
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa
File: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (raw, json)
Hash identifier: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=
Subject key identifier: 2E:02:CF:7D:30:1D:7B:F8:50:70:DB:99:EE:FD:0C:DB:4D:C5:B3:A8
Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116
Certificate serial: 595C51E672C1BC7F2E52080680DD663EC51799C0
Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa
Signing time: Sun 03 May 2026 02:32:17 +0000
ROA not before: Sun 03 May 2026 02:27:17 +0000
ROA not after: Sun 02 May 2027 02:32:17 +0000
asID: 136070
IP address blocks: 103.84.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl
rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5c:51:e6:72:c1:bc:7f:2e:52:08:06:80:dd:66:3e:c5:17:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116
Validity
Not Before: May 3 02:27:17 2026 GMT
Not After : May 2 02:32:17 2027 GMT
Subject: CN=2E02CF7D301D7BF85070DB99EEFD0CDB4DC5B3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:79:07:22:59:e9:b8:c4:fc:f0:fe:fe:56:
96:a2:6f:b8:c0:e7:9b:78:c0:37:62:fb:b9:49:d9:
9f:77:91:2f:e2:6b:7c:c9:35:b2:42:7f:1c:2e:a9:
7a:f4:e0:e5:e0:b2:80:b3:f9:a1:ce:74:d5:6a:9e:
4d:7e:95:7d:17:e4:35:22:1d:6f:80:e2:d4:16:eb:
96:aa:22:c7:77:b1:f9:74:68:be:e2:d5:9f:6d:48:
4c:d5:41:8b:42:24:58:26:66:ff:df:6f:aa:3a:f3:
a0:c6:2a:38:77:29:75:fa:e1:5f:0c:ad:26:5e:7d:
2a:62:35:f4:bb:02:ba:6b:7b:c2:a1:39:42:c3:98:
8e:87:e2:6e:13:13:87:0a:02:5d:cb:d6:8f:92:71:
fb:8d:7b:d4:9c:f9:63:fd:e7:aa:44:3a:0a:3f:dd:
3e:d0:67:34:83:79:bb:c8:66:d2:3a:0c:6b:a0:29:
0f:c2:9c:8f:82:5f:c3:61:e8:5e:5d:d1:0d:e4:f6:
2b:db:07:92:10:13:58:bf:7e:41:33:b3:28:8c:8c:
2d:83:4d:4e:c4:1d:e3:74:f8:c7:9e:38:88:56:11:
a9:04:ae:49:b2:37:b4:d3:f0:34:ba:61:e8:10:04:
d0:38:82:26:8e:01:20:fe:5a:07:09:7d:17:65:64:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:CF:7D:30:1D:7B:F8:50:70:DB:99:EE:FD:0C:DB:4D:C5:B3:A8
X509v3 Authority Key Identifier:
keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5f:c0:d8:e2:57:9d:94:c9:63:29:64:5e:1a:04:2b:27:71:
65:b2:e5:bc:10:c9:87:a9:b5:54:0f:fe:f3:c2:cb:0e:b9:d9:
56:62:51:55:75:5c:68:f3:2f:fb:df:5c:dd:a5:d4:fe:12:6d:
1b:e8:35:53:52:81:8e:a6:37:af:c3:e0:d4:fa:8f:74:1d:9a:
75:da:9f:f6:76:ed:a4:cd:3b:76:ff:81:38:6c:96:73:0d:43:
bb:06:70:10:a1:92:a8:b2:2e:0d:2c:09:66:da:c2:b9:05:a5:
29:45:6c:2a:6a:15:7b:b4:8e:69:dc:7f:ec:e6:02:cb:c4:a2:
31:85:fd:05:e2:dc:bc:d1:c0:a1:7b:d8:60:7d:2a:2a:60:b6:
b4:f1:06:24:52:61:be:74:9d:9b:5d:e7:b5:81:f7:ad:6c:18:
c6:f0:c2:f7:54:1d:61:60:42:c4:4c:3e:2b:01:f9:10:e2:97:
89:80:a9:4d:f9:5d:5f:c5:42:f4:4a:9c:d6:c8:10:b2:09:35:
e7:b9:19:7d:98:e0:84:79:93:66:b0:ea:33:99:7e:1c:f0:35:
77:b2:ae:17:d7:eb:e3:25:45:10:88:34:f5:25:27:bd:82:d8:
11:fe:b8:f1:9c:5f:2d:76:43:42:d3:50:c2:bf:7b:7d:ff:ba:
ac:f4:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:02 2026 by rpki-client