:71:51:a6:99:d5:e2:6a:42:9d:47:77:16:
0c:91:8f:3c:71:f6:f2:bf:75:b7:03:d3:12:07:06:
14:98:50:59:33:91:29:d9:66:96:ba:cf:c0:2c:4a:
e9:2a:42:65:db:93:02:45:e5:38:db:22:75:89:59:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:D8:C3:23:70:BD:7B:CC:6E:61:E2:63:8F:90:E5:0A:D5:E7:8E
X509v3 Authority Key Identifier:
keyid:F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:23:a6:cf:c6:cf:29:33:24:bf:b4:08:95:16:47:1f:17:db:
f7:dc:8a:17:56:a3:6f:aa:36:63:86:43:3e:bb:2c:a7:b5:2e:
ca:08:0f:b9:25:b4:93:08:08:d2:09:2f:a0:7a:e3:54:77:5d:
e6:2d:07:06:70:50:12:2e:76:86:10:72:76:f4:11:7c:bd:44:
60:c2:46:d5:22:11:a7:30:54:cb:50:01:ec:56:68:19:b7:fb:
3d:37:69:37:e8:f1:a8:91:df:58:4a:81:c6:e7:48:55:39:4c:
4f:53:1e:a5:c0:cb:ba:27:f2:83:be:90:d1:39:29:77:fd:60:
f3:c3:48:c9:ec:12:1e:04:0d:9d:61:de:7b:ae:f4:c1:e9:13:
8a:bb:a3:40:98:82:d6:5a:49:e0:06:38:e4:b8:6c:de:00:c6:
dc:95:1b:87:15:89:e7:3a:45:b8:76:0d:1a:33:05:42:8a:b5:
bc:db:f7:fa:0b:ca:e9:f7:3f:d2:3d:d6:42:38:b0:29:61:92:
84:f8:85:f1:72:ec:1e:b9:4f:c8:06:90:7e:a1:f5:90:76:88:
59:83:bb:10:30:33:4f:16:25:c5:89:06:00:b8:b0:81:08:89:
e0:5e:01:d5:ae:7a:43:7b:4e:2a:93:53:6d:98:07:0e:ba:a0:
11:ab:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:07 2026 by rpki-client