
$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa
File: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (raw, json)
Hash identifier: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=
Subject key identifier: D1:D1:0E:1F:BD:51:EE:6C:29:8D:A7:D8:10:19:E8:CF:60:09:03:13
Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Certificate serial: 6B8DB21CB7CAE6B5A669E42B0FDF4D4104D6CA9C
Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa
Signing time: Sun 03 May 2026 02:32:45 +0000
ROA not before: Sun 03 May 2026 02:27:45 +0000
ROA not after: Sun 02 May 2027 02:32:45 +0000
asID: 137343
IP address blocks: 103.113.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8d:b2:1c:b7:ca:e6:b5:a6:69:e4:2b:0f:df:4d:41:04:d6:ca:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Validity
Not Before: May 3 02:27:45 2026 GMT
Not After : May 2 02:32:45 2027 GMT
Subject: CN=D1D10E1FBD51EE6C298DA7D81019E8CF60090313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:5b:4a:fa:63:e0:11:c8:34:f9:fe:16:1c:
06:cf:9a:a5:ea:b7:15:b8:02:e8:a8:d0:0f:39:58:
33:fc:ed:83:c9:c7:f8:d2:c4:93:1c:a3:95:ae:e6:
78:89:4e:d7:0a:5c:2b:7d:23:ed:83:20:94:bf:37:
16:ee:c1:26:9c:09:0a:dd:36:10:02:51:9d:a0:f9:
e7:1b:50:7b:ee:ab:7e:25:53:4c:86:9a:f5:cf:17:
18:e0:78:0b:5d:01:db:4a:29:c4:87:c3:a6:74:47:
91:f8:a0:71:26:ce:47:15:a2:d4:60:92:d9:4d:94:
19:0f:7d:b9:c1:15:e2:e7:df:0f:f1:8c:66:d6:8d:
2e:d7:68:8d:d9:7f:f1:7d:84:9a:6e:db:c7:0c:60:
f3:02:a5:4d:ad:8c:b8:b3:30:f0:b6:f3:00:39:4a:
4f:54:f2:79:03:7f:75:62:ef:f6:65:35:9c:66:79:
4e:97:cf:62:43:8a:b0:73:cc:c2:b9:28:09:9c:b5:
43:fc:ed:4b:23:1b:5d:76:ab:54:42:f3:4b:d4:c0:
68:56:bb:78:93:a4:5a:0f:66:4a:ae:8e:d7:a2:ef:
d6:00:12:68:2d:18:da:f9:ce:33:7c:07:96:8a:d0:
ce:f1:26:ea:83:8f:2d:84:68:e1:92:e6:df:69:82:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:0E:1F:BD:51:EE:6C:29:8D:A7:D8:10:19:E8:CF:60:09:03:13
X509v3 Authority Key Identifier:
keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.113.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:5e:61:46:9d:32:2a:37:b8:59:e5:7b:78:45:cf:00:56:e6:
31:e4:ec:98:e3:ae:2a:60:32:e7:fd:d7:72:17:74:00:8e:98:
12:c4:19:a4:ef:5c:13:99:68:ad:c1:ed:c3:68:cf:5e:97:f7:
2f:bc:87:96:6a:38:24:9c:38:e3:74:03:7d:39:37:7d:56:ff:
8c:3f:50:e6:ed:5d:7f:ce:13:94:95:d0:ce:0b:92:2d:bf:79:
3f:1d:8d:35:8d:93:94:ab:ae:db:ef:7b:f0:b2:72:7c:d6:9c:
82:52:c2:a6:54:c0:c8:d3:77:81:4e:f8:3f:c0:ca:1a:9d:56:
0a:85:36:7f:9f:21:1a:02:62:d2:80:46:0d:b6:c5:d0:41:17:
45:7a:6b:80:08:29:b7:1d:02:3a:49:c3:8c:80:4e:63:5c:f8:
49:88:ad:ae:a2:44:81:a3:9d:a8:51:b6:a4:32:7c:89:97:8b:
10:5f:6d:ee:ba:e9:b8:01:24:35:7c:19:0b:fd:8c:81:3a:03:
85:6e:e2:ab:e0:64:ae:96:50:b2:99:2d:8d:d5:5e:80:bb:b6:
fc:48:7c:43:11:5b:04:0d:1e:e2:b5:55:07:4d:21:20:a5:27:
80:d4:2f:65:ea:c9:8a:0a:88:87:af:24:0a:39:b7:58:95:90:
3f:5e:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:12 2026 by rpki-client