
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
File: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=
Subject key identifier: E0:09:02:83:60:1F:56:82:75:2A:C1:D1:F9:7F:76:7A:E9:46:28:E4
Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Certificate serial: 517A607BD69B0E762681F68B39DE52E074467A76
Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
Signing time: Sun 03 May 2026 02:31:29 +0000
ROA not before: Sun 03 May 2026 02:26:29 +0000
ROA not after: Sun 02 May 2027 02:31:29 +0000
asID: 58477
IP address blocks: 103.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7a:60:7b:d6:9b:0e:76:26:81:f6:8b:39:de:52:e0:74:46:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Validity
Not Before: May 3 02:26:29 2026 GMT
Not After : May 2 02:31:29 2027 GMT
Subject: CN=E0090283601F5682752AC1D1F97F767AE94628E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7e:d2:07:7f:5b:4b:cd:e2:a5:7b:67:cc:28:
e0:dd:b7:b5:57:29:f4:ce:b3:c3:3b:bc:d0:d9:44:
1b:75:c8:30:54:64:6e:b7:33:63:44:4f:50:9e:fa:
ac:13:47:e4:3f:f5:9c:49:23:75:8b:46:76:8a:a4:
7b:8c:19:35:b7:c9:4d:71:86:97:ab:46:6c:7f:97:
c5:29:c4:58:e3:54:fe:af:65:ba:ee:35:ad:fa:3e:
ae:c5:ae:62:46:0c:22:48:fe:94:94:9f:aa:f9:16:
c5:90:00:71:b7:c0:9e:b4:e8:60:66:ed:8a:c2:f4:
58:d4:2c:2f:c4:8d:94:32:45:7e:18:2e:07:76:4f:
69:dc:31:be:bd:3e:f0:49:29:dd:d3:f9:76:60:9e:
a8:3b:cb:37:28:61:bc:65:10:39:89:3f:71:97:03:
d2:4c:d1:0e:83:10:bf:51:6a:64:00:84:55:c2:f7:
e4:b7:6b:a2:f5:d7:e3:0c:dd:40:15:b8:04:3c:51:
90:ac:4b:64:76:67:ac:45:39:bf:ae:b3:2d:c2:14:
bb:e9:3c:72:ab:f3:14:b6:6c:3d:28:15:45:92:14:
89:df:9e:1b:d7:df:fa:3c:6c:55:01:89:78:2b:ca:
c8:0a:b8:8b:d0:b8:08:21:1c:22:2d:f1:22:94:5d:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:02:83:60:1F:56:82:75:2A:C1:D1:F9:7F:76:7A:E9:46:28:E4
X509v3 Authority Key Identifier:
keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6e:70:70:21:50:e0:d8:fe:4c:9a:6b:50:af:5d:d3:26:c5:
25:a8:2e:70:33:1a:27:6d:38:70:ab:c1:af:a1:d4:6e:f3:db:
52:45:62:26:ed:6b:85:2c:f8:24:29:8c:8c:7f:cf:61:0e:4f:
b2:cf:26:c0:e4:d8:84:32:48:37:b4:4b:19:5a:be:66:35:99:
28:e8:a6:21:85:39:63:47:9f:2c:a8:92:9b:8d:db:af:8c:f9:
40:ad:3c:28:29:bc:76:86:4a:97:1c:e5:ce:76:0b:d0:d9:11:
1f:ed:7a:5c:ab:18:09:e5:74:b8:3b:e7:8e:5e:6e:49:16:a3:
6d:da:6d:d4:34:71:46:6b:5a:0c:41:bc:49:9b:a5:c3:c9:40:
1c:7e:ba:6e:69:a1:f7:c4:98:df:df:0e:51:b1:f6:a4:a8:32:
36:ed:b7:9b:56:62:84:dc:35:fa:9c:ba:7f:36:c4:e8:50:d3:
c9:81:b8:e3:c8:1d:38:81:70:cd:4e:45:7c:ac:3a:d3:fc:d3:
68:01:b1:8c:5e:75:95:62:35:97:88:3f:11:9d:67:92:a9:32:
2e:aa:a8:51:33:c1:8b:b4:f3:2c:0a:0e:7d:f5:f0:ff:dd:51:
e4:46:f2:4f:87:72:a9:cb:c1:81:eb:0c:c4:bb:f7:1e:ed:5a:
95:dc:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:09 2026 by rpki-client